Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/a6wREF8HIgWFm84--5K78Ngck5o.roa
File: a6wREF8HIgWFm84--5K78Ngck5o.roa (raw, json)
Hash identifier: r1nvQ8iWCU0coxwbuBpZTks1c4vIMzjRw2GmikzzDCo=
Subject key identifier: 6B:AC:11:10:5F:07:22:05:85:9B:CE:3E:FB:92:BB:F0:D8:1C:93:9A
Certificate issuer: /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Certificate serial: 0189B31E06EB07CCE41243C81CAE4EFB2792
Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/a6wREF8HIgWFm84--5K78Ngck5o.roa
Signing time: Tue 01 Aug 2023 22:00:36 +0000
ROA not before: Tue 01 Aug 2023 22:00:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204843
IP address blocks: 45.89.30.0/24 maxlen: 24
45.89.31.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b3:1e:06:eb:07:cc:e4:12:43:c8:1c:ae:4e:fb:27:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Validity
Not Before: Aug 1 22:00:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6bac11105f072205859bce3efb92bbf0d81c939a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2c:e0:57:b8:7e:f9:5d:a5:ae:be:39:84:4f:
6c:5e:52:3c:58:4a:26:05:ba:d7:9e:e7:0c:c3:fa:
fa:8b:31:0c:7a:ca:92:07:4f:c9:b7:4c:2e:d3:13:
75:4b:1b:09:f4:44:e0:52:4b:f2:ad:d2:48:5b:b1:
c7:0a:41:56:f2:f5:8e:47:74:a1:43:9b:0c:e4:10:
34:40:b7:2f:63:50:aa:e1:b1:7e:78:9b:ef:52:50:
71:cf:09:37:4b:74:cb:0f:b7:ef:7a:c5:47:f7:2a:
f1:bc:bc:7a:76:79:1d:5f:46:58:4a:f9:de:92:ec:
07:23:58:1d:ff:c6:20:54:7a:e6:f1:1c:f8:b9:1f:
ab:ba:08:01:7b:96:e5:1f:b6:b7:30:94:57:51:00:
2d:1e:2b:27:f6:bf:74:93:fe:6b:0a:3a:6d:65:8d:
63:06:11:fb:0f:68:b7:c0:52:f0:d3:a7:a2:cb:29:
f9:3e:51:a5:78:01:d2:81:71:21:3a:94:be:00:f8:
67:3e:65:31:90:d3:b0:fd:2c:a9:a2:cf:3c:29:60:
9a:f5:89:8c:f3:1c:42:1d:e6:a2:23:10:02:db:b2:
f7:4b:4b:46:77:3e:a2:31:4d:6a:9d:59:b9:12:44:
7d:28:75:c3:bf:b2:7d:c2:e9:72:2a:de:ce:7e:0a:
10:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:AC:11:10:5F:07:22:05:85:9B:CE:3E:FB:92:BB:F0:D8:1C:93:9A
X509v3 Authority Key Identifier:
keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/a6wREF8HIgWFm84--5K78Ngck5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.30.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:10:c1:52:bf:b0:30:3b:9f:d4:98:27:c0:d4:c1:91:1b:1f:
37:fc:52:57:01:ac:6d:b1:97:ad:fc:12:28:89:9c:16:b4:ec:
a0:4a:f8:a3:40:4b:c7:fa:8d:04:41:e7:42:65:9f:41:1c:b9:
9d:fe:bb:83:98:b8:d6:63:79:5a:00:fb:e2:10:45:52:3a:f1:
05:0d:dc:6f:a3:4f:0b:e8:2d:c7:e7:77:47:98:e0:bb:da:a4:
3e:93:eb:b9:ac:95:10:87:a4:55:8c:73:51:43:c1:60:e2:0d:
1e:e7:6b:eb:1a:aa:34:46:e4:0c:db:74:4a:e6:54:ed:44:13:
23:34:f6:a4:b3:a7:3a:d0:6a:8a:ec:aa:ee:be:c3:4b:d9:14:
e9:a8:30:2f:18:98:f6:e5:f8:41:05:b3:21:40:66:36:02:4d:
dd:e3:85:2d:64:f5:44:1c:14:36:37:3c:a2:d2:22:93:3d:77:
f1:75:dc:f0:39:ce:92:16:07:41:d0:e9:a9:15:38:35:61:20:
6a:10:65:70:b5:85:81:a9:77:33:b1:8d:4e:d5:ca:1a:3b:a6:
dc:ee:aa:49:cf:34:6b:7c:50:30:4e:7e:b0:ec:a2:88:91:a5:
38:b4:93:a4:22:44:81:77:0f:60:7c:67:2d:67:7e:5b:31:b3:
0c:35:43:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 7 14:22:04 2023 by rpki-client on console-ams.rpki-client.org