Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/sRgFu7saXWfYGeq0bXpuRux4klg.roa
File: sRgFu7saXWfYGeq0bXpuRux4klg.roa (raw, json)
Hash identifier: yRZpKNMRlnN31IdZkk6hk0q8UT533znRC6AElRKRFl4=
Subject key identifier: B1:18:05:BB:BB:1A:5D:67:D8:19:EA:B4:6D:7A:6E:46:EC:78:92:58
Certificate issuer: /CN=4a4ad03a0f592bb9c97c3052a690125d846415a4
Certificate serial: 01856F1DBD2BFD5DFBCF3FB785E163A3E2F1
Authority key identifier: 4A:4A:D0:3A:0F:59:2B:B9:C9:7C:30:52:A6:90:12:5D:84:64:15:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SkrQOg9ZK7nJfDBSppASXYRkFaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/sRgFu7saXWfYGeq0bXpuRux4klg.roa
Signing time: Sun 01 Jan 2023 20:54:58 +0000
ROA not before: Sun 01 Jan 2023 20:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207782
IP address blocks: 45.81.103.0/24 maxlen: 24
45.81.102.0/24 maxlen: 24
45.81.101.0/24 maxlen: 24
45.81.100.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:1d:bd:2b:fd:5d:fb:cf:3f:b7:85:e1:63:a3:e2:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4ad03a0f592bb9c97c3052a690125d846415a4
Validity
Not Before: Jan 1 20:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b11805bbbb1a5d67d819eab46d7a6e46ec789258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:63:60:08:9d:79:55:b4:5f:3a:1a:b2:ea:0e:
b8:8a:db:65:c6:cf:1c:ec:bf:f2:1e:b3:54:68:af:
d0:9e:c2:aa:5e:66:d0:d6:a0:55:08:88:be:67:9d:
5a:6c:5c:fc:d6:65:28:dc:48:bb:4e:5f:7e:57:dc:
52:de:fe:b9:90:0f:bb:f1:9f:54:36:9a:1f:bf:ad:
9d:89:74:0e:c5:1a:cc:f4:ae:62:43:a0:9d:01:dd:
ef:01:a6:f7:37:3f:7b:23:96:f4:5e:45:8d:65:11:
68:a9:d5:dd:8d:45:9f:c1:fd:cb:c0:f3:19:77:c7:
67:15:2d:c3:82:d2:25:20:ab:bb:cb:81:5d:26:76:
42:91:3a:d1:f2:79:09:46:8d:38:7f:b1:03:48:b8:
a3:44:24:df:1e:14:7f:91:d0:73:76:1c:03:66:f9:
74:da:a3:18:f7:0b:0c:ed:a2:98:df:00:8c:44:9d:
09:f2:05:7b:db:82:11:73:b9:6d:16:90:ed:4d:11:
d3:81:c2:92:b8:f1:7d:db:10:63:87:f5:c7:a8:e3:
81:ba:be:54:38:a1:c4:fb:7b:67:6b:82:ee:a4:78:
53:53:c4:16:3d:a8:0d:87:d5:7d:70:55:a3:78:7f:
5f:65:66:fe:e7:2d:21:12:37:01:f5:02:04:9f:27:
92:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:18:05:BB:BB:1A:5D:67:D8:19:EA:B4:6D:7A:6E:46:EC:78:92:58
X509v3 Authority Key Identifier:
keyid:4A:4A:D0:3A:0F:59:2B:B9:C9:7C:30:52:A6:90:12:5D:84:64:15:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkrQOg9ZK7nJfDBSppASXYRkFaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/sRgFu7saXWfYGeq0bXpuRux4klg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.100.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:fa:7f:84:eb:41:25:d9:35:76:ce:33:5a:f7:f0:49:a8:bd:
3c:1b:e1:a1:6c:f8:dc:43:95:80:fe:1b:ff:d0:89:30:0f:9d:
29:bf:a4:14:65:80:1d:19:60:f3:77:56:b7:6f:70:40:dc:53:
56:ac:23:0b:2a:7b:26:a0:9a:aa:ff:3d:00:4c:a0:03:8d:27:
77:4d:f0:1d:bd:be:4f:19:a4:ac:49:41:a1:0e:17:64:a7:ac:
f7:27:99:ec:c9:fc:19:9b:85:58:96:ef:fc:bc:e8:d8:1c:71:
47:f4:50:d1:71:9d:f2:35:82:6d:f8:86:30:2d:4b:dd:c1:94:
72:6f:59:06:d8:8e:5e:c2:cf:69:9d:07:89:68:17:96:95:77:
3b:20:6f:24:22:c5:5d:0d:dd:a5:02:62:7a:5f:2d:98:dd:77:
5d:19:7e:8d:ce:0f:07:57:ff:76:56:ad:d7:1a:76:24:5f:85:
ce:ef:48:2e:76:48:b5:91:41:bc:5a:7b:73:ce:f5:e2:08:04:
26:a0:7f:c3:65:90:c5:47:92:84:71:c8:5c:df:f3:2d:93:ec:
81:3d:a4:1b:ce:41:bd:01:20:2e:2b:91:f6:0f:35:9d:a9:b0:
cb:c0:38:03:2a:c2:0b:30:53:a1:99:bd:bc:f5:0a:c8:b3:1f:
e4:bd:6e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:28 2023 by rpki-client on console-fra.rpki-client.org