Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/Mu_PHcskiDMOsf8Lu3bghNPaBSs.roa
File: Mu_PHcskiDMOsf8Lu3bghNPaBSs.roa (raw, json)
Hash identifier: zmGJW78ESnt5qyc7H0FvKxd73j61jVlq2vV44uZ4YOY=
Subject key identifier: 32:EF:CF:1D:CB:24:88:33:0E:B1:FF:0B:BB:76:E0:84:D3:DA:05:2B
Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial: 01856F4B65A231CCD3DD7517F99E13E47CE7
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/Mu_PHcskiDMOsf8Lu3bghNPaBSs.roa
Signing time: Sun 01 Jan 2023 21:44:50 +0000
ROA not before: Sun 01 Jan 2023 21:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210636
IP address blocks: 45.15.208.0/23 maxlen: 23
45.15.210.0/24 maxlen: 24
45.86.190.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:65:a2:31:cc:d3:dd:75:17:f9:9e:13:e4:7c:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Validity
Not Before: Jan 1 21:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=32efcf1dcb2488330eb1ff0bbb76e084d3da052b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:85:4b:14:87:e4:b0:99:11:be:01:07:7f:47:
bb:7b:25:7b:ff:19:e6:80:49:21:06:e8:6b:29:f0:
99:28:92:97:4c:8d:65:a7:89:a0:fb:d1:c0:2e:05:
08:d3:18:4e:2d:c2:90:7b:03:72:d0:95:0d:63:9b:
63:06:08:50:36:85:be:11:ec:40:3a:d1:30:b8:ea:
be:22:74:4b:23:cb:b0:f2:4c:49:ec:57:27:09:05:
a7:4e:a3:a5:35:66:f0:97:38:2f:e3:d8:e4:db:a8:
7d:ea:a5:22:63:01:a0:f3:e4:4c:89:da:89:5c:f5:
9a:c7:ec:7a:91:6d:92:33:76:07:48:fe:f9:ad:0e:
9c:fd:73:69:7c:8c:ea:9b:cb:d1:06:c6:32:c8:c7:
e3:60:29:9c:ec:95:53:64:21:07:0e:dc:fc:f6:0a:
f6:d0:25:ef:fd:de:06:82:ad:ef:60:52:b8:fb:f5:
25:84:a4:59:42:99:d9:e7:08:46:a6:04:38:89:c1:
a3:bf:40:ca:20:a4:76:cf:cb:ae:14:44:b4:a2:b7:
c9:3a:e8:27:62:38:c5:82:4a:af:a3:17:9c:90:1b:
57:4e:90:c8:fa:48:bf:b0:46:4a:c9:39:59:a1:2f:
04:4e:8c:0a:ca:c7:26:42:8a:9d:9e:bb:41:16:ef:
70:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:EF:CF:1D:CB:24:88:33:0E:B1:FF:0B:BB:76:E0:84:D3:DA:05:2B
X509v3 Authority Key Identifier:
keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/Mu_PHcskiDMOsf8Lu3bghNPaBSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.208.0-45.15.210.255
45.86.190.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:8f:a4:72:57:6a:bf:51:77:ce:e0:b6:7b:70:76:84:04:1f:
4c:3c:bb:8c:40:f1:5a:d4:a3:ad:80:33:f1:12:90:f3:89:e5:
cc:7e:0e:c7:af:e0:ab:b9:e1:2d:0e:ce:79:16:95:6d:26:c1:
7b:ba:12:8c:7d:ec:90:b2:0f:31:8b:21:37:af:e7:3a:ee:b6:
1e:d1:de:bf:39:e3:1e:d5:ce:8d:7a:4b:37:12:e1:02:67:ea:
6b:1e:8e:8b:d9:67:43:28:e9:1a:6f:44:a0:77:c7:ab:35:35:
47:c4:d1:ae:08:b3:a9:be:bd:86:c2:ab:fa:05:60:a6:0e:a5:
1f:0e:d1:d1:4a:5f:7a:e7:09:db:d8:7d:24:92:73:54:d6:31:
52:9a:12:9e:dc:54:ea:69:9a:99:36:2e:9a:6b:f2:e7:53:c6:
a0:f1:6c:7f:2f:67:78:c5:26:f7:11:a5:24:c3:80:6e:2b:54:
54:39:be:cb:9d:ac:1a:d7:65:39:1a:6f:11:75:33:40:4d:66:
21:fd:9a:eb:b1:fb:51:de:69:40:ce:f0:85:84:7b:dd:ad:a2:
4c:14:dc:7c:0a:43:d7:88:26:41:f2:cc:0e:7c:4a:40:e3:d2:
ae:ab:39:ce:35:31:be:8a:9c:bd:00:95:22:bd:0e:ee:8c:de:
a9:57:7e:c6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:11 2023 by rpki-client on console-ams.rpki-client.org