Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/l34f4fIYlXT7gJnnphILkukC5Ms.roa
File: l34f4fIYlXT7gJnnphILkukC5Ms.roa (raw, json)
Hash identifier: f5wgGGWJvQaznHXY339m71E+ZQqMP2VWqhU9fen2c2E=
Subject key identifier: 97:7E:1F:E1:F2:18:95:74:FB:80:99:E7:A6:12:0B:92:E9:02:E4:CB
Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial: 018C0FEFC7E0731FBB388D08904C6D03DD34
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/l34f4fIYlXT7gJnnphILkukC5Ms.roa
Signing time: Mon 27 Nov 2023 08:40:21 +0000
ROA not before: Mon 27 Nov 2023 08:40:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 45.145.148.0/22 maxlen: 24
45.84.59.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:0f:ef:c7:e0:73:1f:bb:38:8d:08:90:4c:6d:03:dd:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Validity
Not Before: Nov 27 08:40:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=977e1fe1f2189574fb8099e7a6120b92e902e4cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:29:a8:88:c9:e9:16:1d:89:29:c7:5e:76:3f:
da:d0:bb:cf:10:e1:39:92:61:40:70:7c:70:d9:f9:
35:b4:44:c7:e9:cb:32:bf:37:71:6c:6f:9e:86:ad:
7a:41:b2:3c:82:d4:59:e9:67:60:94:33:f6:23:ee:
d0:3d:ab:6d:54:a8:6d:ba:76:97:da:ce:b3:b7:81:
d5:da:59:6d:49:7d:44:fe:7f:56:69:bf:38:34:c5:
87:21:0c:f0:f3:4d:20:6a:2c:13:11:87:84:c3:ab:
cb:cd:bb:0b:a6:23:fd:03:16:85:99:8a:fb:2a:45:
c4:23:f1:06:af:ee:a8:e9:fe:73:be:84:1c:3c:75:
cf:2a:93:1e:36:62:33:89:ad:f3:20:be:f9:49:d7:
8d:d7:84:99:7a:66:6a:0a:84:91:73:83:56:e1:af:
d4:7f:c9:17:b0:dd:06:66:a3:87:a0:b0:c0:96:25:
38:b1:bd:cd:d0:f5:73:b0:b7:4d:88:d9:53:dc:05:
bf:79:a5:e0:55:d0:03:69:62:07:e4:f8:8c:21:3d:
94:fd:88:56:4d:95:e2:c0:56:3b:ab:69:7b:72:2a:
c6:25:e8:82:66:08:a3:31:a9:73:eb:2c:13:b8:23:
39:cf:5b:e8:ea:83:74:af:ef:5a:20:5c:45:3b:99:
f8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:7E:1F:E1:F2:18:95:74:FB:80:99:E7:A6:12:0B:92:E9:02:E4:CB
X509v3 Authority Key Identifier:
keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/l34f4fIYlXT7gJnnphILkukC5Ms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.59.0/24
45.145.148.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:60:28:43:83:74:89:d6:cc:b3:ce:fa:bc:6d:55:21:3b:c6:
55:62:ad:c2:31:db:19:9a:90:be:2e:d6:b8:08:44:26:80:10:
2f:5c:d5:7e:30:3d:1c:a0:ef:4b:42:6e:8e:33:6f:86:ce:da:
8c:4c:57:9e:2e:d9:87:35:95:6c:25:b2:8a:58:55:51:55:bc:
a7:f4:6f:ce:2c:e4:65:d5:39:19:19:f1:c6:e8:ba:c9:8f:45:
46:c2:08:3a:60:a4:64:b6:45:76:83:a5:34:23:44:b7:41:80:
89:f0:15:88:5c:d9:98:ad:9d:bd:b9:e7:d5:ae:cb:4a:52:7d:
0a:21:44:f8:07:09:53:15:58:33:66:1b:ea:d5:d9:e5:83:91:
88:d8:49:cb:bc:b1:4d:c1:1b:af:01:b3:3f:b9:1a:a3:5a:6e:
b1:39:15:25:b5:07:88:93:29:f3:85:33:5b:5c:46:ef:43:39:
02:5c:b2:e2:d0:a0:eb:21:3d:58:29:32:a3:4f:cb:0f:70:c7:
ca:b0:96:a6:2c:fe:6d:80:bc:0a:66:fe:33:8b:7a:d2:db:0f:
b5:32:8b:5a:c9:76:51:da:8a:91:3b:9c:16:77:ae:c1:51:8a:
71:13:e9:0d:df:13:3f:d3:35:b5:3c:a9:a5:85:2a:20:90:07:
b9:bf:4a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 28 10:01:30 2023 by rpki-client on console-ams.rpki-client.org