Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/8GF3_6XTNmnlcUfMWpgEOVxhZiU.roa
File: 8GF3_6XTNmnlcUfMWpgEOVxhZiU.roa (raw, json)
Hash identifier: 3NA+Mi1VAne9p/l3VQwJhKGl387umSQShEibrVPqX/M=
Subject key identifier: F0:61:77:FF:A5:D3:36:69:E5:71:47:CC:5A:98:04:39:5C:61:66:25
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 0189409766C4F0CE3DBE44DF63341D84FDB3
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/8GF3_6XTNmnlcUfMWpgEOVxhZiU.roa
Signing time: Mon 10 Jul 2023 16:16:51 +0000
ROA not before: Mon 10 Jul 2023 16:16:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207810
IP address blocks: 217.113.12.0/22 maxlen: 22
217.113.18.0/23 maxlen: 24
45.159.73.0/24 maxlen: 24
45.159.74.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:40:97:66:c4:f0:ce:3d:be:44:df:63:34:1d:84:fd:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Jul 10 16:16:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f06177ffa5d33669e57147cc5a9804395c616625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:58:ad:a4:80:3e:c7:c7:3b:ec:d1:c8:9b:dc:
89:fb:ec:d1:b6:bb:4c:cc:15:0f:3a:f6:4a:84:31:
2a:e8:3d:26:27:44:e5:df:6d:0b:b4:27:b6:3e:80:
90:93:b2:93:35:f7:31:62:a6:74:eb:20:11:b4:4c:
19:69:e4:39:a8:83:b0:d7:c8:48:79:46:b3:ce:36:
41:ec:a6:10:e1:9f:26:b3:ca:15:31:94:20:7d:35:
eb:22:7d:01:8c:79:e5:e9:af:40:bc:19:ef:c0:41:
1f:d3:64:10:b3:18:84:01:63:e2:22:45:88:f0:1c:
4d:92:f8:ec:19:e2:96:93:78:3b:3c:ba:25:6a:bb:
d7:64:a8:a4:cf:13:8c:b7:fd:12:c8:5f:e9:3f:6c:
85:5b:04:62:88:7a:b7:78:98:c2:71:d8:09:37:f3:
61:44:03:6c:6b:93:6d:4e:a3:de:23:37:35:8c:47:
80:2a:95:37:b3:36:45:a4:63:0d:a8:90:86:5b:7c:
56:59:c2:90:e4:23:c6:ef:ee:9c:c1:52:de:1f:a9:
bc:5c:c7:4c:96:83:36:34:c0:ff:fd:98:51:6d:76:
4d:e6:f2:7c:0e:1c:48:fc:5a:0e:88:68:e9:7c:28:
1a:b3:2e:9c:66:3b:49:5f:dc:06:64:81:28:1f:7e:
0b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:61:77:FF:A5:D3:36:69:E5:71:47:CC:5A:98:04:39:5C:61:66:25
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/8GF3_6XTNmnlcUfMWpgEOVxhZiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.73.0-45.159.75.255
217.113.12.0/22
217.113.18.0/23
Signature Algorithm: sha256WithRSAEncryption
39:d6:19:6e:99:5d:ce:08:14:d1:ef:67:f6:e6:22:fa:10:ae:
b1:ee:48:c5:92:55:c8:84:c5:8a:34:62:45:29:9d:bc:44:47:
b2:07:c6:4c:b8:48:9a:0a:47:90:07:f6:f7:5e:22:dd:07:58:
e2:b8:11:11:37:89:31:4b:fe:87:84:51:ce:97:e7:74:34:fe:
77:66:a3:00:7d:ca:8a:df:da:1d:5e:92:6a:86:6a:6a:67:f7:
52:8f:78:13:2f:92:c8:c6:b9:d4:07:e6:f9:88:2f:5e:2d:fa:
63:46:d9:90:2e:a2:1c:9f:72:62:5d:cd:ac:0e:d3:15:c8:66:
88:f3:2c:67:f9:79:1d:1c:dc:39:e1:8d:8c:fb:1e:61:59:51:
59:8e:ee:55:a8:9c:c1:17:1a:78:87:1b:87:43:16:ac:cc:a2:
86:54:da:34:93:89:c0:8e:41:3b:fc:ec:f7:f6:91:be:a4:3d:
39:c4:17:e3:3f:54:72:74:41:66:8e:3f:bf:21:6b:cd:1c:f0:
81:da:c0:48:2b:c5:81:84:13:ca:12:ab:f2:74:fe:11:d6:81:
b4:05:13:22:88:ce:0a:25:d5:12:7d:d7:7c:a2:07:3e:f4:12:
95:4d:d6:2d:ce:b3:b4:eb:26:1b:58:a5:43:55:c8:8a:c1:3f:
cf:08:91:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:02:40 2024 by rpki-client on console-ams.rpki-client.org