Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/s4nXYcmsGU7CrSGV8jsFVMkjDgQ.roa
File: s4nXYcmsGU7CrSGV8jsFVMkjDgQ.roa (raw, json)
Hash identifier: D7213uNiwB+V/W/Zw2JuSuNghfs5E7l/zup0MKing90=
Subject key identifier: B3:89:D7:61:C9:AC:19:4E:C2:AD:21:95:F2:3B:05:54:C9:23:0E:04
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 018572BA74925A630D1F746BDBA833D9F9F9
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/s4nXYcmsGU7CrSGV8jsFVMkjDgQ.roa
Signing time: Mon 02 Jan 2023 13:45:00 +0000
ROA not before: Mon 02 Jan 2023 13:45:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207810
IP address blocks: 217.113.12.0/22 maxlen: 22
45.159.73.0/24 maxlen: 24
45.159.74.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:74:92:5a:63:0d:1f:74:6b:db:a8:33:d9:f9:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Jan 2 13:45:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b389d761c9ac194ec2ad2195f23b0554c9230e04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5b:63:d8:75:78:4d:59:b7:1f:16:c6:c2:77:
ae:d5:e8:25:c2:90:7b:1f:05:0f:f5:66:bb:21:be:
cd:7c:37:cd:ec:fd:7e:b4:0d:02:c4:6b:82:9d:48:
2a:99:da:93:a3:1c:af:f1:02:9e:59:7f:c1:97:a8:
c7:38:29:11:e0:64:d0:14:28:2b:4a:8b:d3:52:6f:
b1:b4:2f:5d:42:af:b5:6c:54:bb:94:1e:d1:47:9b:
3f:5f:a1:94:0c:e3:d7:f7:8c:5f:7b:8f:09:44:ed:
1a:5e:44:8a:0f:30:c8:fb:b7:03:6c:76:cc:46:d3:
8b:90:c3:b0:49:76:9a:0a:64:58:bf:9b:ec:30:b0:
c2:1e:dd:86:02:4d:32:9f:d1:e4:bb:95:d4:bf:dc:
6e:8d:1b:d4:3e:a6:83:e7:24:77:e2:8f:ab:10:56:
f0:a5:82:e5:9e:56:4a:ff:95:69:fd:33:b6:40:8c:
39:a2:08:6e:0c:81:bf:c7:03:9d:fc:ab:a5:3c:ab:
c4:47:ab:7d:93:21:a2:f7:be:68:94:43:d9:6d:96:
58:48:51:d4:70:1c:11:b6:d1:92:7f:68:22:ed:64:
25:d4:3d:ba:fa:96:4f:29:14:66:d4:9f:1f:48:64:
36:b6:af:33:70:cf:1f:e0:26:db:59:b9:08:d4:02:
b9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:89:D7:61:C9:AC:19:4E:C2:AD:21:95:F2:3B:05:54:C9:23:0E:04
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/s4nXYcmsGU7CrSGV8jsFVMkjDgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.73.0-45.159.75.255
217.113.12.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:75:c5:f2:34:d4:25:07:df:43:a6:95:8b:e5:90:72:37:35:
3f:45:04:26:d0:1a:83:8f:ca:25:90:d8:9d:b3:c5:a6:74:41:
0a:fd:95:d0:1b:2c:c0:8d:95:5c:da:a4:57:1b:7b:ba:eb:67:
76:f6:b8:dd:d2:a3:8f:30:1f:60:7b:01:d6:17:8f:b1:d1:95:
d3:dc:d0:d5:28:86:8b:54:5d:a7:11:36:3a:7b:ff:d3:0f:a4:
63:e4:2c:c3:8d:cf:2e:49:91:a4:fc:44:97:00:54:ed:06:f9:
57:b4:f6:83:54:06:92:86:a7:ed:5e:56:4e:a1:d8:89:6d:1a:
47:86:0c:84:a9:df:a8:cb:7a:66:38:db:e0:07:d5:ad:4b:1d:
cb:7b:98:39:79:97:e3:9d:ab:4d:9f:a7:bb:4c:02:9f:d4:cd:
b9:f2:c0:a1:b4:81:03:36:42:cd:8f:73:ee:41:98:80:96:24:
12:4c:89:c9:df:12:a5:8f:49:05:c1:38:9a:7a:6a:df:5b:14:
7b:44:c4:9b:94:e9:d0:48:30:65:45:34:f9:69:d6:8d:e9:2d:
24:db:74:08:8c:0a:f5:06:70:15:1c:4a:b7:76:55:24:84:a9:
b0:e0:98:cc:e4:3f:9e:18:c8:e6:a3:ae:b9:e2:fa:b4:dc:d1:
41:e4:55:b5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:42 2023 by rpki-client on console-fra.rpki-client.org