Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/soN5_Hdos1COqoak9Kg6s1Lmfks.roa
File: soN5_Hdos1COqoak9Kg6s1Lmfks.roa (raw, json)
Hash identifier: 18dEe7jhrTLLa7yPT+dV1OLPxfGUR/TBsSJFoUyqZWc=
Subject key identifier: B2:83:79:FC:77:68:B3:50:8E:AA:86:A4:F4:A8:3A:B3:52:E6:7E:4B
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 01874B83FFEA43255CAC461DB61815494EF3
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/soN5_Hdos1COqoak9Kg6s1Lmfks.roa
Signing time: Tue 04 Apr 2023 09:05:54 +0000
ROA not before: Tue 04 Apr 2023 09:05:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 217.113.22.0/23 maxlen: 23
217.113.18.0/23 maxlen: 23
45.133.104.0/23 maxlen: 24
45.133.104.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4b:83:ff:ea:43:25:5c:ac:46:1d:b6:18:15:49:4e:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Apr 4 09:05:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b28379fc7768b3508eaa86a4f4a83ab352e67e4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7c:ef:d0:31:25:2a:18:c7:ba:e6:4b:e3:55:
e9:84:c3:7e:15:91:30:be:c0:12:6c:ae:ae:a7:2e:
5f:58:f4:34:20:d3:ec:70:ec:74:7c:65:f0:15:84:
03:0a:bd:37:5d:f8:60:b4:5e:4d:bd:59:97:6d:7c:
59:2b:38:c2:92:2d:c0:dc:2e:d0:02:4d:dc:75:63:
44:1c:a4:85:43:ec:70:df:36:47:59:ca:bd:00:98:
7a:46:b7:8f:c9:78:72:32:4e:ab:1d:2a:20:be:ef:
f9:d7:bb:3f:b9:61:30:6e:14:5d:11:7f:f2:3b:e1:
06:97:83:db:e5:f3:ce:9d:a0:87:c6:94:b7:1e:9c:
48:1b:45:b6:2c:17:e9:c5:a8:7b:f2:33:50:73:92:
7e:ae:d5:88:7f:b8:c7:34:ab:b0:bd:9f:dc:cf:4e:
2d:8d:6a:c0:6e:f2:b2:ca:22:ea:cf:25:fb:32:b5:
17:bd:82:bc:e4:59:36:73:02:9c:d9:9c:fb:80:02:
97:18:37:41:0b:e8:05:84:96:69:9e:1e:98:34:e9:
97:b9:f3:cb:6a:20:bb:e2:24:23:bb:cc:7f:de:9a:
90:c7:82:9d:86:1f:1a:60:73:be:0b:97:f1:4a:d1:
37:82:f3:91:ba:dc:97:c9:2c:cb:ef:35:26:71:0b:
68:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:83:79:FC:77:68:B3:50:8E:AA:86:A4:F4:A8:3A:B3:52:E6:7E:4B
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/soN5_Hdos1COqoak9Kg6s1Lmfks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.104.0/22
217.113.18.0/23
217.113.22.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:7d:bb:6d:2f:a7:2c:98:d6:52:e9:e6:35:5d:58:6f:b3:86:
7f:d5:2e:59:ee:64:83:3e:22:f4:05:63:95:91:7c:68:28:ef:
6c:f3:17:bf:04:69:8c:b2:ca:ae:7f:7e:03:6f:82:bc:ab:0a:
d0:16:c1:45:b9:94:b4:4c:97:0c:47:ac:91:bd:48:e2:23:eb:
b1:a5:b8:c4:0b:de:95:07:09:32:e5:b0:ae:c3:7e:8d:5c:21:
1b:58:1f:d1:74:15:61:b7:69:7e:bc:30:92:6a:f5:7a:9e:27:
b7:29:7a:d7:50:67:2d:42:f1:67:1e:08:45:39:e8:c0:14:b0:
0c:be:0d:66:21:06:ae:cc:f0:85:da:8a:09:a9:60:02:70:ff:
92:c3:ef:c2:af:46:04:90:7b:c5:51:14:0a:9f:3c:63:42:16:
c0:db:70:28:30:f7:7b:40:a4:c2:35:81:b4:9b:6b:bf:f4:20:
2f:bb:2c:05:1b:39:04:59:4a:a2:03:e5:bd:03:9c:ab:c5:53:
3d:91:72:1b:4d:12:8f:e3:89:62:c8:f0:c6:3a:6c:bc:8a:2c:
9c:76:9e:61:45:b7:fe:a4:e3:93:9e:b5:6a:47:59:32:be:1e:
00:19:93:d2:3e:4e:05:e7:74:72:37:7b:05:78:11:80:6e:ea:
54:40:d9:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:24 2023 by rpki-client on console-ams.rpki-client.org