Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/l7pPegyrMHlkulqZdCVEpKfQcWc.roa
File: l7pPegyrMHlkulqZdCVEpKfQcWc.roa (raw, json)
Hash identifier: yU7Tqt7wprdJaDQblbZ4HzntUmyhnOCMD3T8fiL5p3s=
Subject key identifier: 97:BA:4F:7A:0C:AB:30:79:64:BA:5A:99:74:25:44:A4:A7:D0:71:67
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 0186701A03794C7A748FBA3C15A2BDE1E982
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/l7pPegyrMHlkulqZdCVEpKfQcWc.roa
Signing time: Mon 20 Feb 2023 18:33:18 +0000
ROA not before: Mon 20 Feb 2023 18:33:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48108
IP address blocks: 45.93.9.0/24 maxlen: 24
45.93.8.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:70:1a:03:79:4c:7a:74:8f:ba:3c:15:a2:bd:e1:e9:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Feb 20 18:33:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=97ba4f7a0cab307964ba5a99742544a4a7d07167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c2:64:3c:e2:ee:70:9a:5b:5e:ed:a6:47:b7:
35:08:13:06:93:a1:02:5b:9b:df:62:17:69:e0:d9:
e8:c1:48:f3:e1:54:48:03:b2:33:19:a5:f8:ec:70:
bc:06:2d:f8:cd:16:45:a0:b2:02:00:5b:85:1f:26:
57:e5:f8:ed:17:49:c1:e3:b0:96:7e:50:d3:06:72:
cd:e0:3e:56:2b:76:30:3c:02:ec:b6:b2:6b:9e:47:
af:f8:1c:3f:7a:3b:97:6e:42:92:f1:1a:31:af:fd:
43:cb:43:a0:c0:be:9e:fe:d1:ac:9e:15:dd:72:87:
a3:94:15:6f:60:a1:ac:7c:2f:d8:ec:65:f6:58:fb:
cf:8a:b3:6a:17:7b:80:28:43:fa:52:f9:2b:df:e7:
1c:a4:38:40:ea:73:40:e7:ef:8f:69:3f:e6:35:6e:
ec:2c:4c:82:6d:73:5d:26:8c:36:77:30:d0:14:3b:
bf:c6:00:af:7b:52:00:6c:26:df:de:39:57:b3:09:
20:b2:c4:4b:da:f0:5f:ad:ed:ee:5d:05:62:e4:5d:
32:df:65:99:82:8d:80:84:22:94:78:6b:60:27:69:
d9:3a:87:c4:57:1d:a5:03:db:42:7d:53:a6:b3:bf:
7f:ec:02:48:43:63:b0:e1:39:e4:00:08:30:9b:38:
2f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:BA:4F:7A:0C:AB:30:79:64:BA:5A:99:74:25:44:A4:A7:D0:71:67
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/l7pPegyrMHlkulqZdCVEpKfQcWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.8.0/23
Signature Algorithm: sha256WithRSAEncryption
d1:71:ee:a8:ef:ea:db:0f:17:0b:14:d4:c5:a3:00:38:05:0e:
82:4c:a1:ce:e4:07:f1:1b:c2:bb:ee:eb:12:dc:96:12:0d:aa:
09:f3:42:b7:c4:21:c8:68:ca:d5:d0:e1:27:fc:ed:fe:df:4f:
cb:fb:ce:4b:fc:aa:d3:e1:2a:47:ca:7b:5c:f8:d0:ac:be:ee:
2e:88:b0:ba:7e:fd:44:16:cc:31:f7:6f:f5:9a:25:c0:2d:96:
a6:4c:6d:57:6b:a3:13:48:11:24:13:cc:5e:fb:3b:ad:ee:5f:
10:87:ff:46:6a:f9:5c:01:74:cd:10:40:b2:69:6f:0f:6a:26:
13:b8:2d:31:11:76:d2:de:26:40:8e:56:96:1e:6b:eb:bd:c3:
93:45:b4:33:ea:11:97:e7:5e:f6:46:50:68:f6:4f:f8:7c:c6:
13:5b:76:c3:a4:5e:a2:87:e3:a7:05:4a:2f:db:a4:36:b7:1d:
44:61:cc:63:9f:33:80:c9:9d:ca:b8:08:da:18:91:df:8d:e0:
c3:00:a3:6b:ce:ec:90:34:ae:7e:84:f1:5d:86:fb:b3:ca:2a:
ca:f7:17:ac:86:89:a0:4f:70:75:cd:c4:b9:02:37:a6:6b:bd:
2a:6d:da:7a:5c:ea:d2:fc:90:b5:fb:1f:c3:f8:2c:2e:5c:0d:
d7:d3:3b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:24 2023 by rpki-client on console-ams.rpki-client.org