Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/f_4nAm4i8jlGT0JJjOwpKwSyZ9c.roa
File: f_4nAm4i8jlGT0JJjOwpKwSyZ9c.roa (raw, json)
Hash identifier: M1vzMecRMPtRvfiZIj9U2kjjnQdJMEz7/Iht4PPY+Ww=
Subject key identifier: 7F:FE:27:02:6E:22:F2:39:46:4F:42:49:8C:EC:29:2B:04:B2:67:D7
Certificate issuer: /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Certificate serial: 01856B0A3426EB9DD92B9470AF65D5F41F6D
Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/f_4nAm4i8jlGT0JJjOwpKwSyZ9c.roa
Signing time: Sun 01 Jan 2023 01:55:08 +0000
ROA not before: Sun 01 Jan 2023 01:55:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35830
IP address blocks: 212.119.40.0/23 maxlen: 23
45.80.106.0/23 maxlen: 23
45.140.204.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:0a:34:26:eb:9d:d9:2b:94:70:af:65:d5:f4:1f:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Validity
Not Before: Jan 1 01:55:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ffe27026e22f239464f42498cec292b04b267d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:55:1b:9d:19:1a:b4:5a:f8:f4:fe:17:bc:3c:
af:fe:b9:ba:17:4d:84:bb:e3:95:c0:3a:5a:b6:80:
4b:36:57:72:ce:bf:27:a5:dc:0e:51:48:7c:8a:58:
0d:d0:40:d2:9c:11:a8:61:6b:b8:46:b4:50:9e:76:
9c:40:d1:6a:49:6b:ce:00:04:be:43:aa:56:e0:78:
2f:25:2d:b6:ec:8c:4d:0e:96:3d:c1:d5:f2:9a:fa:
60:84:0d:f5:88:20:38:1d:3b:db:4a:0a:c3:ba:56:
fa:ed:95:c5:96:00:33:67:b4:fd:3e:dc:99:da:c3:
75:a9:53:5c:14:79:05:44:87:77:7f:a4:3a:0c:3e:
23:e7:e3:77:a5:4b:60:1a:ed:d3:80:20:54:58:9c:
ad:27:4a:ae:51:a5:6a:ac:b0:f8:7c:21:39:3f:be:
c3:8b:3d:1d:e9:f7:10:3d:20:f4:77:d9:a9:df:61:
9c:1f:72:c4:06:59:93:96:61:8d:4c:0a:dd:95:f7:
eb:9b:36:c7:84:e4:a2:7b:3e:bf:7c:9e:4b:d9:46:
b8:23:0b:c6:51:56:6f:d3:36:7f:76:67:fe:71:95:
34:7a:53:3d:0e:b6:e4:b4:04:95:e7:9a:31:9a:d2:
86:52:9c:40:f4:2a:be:bd:b5:89:ff:83:93:24:f0:
39:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:FE:27:02:6E:22:F2:39:46:4F:42:49:8C:EC:29:2B:04:B2:67:D7
X509v3 Authority Key Identifier:
keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/f_4nAm4i8jlGT0JJjOwpKwSyZ9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.106.0/23
45.140.204.0/23
212.119.40.0/23
Signature Algorithm: sha256WithRSAEncryption
60:d9:b5:fb:18:83:9d:91:13:09:70:d8:23:59:65:0d:56:d2:
71:7d:72:96:e0:28:db:da:07:e5:65:87:a0:9d:a5:e6:0a:aa:
de:07:af:12:b1:1c:7c:64:af:0a:a5:8a:3f:af:a0:4f:e0:35:
6b:8e:13:12:5c:0b:67:11:45:e0:17:1a:96:30:1c:f6:82:b8:
d8:c9:9a:8a:50:bd:31:03:f0:5a:6b:ba:6e:f8:bd:9c:74:2b:
2e:c8:38:b5:16:1d:f5:6c:c3:d6:84:6d:0f:56:1b:8d:c9:93:
33:f7:fc:43:6b:fa:a4:83:20:08:e5:e2:09:42:e1:5e:d5:d2:
31:ce:0b:1c:f8:b0:41:e9:97:f7:54:68:9b:4b:a4:84:27:e6:
85:10:8b:c6:b0:3f:0d:27:9a:2d:4b:3f:01:3d:38:10:6b:c5:
ea:b5:8c:c9:9d:42:bf:c9:06:8f:bb:ab:7d:7d:18:5b:13:de:
c1:91:bc:ac:ce:82:d3:bf:85:e5:49:fd:c8:31:59:68:bf:6a:
da:dd:a4:85:cd:2d:30:2a:57:e3:54:88:c2:e9:66:a1:21:fb:
4a:10:f9:56:85:1d:ac:fe:b1:00:51:7c:6f:0b:1e:38:d6:dc:
19:f7:81:b5:24:a2:49:c7:81:1a:af:69:e6:ed:2c:42:95:66:
8c:da:e4:71
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jan 2 04:09:48 2024 by rpki-client on console-ams.rpki-client.org