Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/d27ZtE8B8IqycDLdrLrA5J3hDLY.roa
File: d27ZtE8B8IqycDLdrLrA5J3hDLY.roa (raw, json)
Hash identifier: n6jTbBXhQo09Rz6hz2u8AW5bxwg9Cgm8vIf7paj9WkY=
Subject key identifier: 77:6E:D9:B4:4F:01:F0:8A:B2:70:32:DD:AC:BA:C0:E4:9D:E1:0C:B6
Certificate issuer: /CN=f1b8bbb1e186a599d4cc058cabf4df0e252f31fa
Certificate serial: 01856DCAD0FCF6A4EF9891093B867F361ACD
Authority key identifier: F1:B8:BB:B1:E1:86:A5:99:D4:CC:05:8C:AB:F4:DF:0E:25:2F:31:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bi7seGGpZnUzAWMq_TfDiUvMfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/d27ZtE8B8IqycDLdrLrA5J3hDLY.roa
Signing time: Sun 01 Jan 2023 14:44:46 +0000
ROA not before: Sun 01 Jan 2023 14:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56971
IP address blocks: 193.43.72.0/24 maxlen: 32
45.152.112.0/24 maxlen: 32
45.152.113.0/24 maxlen: 32
193.242.145.0/24 maxlen: 32
45.145.4.0/24 maxlen: 24
45.145.6.0/24 maxlen: 32
45.145.7.0/24 maxlen: 32
45.159.210.0/24 maxlen: 24
45.159.208.0/24 maxlen: 24
45.159.209.0/24 maxlen: 24
45.154.3.0/24 maxlen: 32
45.152.84.0/24 maxlen: 32
45.154.1.0/24 maxlen: 32
45.154.2.0/24 maxlen: 32
45.152.86.0/24 maxlen: 32
45.11.93.0/24 maxlen: 24
45.11.94.0/24 maxlen: 24
45.11.92.0/24 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ca:d0:fc:f6:a4:ef:98:91:09:3b:86:7f:36:1a:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1b8bbb1e186a599d4cc058cabf4df0e252f31fa
Validity
Not Before: Jan 1 14:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=776ed9b44f01f08ab27032ddacbac0e49de10cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9f:1c:94:14:38:f4:e9:43:41:ff:7e:df:52:
5a:6f:6c:35:39:f0:1d:58:43:42:89:82:15:e0:2b:
f5:c3:ba:12:eb:73:ba:a6:96:1c:af:45:45:88:34:
29:09:bb:c2:68:e4:69:fd:0e:57:fb:7f:41:02:81:
10:55:6b:bf:38:00:1a:04:64:ee:69:d4:d9:d2:60:
c3:51:50:7d:44:91:94:5a:c6:ed:80:bb:42:36:16:
46:12:ab:0e:66:80:23:3d:fa:08:6f:b1:1c:59:f6:
39:14:68:c5:0d:e3:54:09:dc:a6:40:42:46:14:5e:
00:f6:01:51:c9:3e:63:6f:54:e2:68:3b:cd:0d:21:
7e:e5:ca:72:9b:40:1a:0e:7c:64:32:ec:56:35:2c:
74:77:b4:62:db:5e:d4:b6:13:a1:28:4a:21:5f:48:
c1:ae:35:c4:a1:25:c8:26:e3:cd:1f:57:30:08:15:
a0:43:e3:65:be:45:40:f7:49:d9:0d:b0:54:0e:bd:
e4:17:61:05:ee:22:51:18:ad:ae:54:22:0e:2c:aa:
b2:2e:61:77:2f:f1:a3:f6:00:40:dc:85:d9:ae:d5:
67:40:70:2a:16:62:d5:9c:c6:e1:93:76:c3:13:91:
ce:73:ab:ac:4f:05:45:31:1e:2b:e7:a6:64:2a:fd:
d2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:6E:D9:B4:4F:01:F0:8A:B2:70:32:DD:AC:BA:C0:E4:9D:E1:0C:B6
X509v3 Authority Key Identifier:
keyid:F1:B8:BB:B1:E1:86:A5:99:D4:CC:05:8C:AB:F4:DF:0E:25:2F:31:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bi7seGGpZnUzAWMq_TfDiUvMfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/d27ZtE8B8IqycDLdrLrA5J3hDLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.92.0-45.11.94.255
45.145.4.0/24
45.145.6.0/23
45.152.84.0/24
45.152.86.0/24
45.152.112.0/23
45.154.1.0-45.154.3.255
45.159.208.0-45.159.210.255
193.43.72.0/24
193.242.145.0/24
Signature Algorithm: sha256WithRSAEncryption
45:31:6c:9c:5d:af:90:8b:e0:68:4a:cd:ee:32:e5:00:68:9a:
8d:29:46:04:5b:02:ad:14:b3:b1:f3:37:d4:71:cb:6a:c6:ad:
90:40:49:41:12:3e:55:04:70:26:3d:b9:9f:cc:84:24:39:d0:
e7:3f:7f:da:1a:57:27:52:e5:28:db:62:e5:3e:69:02:b2:16:
b5:ff:2a:4c:13:ca:28:42:a7:b7:b6:c7:43:98:09:d2:58:da:
ec:44:d2:5a:06:31:22:f3:43:37:0f:d1:1b:e9:d3:c3:93:83:
a1:a3:ec:ac:66:d6:1a:4f:0b:73:76:95:d1:2c:a6:5b:6f:d4:
c5:29:54:3c:e9:46:2b:59:33:41:ed:1e:01:f5:a5:7b:86:25:
f5:c9:71:fc:50:3b:d2:b8:14:6a:64:c1:58:0f:da:a8:64:8e:
c7:fe:9d:7f:59:ad:6a:2f:1f:ff:a4:e7:7f:b0:09:c2:b5:00:
98:6e:10:62:d0:38:96:a2:5a:9a:2f:7e:6f:a0:4a:2a:ea:09:
93:e5:c6:1d:25:bf:36:b8:23:58:ef:c2:91:52:3d:67:c2:41:
ab:73:43:d8:6e:de:b6:48:04:32:2f:ac:78:07:4c:1f:58:6a:
f8:b1:1f:12:d0:0a:cb:b7:82:22:93:1d:cb:cb:1e:f6:f4:f5:
50:7b:cb:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:46 2023 by rpki-client on console-ams.rpki-client.org