Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/jYoRvmtdxTDWM-PmibteePCDqNs.roa
File: jYoRvmtdxTDWM-PmibteePCDqNs.roa (raw, json)
Hash identifier: mYAcqpwMt4QbsH465TC+0NhMK9ivVyVpC9OLxXVhvUg=
Subject key identifier: 8D:8A:11:BE:6B:5D:C5:30:D6:33:E3:E6:89:BB:5E:78:F0:83:A8:DB
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 0187B6AD94B6CAE0A676B7FB3C2CB00017A7
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/jYoRvmtdxTDWM-PmibteePCDqNs.roa
Signing time: Tue 25 Apr 2023 04:30:41 +0000
ROA not before: Tue 25 Apr 2023 04:30:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39650
IP address blocks: 45.94.215.0/24 maxlen: 24
89.46.217.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b6:ad:94:b6:ca:e0:a6:76:b7:fb:3c:2c:b0:00:17:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Apr 25 04:30:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d8a11be6b5dc530d633e3e689bb5e78f083a8db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:32:18:36:3d:d5:6a:6e:59:ff:a7:87:7e:3d:
bd:9d:e2:6a:91:92:43:75:62:d1:33:53:8b:f8:6b:
3f:89:da:c1:89:cd:3f:de:3c:c2:08:aa:aa:41:63:
d0:0d:b2:df:bd:d4:d7:29:4d:1e:0f:4c:04:25:da:
37:45:8f:7e:12:e4:01:03:46:4a:46:11:0e:5d:8b:
ce:98:b4:95:b6:b3:93:ca:97:dd:3c:c0:39:2f:8a:
02:f3:7c:4d:0f:49:53:1c:e5:83:4b:4e:72:0e:a7:
fa:39:53:21:f8:bf:24:a5:53:ea:38:ce:76:fe:38:
aa:08:05:b2:b8:b7:ee:41:fb:19:ac:74:ec:39:aa:
37:d4:37:ce:a8:4c:19:47:fa:e8:ec:0f:85:22:04:
a1:b4:8c:b5:c3:ac:45:99:43:dc:65:8d:7b:87:ec:
ca:c4:55:92:b6:9d:be:ba:89:e8:41:9d:32:78:aa:
e8:80:ac:da:a6:c1:3b:bd:9f:92:50:4c:94:d7:1d:
04:ff:ec:de:82:d6:a7:41:dd:01:db:51:5a:09:7f:
54:40:98:1c:dc:77:af:ef:49:78:89:47:77:3a:b4:
ee:74:cf:15:20:cf:79:bc:d1:a3:b2:9e:66:3c:f5:
43:21:8a:cb:03:a9:de:84:77:2a:fa:3d:a4:7b:15:
db:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:8A:11:BE:6B:5D:C5:30:D6:33:E3:E6:89:BB:5E:78:F0:83:A8:DB
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/jYoRvmtdxTDWM-PmibteePCDqNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.215.0/24
89.46.217.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:56:64:f0:44:a1:5a:50:f3:69:e2:bb:4c:d1:30:ac:a8:dd:
63:74:b8:0b:6c:34:cb:18:40:3e:34:33:7b:ec:11:81:2b:76:
b7:2a:eb:7e:05:17:5b:8c:3f:ac:f7:05:5c:61:27:31:cf:f2:
cd:46:98:bc:1f:94:f8:c1:8e:4a:86:40:34:ce:65:09:c8:ba:
54:4b:03:83:e8:23:07:1e:75:45:90:82:c2:5c:47:d8:73:85:
24:0a:97:ad:7f:5d:35:70:a0:6d:4a:df:9d:a8:ec:57:77:07:
94:a4:33:76:2f:56:51:ae:f1:ab:2a:ad:58:ad:37:68:f0:95:
79:87:fc:f7:f0:9d:58:c4:cb:93:b5:f3:91:22:78:73:01:af:
b2:bc:4e:30:d2:f6:47:41:b9:c0:98:d8:b5:9c:98:01:a5:19:
3f:cd:ed:8f:ae:95:00:08:2f:c6:14:29:43:38:64:71:b3:7e:
d7:dd:3b:a9:cd:7c:75:74:78:5d:59:0c:2f:c4:8d:a1:d4:be:
bd:e9:d8:b5:11:08:3e:c6:2a:09:3f:ff:63:01:43:14:c1:24:
c8:15:7b:c2:0f:52:a3:f7:38:f2:22:ab:8f:46:91:5d:43:11:
40:c8:fb:9d:01:a3:51:13:b9:d1:7e:46:b2:fa:fa:dc:7c:83:
d1:9c:6a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:10 2023 by rpki-client on console-ams.rpki-client.org