Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/uDBwXbjKdnOh1DxfkZ6JHuYNRJ8.roa
File: uDBwXbjKdnOh1DxfkZ6JHuYNRJ8.roa (raw, json)
Hash identifier: JX2XcP7fp0vLQvZET9uP17CxYrDtuR50HlQSKeAIBRE=
Subject key identifier: B8:30:70:5D:B8:CA:76:73:A1:D4:3C:5F:91:9E:89:1E:E6:0D:44:9F
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 018B195AB16EA5F219DFABA88EC7DD4F318E
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/uDBwXbjKdnOh1DxfkZ6JHuYNRJ8.roa
Signing time: Tue 10 Oct 2023 11:30:55 +0000
ROA not before: Tue 10 Oct 2023 11:30:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48359
IP address blocks: 89.44.240.0/24 maxlen: 24
89.42.44.0/22 maxlen: 22
45.94.214.0/24 maxlen: 24
45.94.215.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:19:5a:b1:6e:a5:f2:19:df:ab:a8:8e:c7:dd:4f:31:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Oct 10 11:30:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b830705db8ca7673a1d43c5f919e891ee60d449f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3d:b4:c8:41:e9:90:ab:3f:c8:c0:3b:df:c6:
75:dd:6a:f0:3e:d5:a1:c8:f7:2c:b4:81:fa:6b:2e:
92:81:bc:b3:92:8e:02:4a:49:6e:98:58:cd:b5:2c:
5a:8c:04:42:56:80:a4:8c:bb:d4:9b:df:cb:d5:b0:
4d:2c:be:64:80:42:35:32:e3:7c:48:fb:1e:b1:f3:
9f:c0:5d:24:d7:f9:6b:58:a4:70:e0:17:f4:28:5a:
4a:ae:7f:49:16:54:07:f5:e9:b6:2f:93:c3:a1:0c:
83:90:93:61:36:9c:40:04:ae:c7:95:59:f1:e3:99:
8d:e2:43:12:78:3b:06:3e:1a:13:a2:06:c4:1e:53:
fc:cb:8d:cd:52:6a:ef:ef:36:15:e7:af:f5:06:69:
f9:93:85:73:4a:a1:8c:b8:de:f8:58:ea:4c:ce:26:
69:f0:99:2e:d5:51:57:52:8f:48:e6:82:ff:91:09:
19:1f:8f:56:dc:a0:99:b2:4d:3f:8c:ad:a4:73:6f:
d0:66:9c:6b:91:d6:6b:b8:21:3f:06:86:dd:93:ea:
65:fc:36:e5:f5:2d:59:41:5b:08:8c:41:fa:cf:08:
83:89:c6:ae:31:85:02:27:93:50:d4:04:c8:18:20:
1e:e5:b9:52:35:16:4d:83:67:a3:34:3d:04:a8:76:
84:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:30:70:5D:B8:CA:76:73:A1:D4:3C:5F:91:9E:89:1E:E6:0D:44:9F
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/uDBwXbjKdnOh1DxfkZ6JHuYNRJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.214.0/23
89.42.44.0/22
89.44.240.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:50:b4:ed:f6:34:96:77:a5:65:f4:69:c4:f3:f9:ec:2e:87:
27:6f:b4:ae:2c:68:ef:de:27:a2:a2:95:fd:c7:fc:33:12:af:
4c:d3:4f:4b:a3:a3:5a:d2:2d:fc:50:92:41:ba:8b:87:57:71:
08:8b:57:c9:97:e9:65:e9:a8:bc:60:af:8a:93:82:1b:5d:cc:
58:f6:60:c6:60:49:30:a2:8b:b0:0e:ff:26:01:a2:af:49:7c:
ba:b3:05:10:71:66:f6:48:39:ca:e2:ab:cd:60:60:ad:ff:21:
29:43:49:49:a8:fe:9d:98:41:68:ce:57:9a:98:58:31:49:ff:
e4:87:59:e2:e6:fa:2a:59:0e:dd:10:c4:15:b1:35:26:b1:ef:
4c:43:ae:0f:c9:59:87:e3:00:c0:b4:56:8f:6d:bb:da:dc:f5:
d3:6e:8a:7c:05:25:6d:fb:a7:66:d1:3b:f0:46:d6:02:ae:89:
95:d0:7a:62:82:41:fb:62:93:95:01:c9:a9:ec:5e:92:65:82:
18:a4:33:83:09:70:f1:ce:50:1e:01:60:33:d0:d6:5d:c4:94:
61:35:e8:85:35:e9:3f:17:bf:0d:68:dc:7d:51:4d:e3:f3:18:
0c:ff:71:ab:3b:30:52:7c:f0:d3:b1:78:6e:5a:f5:04:c7:76:
21:82:0f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 28 07:48:46 2023 by rpki-client on console-fra.rpki-client.org