Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/ber37i87ovPc5ck5tojKokjFlMw.roa
File: ber37i87ovPc5ck5tojKokjFlMw.roa (raw, json)
Hash identifier: eMTEuKDNgWMM2C7sUcghzI9NdRnUOI3OThP35lk1hjs=
Subject key identifier: 6D:EA:F7:EE:2F:3B:A2:F3:DC:E5:C9:39:B6:88:CA:A2:48:C5:94:CC
Certificate issuer: /CN=0d784bd96a44bc361d13344d54c8bc51ff67a802
Certificate serial: 018570C2A7CD2173456DB6058ACB18F4400B
Authority key identifier: 0D:78:4B:D9:6A:44:BC:36:1D:13:34:4D:54:C8:BC:51:FF:67:A8:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/ber37i87ovPc5ck5tojKokjFlMw.roa
Signing time: Mon 02 Jan 2023 04:34:43 +0000
ROA not before: Mon 02 Jan 2023 04:34:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198401
IP address blocks: 185.96.52.0/22 maxlen: 22
91.234.12.0/22 maxlen: 22
185.146.244.0/22 maxlen: 22
45.82.144.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:c2:a7:cd:21:73:45:6d:b6:05:8a:cb:18:f4:40:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d784bd96a44bc361d13344d54c8bc51ff67a802
Validity
Not Before: Jan 2 04:34:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6deaf7ee2f3ba2f3dce5c939b688caa248c594cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ba:ce:d8:83:56:6f:dd:31:79:05:da:a6:71:
b4:53:e8:32:f5:d2:5c:88:a5:3d:4c:e5:8c:0a:5a:
7c:fc:83:ee:1a:2f:fa:72:9d:63:ae:51:58:71:88:
89:37:97:b8:29:27:be:70:ed:94:c2:9c:0d:49:c1:
e5:e0:6e:ef:fd:4c:70:e4:dd:47:5a:21:21:b9:99:
b3:d8:aa:38:ce:54:0b:a3:43:2d:bf:9d:36:76:fa:
33:36:9b:7b:5f:0e:d1:ef:b9:53:0a:d6:c4:03:52:
ec:63:96:a1:1b:47:0a:82:e2:b0:3f:84:a3:7a:23:
ae:ca:0c:7e:41:7a:00:72:42:49:22:9c:46:0a:88:
4b:e0:b5:6b:8c:9f:b0:84:9c:80:ac:2d:1e:05:2e:
60:e6:23:e3:de:87:ec:62:c2:c7:8a:ed:e3:e9:6c:
d0:c9:c9:2f:2d:58:cd:f6:fe:59:bb:7f:a0:d6:65:
25:9d:ce:02:94:54:8c:b9:42:40:e7:7d:b3:b9:d9:
c1:ad:af:8c:1a:67:aa:f8:b8:fc:02:cb:64:2b:47:
3d:96:35:38:59:48:4e:35:30:54:82:3f:bc:cc:4b:
96:15:03:02:b7:c7:47:55:bb:0e:83:a1:19:f9:94:
c2:12:b6:11:34:0b:fd:d7:6c:65:92:41:8d:ce:76:
7c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:EA:F7:EE:2F:3B:A2:F3:DC:E5:C9:39:B6:88:CA:A2:48:C5:94:CC
X509v3 Authority Key Identifier:
keyid:0D:78:4B:D9:6A:44:BC:36:1D:13:34:4D:54:C8:BC:51:FF:67:A8:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/ber37i87ovPc5ck5tojKokjFlMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.144.0/22
91.234.12.0/22
185.96.52.0/22
185.146.244.0/22
Signature Algorithm: sha256WithRSAEncryption
98:87:0c:c6:db:4f:86:6e:c7:2f:06:5a:03:23:12:36:06:61:
f3:c7:01:1b:bb:69:af:23:0b:6a:7a:d6:ee:f9:e1:79:8d:61:
b0:34:a0:01:11:be:82:84:53:63:b6:65:db:c7:8e:30:9d:e6:
65:5f:c6:54:0e:2d:9e:43:88:5d:7d:cf:ef:30:ff:83:1c:17:
7c:1f:66:33:c0:61:a2:0f:66:84:5b:f7:b7:3e:fe:a9:96:15:
ae:9d:0c:6d:b4:1c:a5:68:3c:56:fb:2a:7b:d8:c1:3d:ba:ae:
14:04:bf:19:e1:ca:51:7c:5e:a8:f2:d5:46:19:6a:fc:6d:e4:
a4:89:6a:99:fd:8b:8d:ef:9b:00:15:d2:6b:33:27:03:e0:3a:
3a:e2:14:46:97:c3:b7:fd:9b:c3:d6:69:a5:56:40:7a:aa:9c:
ce:c6:d8:91:b1:5f:dd:ac:4c:d9:fd:52:be:34:13:86:9b:07:
43:88:1f:1c:2c:98:5d:1b:a3:6e:4f:ac:7a:6c:dc:d2:16:1a:
21:d5:bf:78:e7:45:89:f2:f3:4f:13:f4:87:0f:5f:05:d6:c9:
e5:12:b0:c9:60:9b:ae:4c:35:2b:e7:a4:23:d0:60:ed:66:b1:
81:5d:40:36:ac:95:f7:46:c6:b5:5a:72:56:e2:fa:51:43:80:
ce:3b:52:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:35:04 2024 by rpki-client on console-ams.rpki-client.org