Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/1v-VQuYL6BXFZKP3ZPeKcI-Ks24.roa
File: 1v-VQuYL6BXFZKP3ZPeKcI-Ks24.roa (raw, json)
Hash identifier: WPCPFR2vMavmXKv8OapLwiTynPldGHHXGWip9pW4Xoo=
Subject key identifier: D6:FF:95:42:E6:0B:E8:15:C5:64:A3:F7:64:F7:8A:70:8F:8A:B3:6E
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 01861652CA1049AEFE846D9791AED6EE0662
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/1v-VQuYL6BXFZKP3ZPeKcI-Ks24.roa
Signing time: Fri 03 Feb 2023 08:09:29 +0000
ROA not before: Fri 03 Feb 2023 08:09:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 150710
IP address blocks: 45.146.242.0/23 maxlen: 24
82.115.12.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:16:52:ca:10:49:ae:fe:84:6d:97:91:ae:d6:ee:06:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Feb 3 08:09:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d6ff9542e60be815c564a3f764f78a708f8ab36e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ea:ac:9f:f3:21:d5:1f:bc:7f:a7:a0:e8:d5:
be:9b:fe:07:bb:4d:58:e5:f5:49:4a:d7:6d:10:ad:
8f:7d:ed:32:a4:f8:ea:f9:b9:22:bd:20:9e:2a:fa:
91:9b:64:2c:77:34:fc:f3:4f:4e:06:9a:1d:9d:d2:
c3:50:cd:39:37:c9:d3:b0:1f:6a:07:87:b7:f9:c3:
30:5c:95:11:c5:9d:6b:8f:2f:40:95:af:0d:4a:be:
81:92:f3:82:41:18:88:d5:08:47:69:53:84:b2:11:
fc:46:39:66:a9:c8:2d:13:dd:fb:45:da:c8:7c:1c:
0f:7a:e0:b7:63:7a:99:41:44:2b:66:19:6c:17:2f:
fd:a3:32:1c:b5:11:74:31:a6:f0:6a:08:f5:86:53:
dd:44:a6:f9:9a:ec:13:a7:8e:31:6d:55:fe:67:e1:
2d:a8:70:16:c9:f8:f9:26:5e:01:c0:6f:19:86:58:
c7:68:c3:c5:ad:ed:c6:41:fe:88:73:c5:61:a3:df:
2c:2f:a1:b5:7e:86:41:60:17:9d:0b:dc:65:49:ce:
ad:9a:a8:93:c8:2d:b5:1b:b6:83:56:7e:2a:74:5c:
38:e9:2d:63:a5:eb:9a:ca:23:65:36:68:70:d0:ad:
ef:07:2d:d9:30:cf:f1:5b:c7:59:3a:00:11:fb:c2:
03:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:FF:95:42:E6:0B:E8:15:C5:64:A3:F7:64:F7:8A:70:8F:8A:B3:6E
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/1v-VQuYL6BXFZKP3ZPeKcI-Ks24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.242.0/23
82.115.12.0/23
Signature Algorithm: sha256WithRSAEncryption
c0:7b:c9:57:81:ad:8f:b6:6d:2d:ca:ee:87:7a:14:d1:9b:42:
ce:cb:b4:fc:6d:77:09:50:7a:4a:ff:1e:f4:fa:18:ff:a4:24:
11:61:5b:1c:99:0a:0f:dd:35:21:85:e4:e3:61:81:d9:fb:2c:
3c:05:9a:22:3b:fa:6f:f8:13:5f:2f:42:ce:98:1e:bf:6d:be:
8d:50:62:7d:33:35:7a:cd:0b:90:a6:a6:13:6d:01:be:df:86:
a0:6b:e3:3c:cd:41:e7:80:28:90:f3:63:d1:0b:89:2c:1a:92:
0b:d9:a1:3b:06:af:a8:d2:68:98:53:f0:4d:f9:bb:7b:35:66:
8c:6c:1f:d6:7d:78:54:42:26:80:b9:89:a9:b9:73:3a:93:48:
05:cf:82:6c:cc:a5:d0:62:ad:29:dc:5d:92:93:f7:9b:7d:85:
16:a5:35:d4:c5:fd:0c:e3:f2:82:47:d1:d0:f3:7a:cb:df:3c:
ca:7f:67:f8:a6:2a:75:87:d8:cc:02:e8:a9:3d:0d:82:9c:72:
0a:c0:a1:da:33:79:36:20:2a:35:22:fa:66:af:60:97:92:0f:
1f:fb:af:f9:73:ac:8f:41:e1:01:cc:46:5b:d6:9f:8a:1c:6b:
f3:ed:ca:7b:8c:16:44:a7:77:0f:53:9d:a7:bf:d3:c4:fa:dd:
26:41:a7:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:24 2023 by rpki-client on console-ams.rpki-client.org