Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/X_I6ewHAF2DUC6FKoN3t_qIvWjI.roa
File: X_I6ewHAF2DUC6FKoN3t_qIvWjI.roa (raw, json)
Hash identifier: UCZi26BfzOv5yBndbnQ1lE6VY2tEFWSG+9TA/7Ld7rc=
Subject key identifier: 5F:F2:3A:7B:01:C0:17:60:D4:0B:A1:4A:A0:DD:ED:FE:A2:2F:5A:32
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 0185727A3BC65290AAE8A67EDB436548AFFB
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/X_I6ewHAF2DUC6FKoN3t_qIvWjI.roa
Signing time: Mon 02 Jan 2023 12:34:51 +0000
ROA not before: Mon 02 Jan 2023 12:34:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137409
IP address blocks: 45.139.6.0/23 maxlen: 24
82.115.12.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:7a:3b:c6:52:90:aa:e8:a6:7e:db:43:65:48:af:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 2 12:34:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ff23a7b01c01760d40ba14aa0ddedfea22f5a32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b9:4d:e9:23:9e:2c:26:7e:22:b1:30:f9:96:
ee:e8:24:0c:dd:31:0e:65:eb:fb:10:37:50:80:ed:
5b:68:ff:d9:66:7a:47:39:db:bc:b2:8b:f1:66:d9:
8d:cf:9d:fa:6e:a2:b2:68:a0:3e:75:5b:3c:38:46:
1f:13:fa:20:27:a4:19:96:6a:36:90:ef:ee:08:51:
51:6c:a7:4d:15:d1:24:c6:1f:7c:8a:f4:4c:ac:73:
03:d9:2f:c1:bb:6e:59:58:0c:a9:86:98:a4:55:34:
4f:c5:7c:3c:a7:e0:f2:28:6c:50:eb:96:a1:e1:28:
d1:27:3f:25:66:ce:2e:0f:7a:f4:8a:97:45:87:46:
7d:80:36:e7:ac:3e:a4:b5:59:1d:14:89:9b:ce:4a:
ee:61:32:ec:e6:22:df:49:28:bb:81:2d:3c:92:d0:
f3:c2:38:36:9b:c0:90:c2:17:9f:f5:e6:05:52:fb:
cd:66:0e:ef:03:e1:6a:85:27:ce:d3:80:e9:0d:a2:
6f:f8:56:a9:66:2e:f8:7c:ee:82:a3:66:e8:5f:11:
3b:af:3e:0e:bd:a6:21:ac:47:d9:ec:6d:00:a3:74:
7d:60:05:f3:19:f3:89:ea:1a:19:df:33:83:9e:22:
1a:a4:3c:53:50:62:75:d3:42:fb:f6:17:18:66:18:
9a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F2:3A:7B:01:C0:17:60:D4:0B:A1:4A:A0:DD:ED:FE:A2:2F:5A:32
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/X_I6ewHAF2DUC6FKoN3t_qIvWjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.6.0/23
82.115.12.0/23
Signature Algorithm: sha256WithRSAEncryption
72:39:a0:5e:ed:79:14:bc:3d:ff:d4:80:8f:b0:61:27:cb:52:
06:f1:55:5b:57:75:6d:d9:5b:ed:4f:ed:c3:35:84:df:96:17:
6e:4c:ff:80:5e:94:5d:a8:34:68:d6:b8:82:d5:53:80:7c:96:
a1:26:40:46:19:4a:94:71:71:2b:e5:50:a7:57:ca:aa:ea:1a:
8a:c2:1c:2e:48:4a:95:b0:9b:41:e7:87:a2:f4:91:38:66:48:
ba:54:6b:e7:ce:92:a4:e7:36:f0:2b:25:20:44:f7:ba:da:5c:
c3:9b:ef:2b:7c:4e:74:6c:14:91:63:5e:bd:64:c4:9a:e1:2a:
32:de:86:78:79:bb:45:f9:d7:9f:cf:0b:a2:bb:32:18:86:87:
32:e0:97:17:88:c6:60:6a:42:07:df:2b:6b:5c:6a:66:e9:dd:
ae:43:bb:15:aa:c7:b3:5e:23:04:fd:18:77:95:78:ff:52:2e:
b6:97:ca:2f:54:c3:f7:46:e0:18:61:2a:0d:e5:47:fd:4d:6f:
0b:91:e9:a9:79:72:c5:91:17:4c:17:a8:33:89:98:f1:c7:b4:
01:d0:a3:80:da:80:99:a1:cd:fc:bc:4d:35:73:63:f6:44:72:
bc:f7:3f:e9:c9:e9:20:05:12:cc:9a:f4:e2:31:89:69:3d:43:
c1:cd:07:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:24 2023 by rpki-client on console-ams.rpki-client.org