Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/9yG-YUw8rh12yq2TYC5KBo-2Zp8.roa
File: 9yG-YUw8rh12yq2TYC5KBo-2Zp8.roa (raw, json)
Hash identifier: yyF1B0yPSQgnhdtT9cPNd32qXAQTZwGky52h4fKFg7k=
Subject key identifier: F7:21:BE:61:4C:3C:AE:1D:76:CA:AD:93:60:2E:4A:06:8F:B6:66:9F
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 01856D9D3EF73DEBB7F29AAEE80036EA004D
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/9yG-YUw8rh12yq2TYC5KBo-2Zp8.roa
Signing time: Sun 01 Jan 2023 13:54:59 +0000
ROA not before: Sun 01 Jan 2023 13:54:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212335
IP address blocks: 45.150.197.0/24 maxlen: 24
45.83.239.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:3e:f7:3d:eb:b7:f2:9a:ae:e8:00:36:ea:00:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: Jan 1 13:54:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f721be614c3cae1d76caad93602e4a068fb6669f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b0:4f:46:fc:58:77:28:71:34:13:fc:c8:04:
19:fd:18:aa:36:20:c8:eb:a0:c4:3a:6a:1b:9a:19:
2c:89:ab:e0:8c:e3:09:0e:de:9e:f2:fe:56:42:41:
8e:2e:ad:c9:c9:d0:c8:4d:18:f6:42:a9:48:05:9d:
9a:f7:1d:98:ee:aa:30:84:de:a1:aa:34:bb:ab:7c:
3b:9c:94:3a:9c:7e:29:84:14:7b:89:f4:fa:dc:8e:
f5:8d:d4:b5:6f:65:a7:f1:d3:72:70:b6:6e:e1:d6:
19:7a:a0:ea:5c:1c:b4:6b:08:54:67:92:1e:95:1c:
9d:2e:81:f2:21:b5:43:5c:58:93:74:5c:8d:43:89:
97:af:18:bb:4f:f4:5d:b7:84:4c:60:a8:ad:2f:f9:
7b:54:f3:48:d1:6a:ea:fb:ce:5e:b7:ed:42:1f:01:
cc:33:3d:0a:48:23:db:73:51:63:c0:40:a1:f4:23:
90:88:c4:8a:5d:52:e0:36:3b:d4:d0:f0:6a:b1:76:
72:dc:ba:1c:08:4e:77:09:50:3c:04:ea:e0:f5:a8:
8e:f8:12:a9:58:dd:d2:ca:8c:12:d7:9c:d3:1a:25:
1b:d6:9c:5b:aa:14:5e:68:81:66:dc:db:ba:0b:71:
be:63:0f:ff:de:2f:7e:a4:81:13:74:e0:d5:e1:32:
25:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:21:BE:61:4C:3C:AE:1D:76:CA:AD:93:60:2E:4A:06:8F:B6:66:9F
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/9yG-YUw8rh12yq2TYC5KBo-2Zp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.239.0/24
45.150.197.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:1d:24:ee:84:c8:87:0a:01:f8:8f:35:96:00:7e:01:9a:0e:
c7:8a:3d:aa:54:5c:d6:5d:bd:05:78:1f:c5:77:13:fb:de:78:
c6:60:3f:29:b3:55:b3:d1:72:8e:f1:80:6d:bd:10:7b:eb:f1:
60:49:58:e8:50:49:a5:23:7b:2a:47:71:d6:8d:38:54:92:ca:
70:53:a8:c5:17:4f:80:f5:41:38:60:4f:7f:6d:d8:47:63:5e:
76:12:42:89:7e:c1:71:49:18:89:f0:9d:53:da:61:22:09:c4:
f1:0d:71:c2:1d:41:ce:b0:5b:d9:94:5b:f1:1b:d0:9a:ba:29:
4c:bd:5d:39:ad:02:f6:3d:a2:67:aa:00:42:5e:4e:29:29:6a:
cc:ad:d0:f2:50:74:25:cf:70:ef:ac:2c:a5:b2:fd:b9:32:c0:
87:65:29:80:62:2c:76:5c:19:b1:0b:24:41:c6:1f:ea:32:91:
2a:34:26:d7:7b:4b:f9:07:c3:8e:3b:dd:ea:ba:48:20:b1:ae:
6f:99:c1:29:18:8a:5a:07:61:dd:1a:26:9d:1b:69:45:12:b4:
d5:8b:b1:1f:3c:00:53:45:c7:a6:8b:02:f6:f0:28:3a:a3:a1:
83:3b:1d:94:2b:b1:ba:17:12:e9:09:fb:1c:94:3e:64:14:40:
54:ce:08:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:39 2023 by rpki-client on console-ams.rpki-client.org