Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/CAxqw0VBFByJWpyk4CGaL0hbZP8.roa
File: CAxqw0VBFByJWpyk4CGaL0hbZP8.roa (raw, json)
Hash identifier: G9PSZZIGk1inrt4b/B3A9Qw2vr/n5JS/GpxDaRt2frg=
Subject key identifier: 08:0C:6A:C3:45:41:14:1C:89:5A:9C:A4:E0:21:9A:2F:48:5B:64:FF
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 01857CCB6115BD6A488B458D873020728272
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/CAxqw0VBFByJWpyk4CGaL0hbZP8.roa
Signing time: Wed 04 Jan 2023 12:39:41 +0000
ROA not before: Wed 04 Jan 2023 12:39:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6134
IP address blocks: 91.216.169.0/24 maxlen: 24
91.217.135.0/24 maxlen: 24
91.216.190.0/24 maxlen: 24
45.83.236.0/24 maxlen: 24
45.10.68.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:7c:cb:61:15:bd:6a:48:8b:45:8d:87:30:20:72:82:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: Jan 4 12:39:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=080c6ac34541141c895a9ca4e0219a2f485b64ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:94:82:d8:75:27:74:94:33:a6:71:dd:e6:19:
60:73:ea:81:95:f7:4b:60:1b:a0:ac:1c:72:80:ca:
0f:4f:93:6f:16:4a:7a:9d:ba:67:7e:6c:a0:3f:c4:
7a:f9:7a:8e:c2:78:70:a5:18:f5:38:65:15:5e:75:
39:dd:61:81:60:63:e8:6d:cc:83:c1:c6:b2:74:b7:
92:45:42:c1:67:56:9e:cc:e2:a2:11:fb:51:ce:a1:
1d:bb:cd:81:b4:e1:af:67:94:12:39:a7:81:16:ff:
9c:78:20:91:f4:fa:6d:b9:f6:d1:ed:d0:96:c2:d4:
a7:70:d6:6b:72:dd:6f:85:d6:78:72:9d:58:ec:d3:
69:4a:f6:51:0a:38:21:9c:a4:98:db:f2:f2:44:a1:
c8:58:fb:4b:51:16:2a:8d:6e:32:00:04:ea:40:fd:
50:cb:f0:13:30:30:0b:78:a1:85:fa:20:bb:d3:c2:
24:3e:4c:67:ed:a1:92:cb:59:ab:97:c7:54:dc:fa:
66:2d:76:17:fe:c6:a8:0e:80:4e:ed:ab:0b:67:12:
1f:75:d2:83:89:be:3e:77:8a:c2:7b:d4:ce:db:39:
38:56:8f:cd:4b:b6:c4:71:5a:df:a9:64:25:3f:9d:
0f:d6:16:da:de:5c:33:4d:37:77:89:b0:fb:02:38:
20:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:0C:6A:C3:45:41:14:1C:89:5A:9C:A4:E0:21:9A:2F:48:5B:64:FF
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/CAxqw0VBFByJWpyk4CGaL0hbZP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.68.0/24
45.83.236.0/24
91.216.169.0/24
91.216.190.0/24
91.217.135.0/24
Signature Algorithm: sha256WithRSAEncryption
23:18:a9:81:3c:be:f5:84:ba:cf:ed:c4:06:e6:2d:7a:3a:08:
58:75:38:c3:d3:76:9e:4c:39:2a:26:f1:b5:5b:2b:f6:14:62:
dd:bd:e4:5d:b1:24:b1:7b:c4:c6:4d:51:e5:26:8e:9e:c8:3c:
85:87:6a:65:92:ad:3b:84:91:95:e3:51:4b:d8:1a:15:b6:ee:
78:38:e6:09:f0:39:56:fd:ad:c8:d5:86:5d:84:c2:c4:9f:93:
f4:eb:9d:6e:e4:2d:74:ce:67:9a:bb:39:7f:7c:72:ae:4a:1b:
c5:14:25:e1:1e:8e:58:32:c8:c1:29:ca:73:a4:b3:e2:b0:3c:
32:0c:11:f9:91:99:73:dd:f3:9f:fc:cb:ab:77:b5:41:02:03:
46:8b:15:ed:fe:56:76:5b:f5:21:5a:a7:9e:10:65:18:4d:de:
38:af:a0:7e:a1:11:a0:94:86:b7:d4:8a:18:f5:4d:f0:91:e9:
07:2e:eb:25:7e:e4:94:47:76:18:99:93:60:6c:db:3d:14:bf:
31:91:f5:b8:bb:94:8b:13:0d:c8:8f:cc:38:40:7d:ea:cf:70:
bb:12:53:1f:2e:cd:c4:2d:ef:7d:50:ee:97:5d:76:c2:7a:08:
53:d5:c8:fe:99:0b:fc:f5:40:92:67:80:02:76:c1:90:18:9b:
b8:af:25:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:39 2023 by rpki-client on console-ams.rpki-client.org