Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/OV1fX5sVUSPLtQw8qf4ZIdb-FlY.roa
File: OV1fX5sVUSPLtQw8qf4ZIdb-FlY.roa (raw, json)
Hash identifier: 2enEGjQzBIqKXyIwod+ojB+tUP2PdboRZkqum0hli1A=
Subject key identifier: 39:5D:5F:5F:9B:15:51:23:CB:B5:0C:3C:A9:FE:19:21:D6:FE:16:56
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 01856D9D36E56FFA4EAAD5CB75862C0A80A6
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/OV1fX5sVUSPLtQw8qf4ZIdb-FlY.roa
Signing time: Sun 01 Jan 2023 13:54:57 +0000
ROA not before: Sun 01 Jan 2023 13:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6134
IP address blocks: 91.216.169.0/24 maxlen: 24
91.216.190.0/24 maxlen: 24
45.10.68.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:36:e5:6f:fa:4e:aa:d5:cb:75:86:2c:0a:80:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: Jan 1 13:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=395d5f5f9b155123cbb50c3ca9fe1921d6fe1656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a2:de:5f:94:d0:f7:80:f9:6e:26:ac:d4:52:
64:66:b5:91:03:9f:8c:6c:2b:1d:d6:f8:11:92:e8:
3e:17:9e:df:8a:e3:5e:68:0c:99:81:33:55:c5:e5:
55:07:88:74:d6:ad:cd:4c:0e:a3:4d:b6:c1:e8:68:
a5:d0:20:86:b9:0a:61:6e:28:bc:c6:a1:42:27:f0:
60:3c:03:8f:a0:e1:6e:62:df:f4:18:0d:0b:7a:01:
30:7f:c4:56:c3:18:36:55:f7:45:c3:f3:6c:e5:61:
12:b4:8e:5a:75:65:21:03:62:b3:91:37:03:fc:b3:
ee:09:3c:47:7c:c0:87:21:ee:c1:60:e5:e4:5e:37:
34:de:fd:30:3c:db:12:b0:53:7f:cd:d3:50:d2:7c:
e8:70:4c:cf:29:37:77:ca:1b:8f:1f:80:48:87:3d:
0d:69:19:de:fb:43:12:25:55:5f:7a:68:f8:04:fc:
6b:c1:09:b3:c8:7b:4f:92:32:96:01:7f:b7:de:4e:
ec:f4:fe:2e:27:a3:08:19:d6:cd:db:ae:36:7b:bf:
51:07:3f:00:3a:ff:17:4a:68:3c:19:c6:e6:c6:96:
66:cc:b1:c8:71:b5:3a:1b:d1:4d:a7:ae:52:27:d4:
46:82:dd:2b:6f:ec:1a:aa:74:53:4a:a2:ad:a8:23:
f5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:5D:5F:5F:9B:15:51:23:CB:B5:0C:3C:A9:FE:19:21:D6:FE:16:56
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/OV1fX5sVUSPLtQw8qf4ZIdb-FlY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.68.0/24
91.216.169.0/24
91.216.190.0/24
Signature Algorithm: sha256WithRSAEncryption
94:68:ae:f7:51:02:ac:f2:2a:0c:1d:5a:5b:07:ac:3e:22:7d:
6a:c8:c6:da:c8:d9:4b:76:be:23:e1:f3:ae:2b:42:a3:de:7c:
49:4b:29:92:64:04:42:f4:bf:a2:ee:fd:15:60:e8:77:bd:5d:
24:ea:95:30:ac:fb:a1:1f:25:84:cd:1d:c8:c2:43:68:ba:2c:
9a:4d:22:a9:69:f4:3b:5b:a6:20:d8:34:e6:9a:cb:f0:1a:81:
05:3b:fe:8f:90:1f:9b:92:91:4c:d1:43:ac:a5:f6:6b:98:ab:
ef:7c:c5:2e:63:86:65:25:f7:6a:41:49:3d:fc:50:30:3b:05:
27:70:66:d5:08:34:5f:92:8e:21:28:83:99:46:63:a0:06:7a:
34:11:0d:4f:6a:37:3d:b2:df:21:d7:7b:78:b2:c9:4f:a6:94:
36:d7:43:15:27:b1:19:38:31:32:56:fc:28:40:46:31:86:e9:
48:5d:bb:5c:67:90:bd:35:9b:06:36:27:18:41:91:64:f6:40:
7b:ed:ca:3c:f5:c7:d4:52:8f:d7:17:0d:2e:8d:df:75:ca:6d:
17:54:cf:c2:9b:eb:23:cc:2b:43:a5:0d:bc:bc:f8:46:fe:70:
4e:79:19:b3:d3:0d:f9:0f:45:ca:62:d3:f6:0b:f0:88:7a:0a:
e4:7b:fe:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:39 2023 by rpki-client on console-ams.rpki-client.org