Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/aIHtSAUtImMIx3_7WNiMn8wr7F0.roa
File: aIHtSAUtImMIx3_7WNiMn8wr7F0.roa (raw, json)
Hash identifier: zCIi0LrUffSPjL1p6c8iHfNgFXoDl4kv0dC0myG0hpY=
Subject key identifier: 68:81:ED:48:05:2D:22:63:08:C7:7F:FB:58:D8:8C:9F:CC:2B:EC:5D
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 01880E91178DE5A2B7C65D97D6FB4DFD8806
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/aIHtSAUtImMIx3_7WNiMn8wr7F0.roa
Signing time: Fri 12 May 2023 06:06:09 +0000
ROA not before: Fri 12 May 2023 06:06:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21859
IP address blocks: 91.208.245.0/24 maxlen: 24
91.208.246.0/24 maxlen: 24
45.10.70.0/23 maxlen: 24
45.10.69.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0e:91:17:8d:e5:a2:b7:c6:5d:97:d6:fb:4d:fd:88:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: May 12 06:06:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6881ed48052d226308c77ffb58d88c9fcc2bec5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:69:0c:36:32:e5:84:95:f2:58:fc:56:81:70:
b9:7e:8e:46:92:9a:5d:4a:d0:d9:d8:df:4c:9e:6e:
16:11:f5:91:da:45:01:f1:aa:e1:fe:17:3f:4b:44:
cc:3c:ba:b9:ef:3e:bc:32:50:ae:77:79:e1:b3:28:
47:43:0f:1e:33:63:7f:08:3a:da:ec:da:62:b4:bf:
36:84:a4:21:f0:ae:17:6e:bc:8f:f3:b0:cd:81:92:
72:c3:c8:b9:2a:40:78:c1:ce:3d:2f:de:42:f6:e8:
9d:2c:cd:bc:3c:d2:2d:d1:21:e3:ff:bf:6a:90:24:
08:f9:22:03:65:8d:bf:c6:00:77:01:d4:b7:c1:33:
4c:1d:9d:fb:3a:13:c2:6f:7b:26:26:cb:c8:e8:79:
a9:9f:ce:94:d5:6a:a4:24:69:26:55:ce:e9:b6:f3:
e2:23:5f:d1:28:a7:fd:e4:9e:e4:0c:0b:27:a0:c1:
69:4e:2f:b0:b0:7b:9c:36:f1:73:56:7f:77:b1:f4:
35:fe:a8:49:f1:ba:b4:9b:5c:2f:22:49:ea:03:8c:
5f:f5:7d:66:72:89:fa:e7:e0:fc:41:f5:18:d1:03:
55:73:b6:4b:cd:b5:70:e4:5f:9f:bd:d0:59:21:14:
3d:1c:6f:3e:0f:e1:8a:8c:26:6e:21:8b:ee:1e:97:
4a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:81:ED:48:05:2D:22:63:08:C7:7F:FB:58:D8:8C:9F:CC:2B:EC:5D
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/aIHtSAUtImMIx3_7WNiMn8wr7F0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.69.0-45.10.71.255
91.208.245.0-91.208.246.255
Signature Algorithm: sha256WithRSAEncryption
12:c9:dc:e7:52:7d:52:16:db:5a:31:17:a1:cc:d7:48:f5:74:
21:52:3f:74:76:bd:8e:cf:7e:70:03:b9:e2:40:c6:d9:91:c1:
a5:7f:43:ab:42:0b:12:85:ba:9e:72:db:28:9b:72:0c:41:14:
a0:4b:28:13:3b:5c:6b:93:6e:be:db:3d:f2:a9:44:b9:a2:a6:
e7:98:5d:35:8a:a6:ee:0b:6e:89:24:73:e2:25:e0:af:c7:07:
a1:af:80:ff:31:ca:e4:0c:30:55:7f:ec:6a:ee:c7:5f:87:38:
8c:1b:ba:ad:ba:3c:11:bb:61:fb:d8:dd:ec:1f:91:4b:eb:c8:
93:7a:ec:9e:58:95:6a:f7:57:3e:96:9f:f5:ff:46:96:d1:f6:
07:bd:ba:33:2e:1a:71:f9:e3:21:c3:1a:d8:04:83:bc:e1:ba:
96:56:e9:1c:76:52:3e:3f:a4:62:e5:a4:20:a9:34:24:96:88:
b4:0c:4f:e8:2f:8c:1f:05:48:83:42:85:ba:a7:a8:5c:80:2a:
35:0a:5a:30:46:2f:25:1e:17:2f:fd:2f:f8:27:82:26:e4:e8:
30:2b:52:68:bb:dd:f0:9b:5d:ce:86:cc:4d:69:46:9d:1d:01:
f1:91:05:fb:bc:6c:34:c8:62:31:21:84:cd:4c:39:16:15:7f:
ed:11:b9:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:15:04 2024 by rpki-client on console-fra.rpki-client.org