Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/i_AEGq2BwbFM8MPrDpXiDW4QckU.roa
File: i_AEGq2BwbFM8MPrDpXiDW4QckU.roa (raw, json)
Hash identifier: C8yY1bblQ7+VE7bDl20AhrkVQos8GrucBO6r8sUaXgQ=
Subject key identifier: 8B:F0:04:1A:AD:81:C1:B1:4C:F0:C3:EB:0E:95:E2:0D:6E:10:72:45
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 01856D9D3B73DA021F3B08802B31696B6CA8
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/i_AEGq2BwbFM8MPrDpXiDW4QckU.roa
Signing time: Sun 01 Jan 2023 13:54:58 +0000
ROA not before: Sun 01 Jan 2023 13:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137443
IP address blocks: 91.217.135.0/24 maxlen: 24
45.83.236.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:3b:73:da:02:1f:3b:08:80:2b:31:69:6b:6c:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: Jan 1 13:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8bf0041aad81c1b14cf0c3eb0e95e20d6e107245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c0:5d:0d:ef:60:11:a6:ec:53:51:a5:28:c5:
6b:be:29:f4:34:74:bd:ab:22:07:85:96:4c:4a:16:
8f:63:db:c2:65:4c:40:f9:3c:f4:9a:d1:b9:0f:2a:
fa:d8:6d:87:b2:97:99:56:5d:62:fe:12:84:83:c0:
f4:b0:fe:52:8c:e9:7d:e3:1e:78:0d:0c:82:94:2c:
d1:02:3b:50:d2:67:40:75:a7:75:24:44:bb:be:90:
d2:1a:e1:2d:2e:4e:66:06:5c:b8:ce:fd:18:77:57:
24:7a:06:8c:40:cc:75:27:c7:e5:18:d2:98:f9:ec:
4d:a9:51:78:5c:5a:b1:76:fd:74:c7:df:4d:3c:1b:
3d:49:11:38:79:aa:dd:e8:84:41:00:00:78:ab:a5:
37:09:5c:1f:f3:7d:66:26:22:dc:66:52:05:d8:39:
0c:13:2b:df:67:a9:82:36:9d:86:24:95:9c:2c:c3:
c9:05:fe:c7:2b:47:5d:be:77:a8:1c:4a:36:cf:90:
db:ff:b0:5e:c7:37:76:50:f7:79:b0:56:d1:c7:7a:
9e:38:59:a4:5f:81:50:e0:77:a1:1e:31:24:0e:c0:
38:fe:2a:43:8f:17:ec:d2:8d:54:cf:7a:9b:59:59:
c6:a9:f3:ef:fd:88:ef:73:18:1b:b1:18:26:f4:f2:
54:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:F0:04:1A:AD:81:C1:B1:4C:F0:C3:EB:0E:95:E2:0D:6E:10:72:45
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/i_AEGq2BwbFM8MPrDpXiDW4QckU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.236.0/24
91.217.135.0/24
Signature Algorithm: sha256WithRSAEncryption
59:6d:29:0d:be:c8:50:bc:8c:ed:35:89:d5:b8:d9:91:6d:61:
c9:9f:d3:c0:84:05:c7:f8:c0:8f:e8:ad:ab:26:22:f2:82:12:
7b:53:17:a8:cd:b5:08:a6:b0:70:43:e8:43:02:52:21:40:77:
fc:84:41:c2:0e:76:7d:fe:28:90:ea:71:66:c0:ad:58:bb:12:
7b:e4:77:57:18:2c:90:e1:f7:05:dc:e4:3c:52:f9:8c:06:32:
ff:04:ed:d8:b1:bf:fb:cf:70:b7:11:1f:ab:8e:b9:a7:e7:6c:
88:b0:3f:91:98:15:c2:86:33:b9:cf:ac:e3:db:4f:cf:32:cc:
ce:75:60:94:16:80:14:ea:0a:40:5d:67:d4:9f:61:4c:75:9c:
25:1f:a9:da:e7:7e:49:f9:b7:0d:9b:cf:5d:a5:60:6e:11:e8:
21:53:ed:b7:93:ca:ae:3d:5c:90:df:b0:b2:ec:1a:d2:2c:ca:
25:49:53:6e:a1:ce:15:79:26:d7:33:82:c7:f5:70:2f:97:4f:
b8:5a:69:70:db:2b:9d:3b:38:4a:48:af:83:24:3c:f8:af:e2:
8c:b2:f2:b9:7c:5a:6f:e9:6e:6b:65:eb:4c:c4:2d:7f:db:ac:
78:84:08:32:0e:6f:bf:c6:e6:dc:da:3a:59:75:59:b3:40:3c:
da:34:86:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:39 2023 by rpki-client on console-ams.rpki-client.org