Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/xCh6gROJ7WvlQ_E7CCCjc7AtGWY.roa
File: xCh6gROJ7WvlQ_E7CCCjc7AtGWY.roa (raw, json)
Hash identifier: MUz9hDV7zu2JjZNycZbCy6gjLFlRqL1JkNcNSEWDEK0=
Subject key identifier: C4:28:7A:81:13:89:ED:6B:E5:43:F1:3B:08:20:A3:73:B0:2D:19:66
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 01880E8B9AB6787503AD690F625288803CBC
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/xCh6gROJ7WvlQ_E7CCCjc7AtGWY.roa
Signing time: Fri 12 May 2023 06:00:10 +0000
ROA not before: Fri 12 May 2023 06:00:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6134
IP address blocks: 91.216.169.0/24 maxlen: 24
91.217.135.0/24 maxlen: 24
91.216.190.0/24 maxlen: 24
45.83.236.0/24 maxlen: 24
45.10.68.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0e:8b:9a:b6:78:75:03:ad:69:0f:62:52:88:80:3c:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: May 12 06:00:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c4287a811389ed6be543f13b0820a373b02d1966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ab:df:d4:74:c1:54:97:52:00:af:db:0a:03:
ee:35:5c:8b:0e:9c:56:21:6a:4f:61:79:e6:70:ea:
78:94:62:a5:0c:42:de:af:6e:06:88:8c:9b:0c:55:
b6:11:eb:4a:94:67:fe:67:f3:70:d9:0a:5c:8c:9d:
16:50:62:e3:1b:5e:3e:52:a1:17:e6:ed:f8:f1:23:
26:0d:83:56:51:87:cb:f3:ca:2b:9d:73:0f:c5:de:
e0:36:ed:91:a1:fb:53:3e:f3:e0:73:9a:2d:75:1d:
e2:dc:24:dd:50:b1:de:b5:25:82:b3:7d:79:4d:3c:
f7:d4:18:6c:f0:9c:13:ab:72:a1:be:51:38:1c:f1:
64:93:d9:03:62:48:11:e3:02:7c:61:ee:16:45:ea:
23:4f:a7:87:f3:33:27:9c:72:57:75:8d:b7:7d:06:
e5:bb:04:e4:3e:04:54:a4:45:08:6a:6e:48:ed:61:
ee:27:11:70:7f:7e:b0:65:34:eb:e1:b9:ce:44:1b:
c4:e6:03:b0:f1:54:f9:9c:97:5c:e7:42:c0:41:c9:
33:a6:fd:c7:01:43:b2:ac:ba:ee:d2:b8:88:2b:82:
c5:f3:0f:73:7e:5a:57:29:6f:19:d7:00:70:71:17:
61:04:a1:f5:71:d8:de:0a:be:0e:88:73:54:9e:60:
5f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:28:7A:81:13:89:ED:6B:E5:43:F1:3B:08:20:A3:73:B0:2D:19:66
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/xCh6gROJ7WvlQ_E7CCCjc7AtGWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.68.0/24
45.83.236.0/24
91.216.169.0/24
91.216.190.0/24
91.217.135.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:4a:7b:2d:e4:94:34:61:b5:79:71:92:80:cb:31:d9:3a:88:
41:8c:5e:48:56:0f:15:e4:ca:e9:f5:2b:f5:fb:e3:37:f7:be:
68:91:f7:50:7e:3d:bc:23:f5:99:30:9c:80:81:a2:ae:de:39:
35:90:0f:8c:e3:ec:bc:70:00:e2:1f:59:c2:0c:df:2d:e6:a1:
7b:42:c5:21:06:8a:99:61:07:a2:96:f2:b2:c7:b0:67:8b:82:
51:9a:f7:15:fe:ee:83:69:dd:64:73:92:3f:ec:7a:c4:8a:14:
71:fe:84:12:1f:d3:a8:e7:e0:dd:d2:db:95:4f:37:18:5e:af:
e6:72:db:15:6e:23:14:f1:96:33:c2:04:07:3c:9e:da:22:2f:
4a:d0:37:02:97:4e:d6:b4:35:be:7a:a9:21:c9:4f:bd:31:40:
aa:61:c2:bd:24:7a:fc:4b:26:19:fc:94:95:12:b6:bb:8f:5e:
4b:f6:03:9a:a8:80:43:4c:bb:0a:d1:4e:e0:b7:02:76:4d:d9:
07:c7:10:00:52:b5:9a:af:25:ba:53:db:93:0b:53:df:00:40:
92:e0:9f:32:ab:df:bd:70:aa:ca:d5:59:91:56:51:6d:e6:76:
21:3e:30:59:1d:75:e2:d4:6f:93:7d:06:6e:58:50:4c:97:94:
4d:27:a7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 5 13:41:55 2023 by rpki-client on console-ams.rpki-client.org