Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/0yy-kw7-R7ZCLsOKTASpL5kiQYI.roa
File: 0yy-kw7-R7ZCLsOKTASpL5kiQYI.roa (raw, json)
Hash identifier: aeNf0JvC/aNmyK/Qex7fmnAvZXuOi8s4NThZTl8bW+I=
Subject key identifier: D3:2C:BE:93:0E:FE:47:B6:42:2E:C3:8A:4C:04:A9:2F:99:22:41:82
Certificate issuer: /CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
Certificate serial: 018572C381E03D12B8CB3C8D7C027C917D15
Authority key identifier: 21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/0yy-kw7-R7ZCLsOKTASpL5kiQYI.roa
Signing time: Mon 02 Jan 2023 13:54:53 +0000
ROA not before: Mon 02 Jan 2023 13:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44436
IP address blocks: 194.59.214.0/24 maxlen: 24
45.90.75.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:c3:81:e0:3d:12:b8:cb:3c:8d:7c:02:7c:91:7d:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
Validity
Not Before: Jan 2 13:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d32cbe930efe47b6422ec38a4c04a92f99224182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:47:3b:48:bd:76:c9:b3:63:e3:e4:84:70:70:
dc:11:a4:6b:1d:88:9d:35:06:1f:11:fa:de:14:6e:
8d:80:e7:70:8b:c4:5a:06:b8:92:96:e3:27:89:89:
e2:6e:7c:39:f1:21:d0:6e:f2:60:4a:a4:cb:0c:a9:
82:8c:dd:fb:ad:4b:fd:2a:8b:b6:b1:a1:2c:14:10:
c9:ee:c1:af:ed:41:dc:69:73:32:fa:b4:0d:05:82:
09:2a:0b:f7:0f:14:52:63:f3:b3:b4:e1:9d:d3:e5:
ad:fa:16:7b:e6:fd:e7:c9:19:8e:a8:92:e7:3e:28:
b7:92:b0:9f:76:78:9c:ea:46:3b:8a:c1:2f:76:a6:
03:c1:51:16:66:f7:b4:1d:83:92:9a:70:4d:6c:9f:
d0:11:f9:f9:03:b4:a9:be:9e:98:31:d2:c1:c5:e6:
90:8e:04:9b:ee:67:a1:ba:59:5b:48:97:89:53:c0:
e6:fc:a7:bc:2a:bc:31:18:d6:3d:50:47:f5:99:58:
d9:84:22:7f:80:fb:32:7e:f7:c3:86:ce:16:11:95:
78:34:49:dc:62:59:0f:a6:3c:b7:30:eb:76:bf:5d:
92:f3:07:1b:9c:f4:02:bc:b7:47:7d:71:cb:ca:55:
2d:00:22:2d:11:12:54:56:01:17:04:de:c0:5c:6f:
ea:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:2C:BE:93:0E:FE:47:B6:42:2E:C3:8A:4C:04:A9:2F:99:22:41:82
X509v3 Authority Key Identifier:
keyid:21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/0yy-kw7-R7ZCLsOKTASpL5kiQYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.75.0/24
194.59.214.0/24
Signature Algorithm: sha256WithRSAEncryption
76:76:48:9f:af:76:f7:03:a9:ef:e8:38:29:ac:e2:26:90:e1:
33:39:bd:c2:a1:a8:5c:2e:01:1b:e3:30:0a:79:43:a6:14:1f:
58:63:da:98:89:cd:44:32:e8:63:32:97:d8:d5:da:ff:6e:d6:
99:46:02:c4:4d:92:6c:5f:4e:1d:b2:69:5c:5a:f6:c8:bc:7e:
17:db:ab:ec:6b:65:9a:c4:c4:56:25:bd:21:7d:2d:74:30:1b:
54:4a:5f:f7:67:40:ca:6c:fa:a8:e4:99:e0:e9:99:53:87:0c:
8f:db:94:06:d9:eb:53:be:e2:ba:10:57:65:17:2c:cd:db:13:
12:be:c3:6c:ef:f7:00:12:eb:6f:87:de:98:69:c7:43:52:bf:
04:ae:6e:d9:f9:8a:6b:58:fb:6d:df:32:ab:ee:92:43:5b:d4:
8c:bc:02:89:37:f9:49:76:b8:2a:0a:bf:2e:c8:92:77:9b:a7:
47:fd:47:bd:58:d4:f2:1c:00:91:7f:82:91:a0:33:d2:52:cc:
f1:e9:7d:ba:40:90:e2:66:91:9e:d7:ce:52:38:26:94:76:c6:
3b:de:45:31:60:4d:73:f2:49:c2:76:05:29:ea:ed:d4:1d:d2:
cd:06:d5:3d:4e:b4:79:b1:07:9b:8e:47:45:cb:4e:cc:77:2e:
af:93:bc:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 23 16:52:59 2023 by rpki-client on console-fra.rpki-client.org