Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/8af8e6-19c1-4be1-af23-19916a4aeeb3/1/1r4vuqkKSRkbD7nc_VyQpvfak70.roa
File: 1r4vuqkKSRkbD7nc_VyQpvfak70.roa (raw, json)
Hash identifier: 2n+8Q5MB7aIkd3izUQOD5r+uNCI+UaWhnOlymJ3cH08=
Subject key identifier: D6:BE:2F:BA:A9:0A:49:19:1B:0F:B9:DC:FD:5C:90:A6:F7:DA:93:BD
Certificate issuer: /CN=7a7cf1a2aa83b126ff4ceef473a47397abf8ff0d
Certificate serial: 0185708CBCC66336C0D018282EB5318E20DA
Authority key identifier: 7A:7C:F1:A2:AA:83:B1:26:FF:4C:EE:F4:73:A4:73:97:AB:F8:FF:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/enzxoqqDsSb_TO70c6Rzl6v4_w0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/8af8e6-19c1-4be1-af23-19916a4aeeb3/1/1r4vuqkKSRkbD7nc_VyQpvfak70.roa
Signing time: Mon 02 Jan 2023 03:35:49 +0000
ROA not before: Mon 02 Jan 2023 03:35:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201150
IP address blocks: 46.249.120.0/21 maxlen: 24
45.84.156.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:bc:c6:63:36:c0:d0:18:28:2e:b5:31:8e:20:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a7cf1a2aa83b126ff4ceef473a47397abf8ff0d
Validity
Not Before: Jan 2 03:35:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d6be2fbaa90a49191b0fb9dcfd5c90a6f7da93bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:07:f2:54:09:34:5b:f3:b1:22:e4:c4:6c:9d:
12:8f:a9:1f:c1:6d:66:c0:91:9c:02:59:ab:bf:91:
10:27:f0:67:aa:bb:59:22:da:63:93:55:39:04:5d:
18:d3:c6:c6:18:c4:49:b7:f2:28:08:cd:fb:7e:4c:
94:30:9a:cf:d6:8b:54:c3:49:cb:86:02:cd:7e:e5:
00:0d:8e:58:9b:22:18:4e:39:06:fe:d8:9f:63:7b:
db:5a:ab:d9:1e:41:a3:d1:55:c1:b6:c2:84:a9:d8:
79:60:20:5a:e3:0b:34:49:63:2a:60:ff:3b:94:db:
02:7a:c1:7a:ea:64:91:4a:bf:79:8e:9c:d7:01:00:
31:6f:83:d1:36:ce:05:31:3f:f0:89:2d:04:bb:99:
c2:2b:80:45:ba:4f:bb:0d:4a:e3:40:eb:b9:83:96:
3f:b7:b8:87:16:80:2c:7d:49:38:c3:4b:15:5b:6e:
2a:61:ee:43:cc:12:b5:21:e5:ee:be:bf:84:f4:7b:
f4:4a:e8:3b:70:a2:de:c0:b7:b3:9b:5c:a3:e9:3f:
e3:8e:ab:6e:70:cc:e9:83:05:5b:e9:bf:58:ae:11:
77:f9:5d:c7:d2:a8:88:d1:9c:0e:e6:f1:99:da:b5:
ec:96:f3:ba:3a:55:89:9a:f2:26:50:f7:62:ea:63:
dc:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:BE:2F:BA:A9:0A:49:19:1B:0F:B9:DC:FD:5C:90:A6:F7:DA:93:BD
X509v3 Authority Key Identifier:
keyid:7A:7C:F1:A2:AA:83:B1:26:FF:4C:EE:F4:73:A4:73:97:AB:F8:FF:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/enzxoqqDsSb_TO70c6Rzl6v4_w0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8af8e6-19c1-4be1-af23-19916a4aeeb3/1/1r4vuqkKSRkbD7nc_VyQpvfak70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8af8e6-19c1-4be1-af23-19916a4aeeb3/1/enzxoqqDsSb_TO70c6Rzl6v4_w0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.156.0/22
46.249.120.0/21
Signature Algorithm: sha256WithRSAEncryption
5e:a3:b7:36:f5:fb:0a:51:24:53:09:f7:cd:3b:51:08:c5:64:
d8:69:5b:89:03:63:8c:21:48:4e:d6:d2:92:6b:fa:a7:a7:eb:
b2:f2:9e:11:e1:eb:ec:87:25:91:0b:73:48:32:7f:87:b2:80:
5c:d8:a4:d1:f0:4a:eb:1e:4c:0b:39:c3:cd:fd:53:5c:33:fb:
92:c3:4d:6b:4b:97:3f:89:16:bf:13:60:a7:c4:1e:5a:26:30:
bc:e0:7a:01:d1:56:f8:aa:65:49:c9:05:ad:47:e5:f4:95:e8:
d1:fa:fd:86:38:2c:b2:01:64:aa:25:6f:43:fb:ca:83:a8:b2:
8a:8d:13:b1:72:53:af:e5:26:b6:d1:aa:39:cf:d3:17:20:6b:
3d:be:38:9c:c0:2f:63:f2:7e:3f:bf:8e:e3:0a:21:d5:6a:2a:
cb:68:34:be:65:19:1c:b4:04:70:36:64:57:d4:e5:d1:0d:be:
78:c0:eb:08:62:1f:d8:05:0f:08:c4:1e:e4:b7:34:8e:ed:14:
81:9a:cb:37:13:49:8a:1b:f3:6e:51:73:52:a0:5f:dd:43:a0:
a4:57:ae:c7:65:d6:38:6a:56:c2:f2:10:86:ac:71:cd:9e:f3:
b4:57:d9:8f:90:7e:71:17:92:da:f8:9f:be:d3:51:87:96:f1:
17:f5:f3:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:10:06 2024 by rpki-client on console-ams.rpki-client.org