Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/3MYx_O9r2j2U9dbyurnwMRqRf18.roa
File: 3MYx_O9r2j2U9dbyurnwMRqRf18.roa (raw, json)
Hash identifier: ldzij8QwdbH6jUgaXWptwx8JllGWaD6kmpNHgG7QOq8=
Subject key identifier: DC:C6:31:FC:EF:6B:DA:3D:94:F5:D6:F2:BA:B9:F0:31:1A:91:7F:5F
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 018AB139325A6E1E9FAAE1CBC91EF51E3788
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/3MYx_O9r2j2U9dbyurnwMRqRf18.roa
Signing time: Wed 20 Sep 2023 06:13:50 +0000
ROA not before: Wed 20 Sep 2023 06:13:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399073
IP address blocks: 45.146.232.0/23 maxlen: 24
45.141.168.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b1:39:32:5a:6e:1e:9f:aa:e1:cb:c9:1e:f5:1e:37:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Sep 20 06:13:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dcc631fcef6bda3d94f5d6f2bab9f0311a917f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:39:60:0f:4d:dc:01:5d:77:98:91:07:06:38:
8a:1c:96:7d:94:52:ae:b2:87:a1:dd:63:a9:cd:c6:
70:8d:44:f0:60:89:51:90:3f:44:51:7b:39:13:29:
89:b8:55:c3:ab:8c:70:7b:a6:e5:9c:9a:80:7a:6d:
ae:21:cd:c5:a4:80:d1:75:ea:01:aa:3e:70:3f:5e:
7d:30:9e:5c:f8:19:7a:b2:f1:bd:eb:ea:08:c7:3e:
e5:fb:70:fb:1c:74:7c:95:aa:7c:cd:fb:8b:6b:c7:
95:05:94:8f:6a:46:1d:a4:1e:c1:b8:09:33:b2:6b:
15:2c:b0:63:f5:e1:b5:45:f5:ad:46:c1:74:cc:72:
d6:05:25:22:8f:c4:a7:e1:97:e5:d8:c9:76:17:7e:
48:d7:5a:89:f3:fb:14:49:10:26:14:53:4f:9f:57:
26:1c:23:91:05:83:fd:a5:c6:2d:19:e6:28:76:82:
d4:ca:ab:8d:27:62:3f:d7:9c:a5:20:9a:c3:db:4e:
71:e1:ef:90:4e:46:35:64:23:45:98:2d:27:75:d3:
4b:79:43:c3:39:05:25:60:67:2c:f8:2a:70:bc:c9:
2e:81:44:3b:26:53:1e:fb:08:19:25:af:df:e8:a3:
27:d0:87:0a:69:ed:37:14:62:9c:ce:93:2b:b7:58:
ef:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:C6:31:FC:EF:6B:DA:3D:94:F5:D6:F2:BA:B9:F0:31:1A:91:7F:5F
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/3MYx_O9r2j2U9dbyurnwMRqRf18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.168.0/23
45.146.232.0/23
Signature Algorithm: sha256WithRSAEncryption
70:c9:0f:eb:6b:73:19:4e:a6:85:cc:dd:18:b7:8e:7d:28:c6:
a5:6e:71:ee:fc:bc:ae:64:4e:c0:4c:92:5f:cb:2a:da:07:21:
7a:f2:20:37:8f:39:ff:61:e6:f1:72:cb:eb:24:8a:44:8b:55:
c6:a0:89:63:fe:05:23:54:05:79:6e:0e:8a:aa:41:04:16:92:
a3:02:58:75:df:3d:c3:21:c9:ed:fc:09:d8:66:49:27:61:55:
a1:5a:a6:f0:e4:48:9b:56:99:a0:95:bc:23:ef:9a:48:bd:6c:
41:a9:ac:3a:db:44:2b:dc:1c:f8:bd:8d:e6:a1:8d:e1:f0:9c:
1f:de:e3:58:be:1e:16:03:be:01:2a:71:f4:54:c1:df:20:d4:
db:8d:71:9e:09:7a:5e:01:cb:e2:f2:a8:e2:d1:1b:83:dd:0c:
22:83:e4:b6:42:94:d9:67:77:15:f4:6d:af:6a:41:67:99:08:
39:29:bd:db:2f:23:cf:86:9d:c8:99:3c:75:6a:4a:c6:61:e4:
03:3f:91:6c:3d:40:a0:da:4c:12:1a:34:49:6b:ee:44:d1:f7:
bc:d3:f8:7b:90:a3:8d:f8:bd:db:38:41:1f:e6:25:13:c7:80:
9c:75:a4:1a:0c:50:f7:e9:8a:5f:16:09:97:4b:11:10:5b:21:
3f:20:c2:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 29 08:02:30 2023 by rpki-client on console-fra.rpki-client.org