Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/i4-_WstXweZruZNFgQXnKXIho4I.roa
File: i4-_WstXweZruZNFgQXnKXIho4I.roa (raw, json)
Hash identifier: qxFWH+GzcC5GtXamLjPZxrIHYAU+HWp9KZnTVkel5sk=
Subject key identifier: 8B:8F:BF:5A:CB:57:C1:E6:6B:B9:93:45:81:05:E7:29:72:21:A3:82
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 0189F4D7751519106CFA49CC9D56E6C9A1C9
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/i4-_WstXweZruZNFgQXnKXIho4I.roa
Signing time: Mon 14 Aug 2023 16:18:28 +0000
ROA not before: Mon 14 Aug 2023 16:18:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 45.146.234.0/23 maxlen: 23
188.64.104.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f4:d7:75:15:19:10:6c:fa:49:cc:9d:56:e6:c9:a1:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Aug 14 16:18:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b8fbf5acb57c1e66bb993458105e7297221a382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1c:ac:15:d6:e4:14:5a:7e:82:f7:2e:82:9b:
5a:23:1a:ca:63:ba:3a:e9:d7:99:2e:50:78:03:e6:
28:e5:60:08:d4:57:bc:0a:12:d5:8c:78:1e:d6:39:
81:01:fc:de:6a:62:70:46:5d:2b:e7:ac:d5:84:27:
ed:ec:52:bf:e0:a5:8d:e4:fb:21:5f:f1:80:f0:f7:
f9:87:89:23:b7:1d:de:56:ac:e7:18:5d:15:53:6b:
88:5a:d4:67:56:06:d1:16:53:76:e0:88:09:a7:c8:
78:5f:10:65:f9:2b:c5:67:56:26:cb:ec:cf:ae:41:
32:11:ac:c8:1f:06:32:d3:54:57:e6:dc:c7:a4:f6:
48:c9:7b:00:9d:24:0b:2e:6e:33:f2:91:8d:a0:90:
c9:49:6b:38:aa:c3:87:a2:32:57:cd:79:06:0d:df:
c7:54:58:32:09:88:1a:e8:e9:60:0e:d8:eb:f1:f2:
99:ef:9c:ba:8a:36:7b:67:f0:6a:20:3c:94:2f:91:
3c:f4:b1:72:84:8e:09:3e:84:43:be:40:fe:d9:5b:
b9:38:10:f9:cf:52:0f:43:63:8e:5d:58:35:ef:c8:
d6:61:17:10:b4:39:8a:36:1b:59:3f:83:b6:5e:a2:
79:25:29:71:58:19:30:34:3f:75:4a:e0:49:8d:a3:
3e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:8F:BF:5A:CB:57:C1:E6:6B:B9:93:45:81:05:E7:29:72:21:A3:82
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/i4-_WstXweZruZNFgQXnKXIho4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.234.0/23
188.64.104.0/22
Signature Algorithm: sha256WithRSAEncryption
98:b6:28:e6:98:7a:44:57:4a:2f:27:28:94:61:40:64:3a:71:
6c:a9:1e:4d:be:54:47:f4:23:fd:2e:cc:cd:0b:9d:42:1c:33:
45:b3:18:64:bb:bf:c9:84:1d:ef:3f:c7:79:3f:b3:32:70:9d:
3f:47:fb:b2:3d:d3:85:01:d6:1f:f9:e4:07:42:27:f2:fe:8b:
c3:b1:07:0f:26:cb:75:f6:7d:1e:a7:15:c7:19:d0:73:6a:16:
11:88:83:cd:24:3f:1f:d7:30:14:fd:49:cb:f2:91:57:82:33:
ca:0f:c8:22:94:ce:b1:7e:b8:c7:63:fb:1f:e1:bd:80:82:33:
ab:0a:d0:10:f2:e2:f2:0f:8d:5c:f8:60:b0:96:51:96:34:f2:
6a:89:d5:8a:f3:bb:59:58:c4:ab:92:fa:e0:d3:16:23:7e:ba:
d9:7c:00:8a:92:27:ba:fc:d6:a9:3b:8f:a5:d4:3c:2c:9f:b8:
76:b1:24:ea:da:69:07:50:2d:70:50:9f:7c:d8:79:69:8b:51:
28:8f:bc:55:4d:b7:54:d3:db:95:89:ae:39:ed:71:78:9f:42:
c7:9c:72:e9:9a:72:a3:74:e1:d6:74:ec:50:b3:32:9f:bc:95:
87:3c:d4:08:a5:d7:e0:a8:ba:fd:1e:02:e9:e4:7c:b2:0b:e0:
3a:2a:f5:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 5 07:42:05 2023 by rpki-client on console-ams.rpki-client.org