Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/w1kDlTiFd9YZ_QTEJ6B8QzM4jtM.roa
File: w1kDlTiFd9YZ_QTEJ6B8QzM4jtM.roa (raw, json)
Hash identifier: +igbJZ+r/YRZ+gSin9wvzhngzkMsbRzJIX+h2yuVf+A=
Subject key identifier: C3:59:03:95:38:85:77:D6:19:FD:04:C4:27:A0:7C:43:33:38:8E:D3
Certificate issuer: /CN=a66246b806e89aba40e7e58888f3576513a3934a
Certificate serial: 01857142F2FEB17F709C91E5E7E6261B7CEB
Authority key identifier: A6:62:46:B8:06:E8:9A:BA:40:E7:E5:88:88:F3:57:65:13:A3:93:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/w1kDlTiFd9YZ_QTEJ6B8QzM4jtM.roa
Signing time: Mon 02 Jan 2023 06:54:51 +0000
ROA not before: Mon 02 Jan 2023 06:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208821
IP address blocks: 45.83.33.0/24 maxlen: 24
45.83.35.0/24 maxlen: 24
45.83.32.0/24 maxlen: 24
45.83.34.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:42:f2:fe:b1:7f:70:9c:91:e5:e7:e6:26:1b:7c:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a66246b806e89aba40e7e58888f3576513a3934a
Validity
Not Before: Jan 2 06:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c3590395388577d619fd04c427a07c4333388ed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cf:9a:77:f4:df:1e:7b:14:f3:ca:b0:c8:4e:
78:b4:24:ce:37:c8:da:2e:54:34:b0:c7:9b:6b:29:
eb:5c:5b:e0:88:79:90:c6:ae:da:ba:96:79:a0:ea:
96:fc:08:3a:eb:bd:7a:05:8b:c5:82:5a:17:27:45:
e4:37:fe:10:5d:11:b1:16:b9:e7:8f:c5:8d:7a:92:
f1:ff:34:22:bb:bd:5f:bd:cd:53:54:59:c0:87:1e:
e2:5c:0f:3a:ff:48:cc:2b:10:a6:e0:d7:26:96:09:
43:b5:d9:bb:3d:2b:fa:85:07:3a:55:a4:db:e4:e8:
08:a5:a1:42:c8:e0:22:b4:ca:46:a7:f3:03:d8:61:
0c:be:ef:09:bf:f0:89:94:74:26:a7:c6:b8:12:c1:
57:dd:7f:07:08:13:02:69:f4:46:0e:66:b1:b7:28:
b6:76:07:04:71:dd:45:e0:6a:7c:f7:eb:a1:87:68:
d9:9e:2f:34:7d:d5:88:8c:a1:d8:58:77:ed:3a:41:
ed:24:6e:50:c5:86:f2:84:c5:ae:ed:3b:ea:bc:1b:
32:b0:ba:08:e6:c1:5f:3c:54:a7:aa:35:0a:03:f4:
41:9a:d0:05:ec:99:75:62:e7:85:87:d3:7f:0d:0e:
0a:91:e5:6a:c7:a6:d5:de:f9:31:a7:4d:2e:6e:ce:
38:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:59:03:95:38:85:77:D6:19:FD:04:C4:27:A0:7C:43:33:38:8E:D3
X509v3 Authority Key Identifier:
keyid:A6:62:46:B8:06:E8:9A:BA:40:E7:E5:88:88:F3:57:65:13:A3:93:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/w1kDlTiFd9YZ_QTEJ6B8QzM4jtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.32.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:bf:6a:b5:b0:fd:54:6b:9e:c9:b5:8a:27:08:0d:2f:81:d0:
91:db:e0:c4:e3:dd:14:ec:6b:11:7b:22:48:51:ba:1f:66:08:
33:6b:86:b7:bc:95:40:cf:78:3e:2d:14:33:21:8b:62:0c:d3:
d3:81:48:e7:0d:10:e1:9d:9d:fd:e9:5b:6d:82:4a:3a:71:aa:
b5:d5:6c:e1:c1:9c:35:3a:cc:f1:e5:b8:2f:52:1f:98:75:81:
1e:2a:fb:66:05:96:cf:14:5f:31:41:a8:72:fb:e4:18:ba:04:
0a:d8:74:e7:ed:45:3c:f9:eb:0e:e1:b6:d2:1b:fe:ce:35:98:
77:63:30:24:dd:f0:27:da:6b:cf:f0:9e:57:3a:a7:9c:fa:58:
c6:09:3c:56:f4:e9:43:8e:c3:e3:98:84:52:11:b3:81:04:a7:
d8:96:02:91:0b:96:da:37:eb:db:c5:af:22:24:9d:bf:4a:16:
61:6d:ab:05:8b:9d:b3:b3:7c:a3:2c:01:ae:53:77:b5:b6:86:
a5:3e:24:06:ac:6a:49:38:db:38:0c:06:e7:fd:c0:3f:90:9e:
26:bc:48:0f:56:77:90:8e:a7:6d:f3:07:99:31:e5:9f:e7:0f:
3a:7a:71:10:cb:b6:7d:5f:77:1f:5d:a2:46:b9:c3:71:18:af:
0d:3a:47:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:16:39 2024 by rpki-client on console-ams.rpki-client.org