Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/v-0M0YEpfdxPHJYbZSHVbdU7Gsw.roa
File: v-0M0YEpfdxPHJYbZSHVbdU7Gsw.roa (raw, json)
Hash identifier: xC7VGVcXBHfoF3wmtF/z4qmt4sAMbkXvjiiZPr9SGf4=
Subject key identifier: BF:ED:0C:D1:81:29:7D:DC:4F:1C:96:1B:65:21:D5:6D:D5:3B:1A:CC
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 01856F1DD253EA8E310D06A0B93CD26C57E8
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/v-0M0YEpfdxPHJYbZSHVbdU7Gsw.roa
Signing time: Sun 01 Jan 2023 20:55:03 +0000
ROA not before: Sun 01 Jan 2023 20:55:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43959
IP address blocks: 45.14.64.0/24 maxlen: 24
45.14.66.0/24 maxlen: 24
92.60.43.0/24 maxlen: 24
45.14.65.0/24 maxlen: 24
45.14.67.0/24 maxlen: 24
2a0d:c7c1::/32 maxlen: 48
2a09:7::/36 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:1d:d2:53:ea:8e:31:0d:06:a0:b9:3c:d2:6c:57:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jan 1 20:55:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bfed0cd181297ddc4f1c961b6521d56dd53b1acc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2f:35:68:00:5f:82:55:ee:a8:0b:3d:3e:f6:
ab:00:8e:66:5e:1d:20:ff:6d:3e:8a:53:b1:ae:0c:
4f:db:a5:ed:3c:88:85:aa:22:a7:e5:b1:57:9b:60:
7f:46:78:31:a5:41:b4:dd:77:a9:1a:7b:5e:f6:3a:
7e:0d:a5:45:81:03:36:c2:e0:81:87:89:e2:e3:4a:
7a:d4:ea:cc:76:36:1e:c2:33:23:0e:2e:d2:0a:11:
09:42:7d:8c:fd:84:b0:ab:36:3d:f0:99:8b:ad:18:
f5:d9:60:de:dd:1b:1d:32:83:75:7f:78:8d:e6:a4:
0e:62:86:4b:57:d8:cb:67:b7:88:50:2a:dc:b7:2a:
c1:a3:d8:66:15:b1:88:ae:25:77:0d:5f:63:05:17:
55:6c:fe:9a:82:39:0b:21:cc:19:38:4f:2e:bb:28:
e6:61:eb:03:61:50:6b:fb:22:47:f9:90:53:59:c8:
b8:c8:7b:2c:ac:88:6f:52:d2:22:e5:c7:44:25:e1:
11:f7:03:91:e5:b4:4a:8d:13:6d:17:b4:f5:9a:52:
9a:00:9c:cf:ea:e0:28:54:c8:92:25:e5:b4:7f:2a:
38:ff:97:12:33:d4:74:88:14:fd:fa:74:7d:9a:b4:
f9:3e:2e:c0:9b:7a:f1:34:92:cd:57:3c:e6:09:2b:
b8:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:ED:0C:D1:81:29:7D:DC:4F:1C:96:1B:65:21:D5:6D:D5:3B:1A:CC
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/v-0M0YEpfdxPHJYbZSHVbdU7Gsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.64.0/22
92.60.43.0/24
IPv6:
2a09:7::/36
2a0d:c7c1::/32
Signature Algorithm: sha256WithRSAEncryption
4b:35:1e:15:06:f7:65:f9:27:ad:f8:c9:a6:c8:71:f9:a8:e5:
b2:88:76:29:10:a1:ab:35:df:82:5e:58:0b:50:74:80:3c:c2:
cf:30:c9:97:05:7d:45:64:e8:58:fd:42:09:d7:32:85:d1:37:
87:38:01:79:ea:a9:d7:3e:db:8c:db:68:7d:6e:e8:64:28:cd:
a0:85:7c:50:b0:71:77:9f:7d:b8:7f:df:ff:4b:85:75:08:6b:
6b:a2:6b:3a:e5:84:e4:28:fe:79:b8:11:b1:d5:bb:d2:78:f9:
6e:49:dc:68:a2:a9:32:cf:ac:1d:e2:84:54:72:ae:33:ec:9c:
bd:8c:9b:0e:88:80:30:54:65:88:2d:0b:7c:b9:74:f4:83:f8:
75:e0:42:17:e3:7b:ee:87:3f:af:7b:f5:70:fb:19:8a:8e:0d:
81:ee:be:9e:b4:b9:f4:58:ec:5f:05:7c:6b:c5:63:17:b8:82:
c2:91:00:15:20:e6:54:d6:6d:99:d8:ee:31:35:81:ba:2e:1e:
06:d5:e9:01:e0:12:59:84:1b:f9:11:49:af:ea:4a:3e:e2:f2:
09:bb:4a:89:b2:63:a8:2a:4b:9f:cc:d6:ec:86:92:a9:04:0e:
7b:1a:6a:35:6a:4b:cf:2d:23:15:f4:6e:88:fc:bc:01:f2:34:
f5:d3:2a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:32:43 2024 by rpki-client on console-ams.rpki-client.org