Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/ja13DM9XKMfRUb-WxOzqDO5ubc4.roa
File: ja13DM9XKMfRUb-WxOzqDO5ubc4.roa (raw, json)
Hash identifier: PiL1dsaHVYVe4pTj8UeVHrJ0GiZya1JVVXLuQNgdNig=
Subject key identifier: 8D:AD:77:0C:CF:57:28:C7:D1:51:BF:96:C4:EC:EA:0C:EE:6E:6D:CE
Certificate issuer: /CN=19c91f1cb0874232a04fbc092baa688accecc9d7
Certificate serial: 01856BF7DBA5105CEC33DFD8D4CC7D807E51
Authority key identifier: 19:C9:1F:1C:B0:87:42:32:A0:4F:BC:09:2B:AA:68:8A:CC:EC:C9:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GckfHLCHQjKgT7wJK6poiszsydc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/ja13DM9XKMfRUb-WxOzqDO5ubc4.roa
Signing time: Sun 01 Jan 2023 06:14:43 +0000
ROA not before: Sun 01 Jan 2023 06:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208759
IP address blocks: 45.85.237.0/24 maxlen: 24
45.85.236.0/24 maxlen: 24
45.85.239.0/24 maxlen: 24
45.85.238.0/24 maxlen: 24
2a0e:c885::/44 maxlen: 44
2a0e:c887::/44 maxlen: 44
2a0e:c884:3e80::/44 maxlen: 48
2a0e:c886::/44 maxlen: 44
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:f7:db:a5:10:5c:ec:33:df:d8:d4:cc:7d:80:7e:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19c91f1cb0874232a04fbc092baa688accecc9d7
Validity
Not Before: Jan 1 06:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8dad770ccf5728c7d151bf96c4ecea0cee6e6dce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ad:d6:5e:df:82:f1:d2:4c:72:49:04:9d:0e:
b5:5f:3c:1d:93:ab:a5:27:23:e9:99:54:e1:1e:f4:
15:da:e8:51:df:e8:bd:e3:3c:44:70:85:8f:3e:20:
e7:8a:80:fa:6e:dc:39:ed:80:2d:36:0c:96:46:63:
de:65:bc:88:58:ef:1e:c1:f0:70:c9:0a:b7:86:cb:
03:17:a1:0c:66:30:09:41:d4:71:3a:73:21:10:fc:
f0:94:7d:bb:dc:52:47:58:3f:2a:52:55:6e:70:eb:
c4:6d:fd:92:35:ef:d0:c5:78:13:c6:18:d6:53:21:
a1:f6:aa:f8:78:32:7b:d1:72:a6:63:d4:7c:ca:c1:
53:2c:e8:9a:71:04:35:41:7f:b5:6e:db:52:7d:d8:
a1:34:f8:d1:40:5f:e4:e5:da:0a:fb:ae:45:e9:da:
d1:8d:13:6e:fd:6a:98:ae:97:d1:e1:e5:41:e1:c8:
79:54:6c:68:6d:fa:15:99:74:de:b1:03:25:5f:bf:
64:62:cd:f3:8a:29:cc:7f:05:5d:bc:94:d3:00:78:
63:63:a4:47:0b:82:2b:a9:c6:3e:20:70:e6:82:2a:
75:1a:5e:f6:b9:02:fb:20:45:2c:41:2f:4e:2f:a0:
44:a2:ac:de:48:0e:2f:ea:2d:ed:eb:34:dd:58:ef:
ea:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:AD:77:0C:CF:57:28:C7:D1:51:BF:96:C4:EC:EA:0C:EE:6E:6D:CE
X509v3 Authority Key Identifier:
keyid:19:C9:1F:1C:B0:87:42:32:A0:4F:BC:09:2B:AA:68:8A:CC:EC:C9:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GckfHLCHQjKgT7wJK6poiszsydc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/ja13DM9XKMfRUb-WxOzqDO5ubc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/GckfHLCHQjKgT7wJK6poiszsydc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.236.0/22
IPv6:
2a0e:c884:3e80::/44
2a0e:c885::/44
2a0e:c886::/44
2a0e:c887::/44
Signature Algorithm: sha256WithRSAEncryption
04:92:d4:bc:21:e6:79:8a:8d:ef:85:3f:3e:01:1b:ae:49:f2:
1e:50:72:ff:6d:92:14:5f:42:14:20:a8:29:ef:17:57:27:66:
74:33:4d:ed:40:1e:92:bc:72:bf:96:64:cc:5b:ae:4f:8d:50:
2c:8f:c7:08:79:3b:6d:b6:04:0f:d1:66:c6:b2:a9:41:11:4d:
ab:8c:6d:e8:04:23:39:e8:e8:5b:37:73:3b:2b:39:c0:87:ab:
91:3a:0a:88:bb:80:32:b3:f9:22:63:08:0a:29:38:66:6f:f2:
81:ad:7a:d9:3c:7c:6b:85:e0:84:97:7f:a3:a3:c5:bb:79:94:
7a:a2:23:d0:ec:b2:de:45:2e:19:b0:a4:71:bd:8b:9e:de:08:
e8:f0:01:9e:b9:c5:5c:bc:c3:e4:d1:30:5b:3c:51:9a:92:50:
c4:1c:70:2e:b2:08:41:13:16:57:c2:15:51:1a:1d:e7:00:f5:
ee:00:8c:6e:95:07:13:99:ef:12:8e:ad:71:31:8d:69:9d:92:
d3:9e:03:d0:61:81:65:7c:0d:7a:76:b6:25:db:f0:7d:15:79:
f9:00:08:6b:ea:a9:a6:e6:19:f1:55:c2:5b:38:64:fd:fb:f9:
dd:2a:b1:2a:52:d0:fd:b6:4d:f2:17:89:0b:46:ab:5b:ac:9a:
c0:10:cf:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:16:42 2024 by rpki-client on console-ams.rpki-client.org