Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/p74LmDnKsHLkD8vx8aQz3EDP1Yg.roa
File: p74LmDnKsHLkD8vx8aQz3EDP1Yg.roa (raw, json)
Hash identifier: WJUHpJZaizIhDKwqd/0vm5FxKJRebImPJ17v/2epkVg=
Subject key identifier: A7:BE:0B:98:39:CA:B0:72:E4:0F:CB:F1:F1:A4:33:DC:40:CF:D5:88
Certificate issuer: /CN=19c91f1cb0874232a04fbc092baa688accecc9d7
Certificate serial: 01856BF7DB2A5A45676A4147D0AEFEC734BF
Authority key identifier: 19:C9:1F:1C:B0:87:42:32:A0:4F:BC:09:2B:AA:68:8A:CC:EC:C9:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GckfHLCHQjKgT7wJK6poiszsydc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/p74LmDnKsHLkD8vx8aQz3EDP1Yg.roa
Signing time: Sun 01 Jan 2023 06:14:43 +0000
ROA not before: Sun 01 Jan 2023 06:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40138
IP address blocks: 45.85.236.0/24 maxlen: 24
45.85.237.0/24 maxlen: 24
2a0e:c887::/44 maxlen: 48
2a0e:c886::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:f7:db:2a:5a:45:67:6a:41:47:d0:ae:fe:c7:34:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19c91f1cb0874232a04fbc092baa688accecc9d7
Validity
Not Before: Jan 1 06:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a7be0b9839cab072e40fcbf1f1a433dc40cfd588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e7:ff:9a:17:7b:f2:1f:2d:b3:fd:27:de:f6:
13:52:66:ae:ad:65:7e:65:1f:45:9a:7e:27:25:eb:
e5:5d:55:b2:3a:7d:c0:26:e7:53:06:55:07:0f:9c:
dd:94:bd:01:65:95:3b:f5:e2:c5:94:84:5f:7d:d1:
97:bc:c8:88:75:ee:cc:6b:85:11:a2:a7:b2:15:42:
da:d7:f3:d9:47:c6:19:b0:9d:d5:77:fd:88:77:b2:
2d:93:d5:e3:43:c1:47:c6:f5:72:23:cb:39:16:6a:
5f:53:1c:73:da:6d:3b:49:d6:9f:02:3e:5c:ea:21:
9c:43:12:e6:45:ea:73:8b:d8:ac:e3:f3:47:d5:6d:
ab:3f:f2:b9:67:00:65:0e:f8:f5:9b:c5:7f:fc:80:
9b:ce:08:99:1b:b5:d8:82:e6:5d:73:1c:c6:02:39:
c2:ac:de:c1:86:6f:91:3a:32:2e:47:16:d7:c8:39:
d6:c2:a5:3c:55:25:d4:d7:ec:2d:13:c7:d9:d2:a7:
16:6c:90:ad:7a:79:84:d2:d0:5e:aa:d5:28:ae:9f:
f0:fc:28:7c:60:26:db:80:cb:b0:ad:17:30:3f:de:
84:3d:f5:d7:22:41:d4:ef:80:18:18:12:b6:f2:d5:
aa:01:b8:ef:e0:00:9b:a8:1a:f6:11:c0:6b:e1:5b:
89:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:BE:0B:98:39:CA:B0:72:E4:0F:CB:F1:F1:A4:33:DC:40:CF:D5:88
X509v3 Authority Key Identifier:
keyid:19:C9:1F:1C:B0:87:42:32:A0:4F:BC:09:2B:AA:68:8A:CC:EC:C9:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GckfHLCHQjKgT7wJK6poiszsydc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/p74LmDnKsHLkD8vx8aQz3EDP1Yg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/GckfHLCHQjKgT7wJK6poiszsydc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.236.0/23
IPv6:
2a0e:c886::/44
2a0e:c887::/44
Signature Algorithm: sha256WithRSAEncryption
71:e4:99:99:45:b8:43:63:67:92:ba:3f:4f:de:56:c5:c9:42:
d4:fd:be:46:93:21:55:1c:8f:b3:db:05:1a:fa:45:36:4e:9a:
f5:a3:02:61:0f:38:8b:8b:17:1e:b2:65:62:63:5a:bf:1a:f1:
a1:e4:33:a9:75:3c:31:46:2c:7a:c9:d7:3e:72:26:f4:21:bc:
e7:9f:d5:f7:58:e7:2e:ec:69:66:8e:33:43:0f:ca:71:18:80:
45:f2:4f:80:1e:6c:70:da:88:2f:47:15:c1:42:f4:2d:54:9e:
44:cf:18:06:6a:47:d9:ee:ad:04:79:c5:cf:3a:d8:8e:fd:b6:
b3:12:09:16:70:c4:47:2e:51:fd:84:74:9a:b3:c9:95:fd:07:
13:8f:50:0c:33:1d:c2:a6:8e:26:ae:c9:04:9e:f5:3c:2a:b7:
60:00:d0:00:a7:08:93:8c:4a:89:59:40:12:50:2c:ed:71:cb:
ed:52:3d:21:69:a9:c6:6c:9f:54:3a:99:70:1d:95:20:61:50:
bd:e9:4b:2b:80:d2:45:9d:ce:06:74:4d:1d:bf:26:06:42:e3:
2b:b0:b1:64:33:b1:df:f2:cd:5e:eb:e0:a9:ea:0f:6e:07:f0:
cf:32:43:2b:eb:89:1c:ff:34:01:be:78:75:77:fa:f3:0a:9b:
7b:58:58:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:16:42 2024 by rpki-client on console-ams.rpki-client.org