Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/EtYvb7lNj2HWeDkpKO-RbboNyCU.roa
File: EtYvb7lNj2HWeDkpKO-RbboNyCU.roa (raw, json)
Hash identifier: bmaH1XWP0Uh6V3MbyUsmWm+4bj3uAgi1vwXu9Ceg6t8=
Subject key identifier: 12:D6:2F:6F:B9:4D:8F:61:D6:78:39:29:28:EF:91:6D:BA:0D:C8:25
Certificate issuer: /CN=1c6c48cccce321ec18702957b396381a1f1a0410
Certificate serial: 01856E7900430F1B03BF180F773F749EEE8B
Authority key identifier: 1C:6C:48:CC:CC:E3:21:EC:18:70:29:57:B3:96:38:1A:1F:1A:04:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGxIzMzjIewYcClXs5Y4Gh8aBBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/EtYvb7lNj2HWeDkpKO-RbboNyCU.roa
Signing time: Sun 01 Jan 2023 17:55:01 +0000
ROA not before: Sun 01 Jan 2023 17:55:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204144
IP address blocks: 45.85.212.0/22 maxlen: 22
45.80.240.0/22 maxlen: 22
45.88.252.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:79:00:43:0f:1b:03:bf:18:0f:77:3f:74:9e:ee:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c6c48cccce321ec18702957b396381a1f1a0410
Validity
Not Before: Jan 1 17:55:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12d62f6fb94d8f61d678392928ef916dba0dc825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ee:38:73:83:ff:04:09:2c:17:f8:b0:c3:bf:
78:09:be:76:e6:e3:c9:ab:97:94:74:7c:22:90:68:
1d:73:81:7e:cc:60:64:65:6d:f2:a6:bc:e6:67:0d:
a2:ff:a4:b4:8e:83:e7:a8:89:6d:20:72:9d:a1:39:
3c:f3:cc:51:5b:d7:57:cb:cd:7b:8b:d8:fc:54:cc:
b1:12:d5:9a:a0:91:b8:19:c9:70:b6:66:2e:8a:9c:
2b:5e:73:58:19:4c:2a:ee:43:7f:ac:ea:46:8b:3b:
b5:9a:cf:5d:18:59:e2:58:db:ba:1e:68:b3:04:af:
ca:1b:6d:79:5f:5c:2a:a0:83:08:29:21:8b:8f:ac:
21:50:a8:a1:4f:a4:29:b1:4b:22:7b:97:23:93:c0:
1a:60:22:82:95:00:7e:55:6a:1e:6c:07:74:e1:33:
40:c4:0d:d4:15:dd:d1:f8:65:38:72:e9:5b:67:1e:
ad:b1:37:f6:c9:2e:40:d1:3a:ec:4f:77:44:17:21:
2d:bf:bb:b1:f2:53:ef:30:d5:d5:64:6a:15:4f:07:
a1:de:ac:82:16:da:8e:12:7b:91:74:ca:7e:15:44:
98:10:0b:9a:63:95:ad:01:2a:9e:46:d6:77:aa:9a:
6e:44:f4:5e:5e:9f:c8:ac:57:c0:bc:8c:b6:79:35:
21:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D6:2F:6F:B9:4D:8F:61:D6:78:39:29:28:EF:91:6D:BA:0D:C8:25
X509v3 Authority Key Identifier:
keyid:1C:6C:48:CC:CC:E3:21:EC:18:70:29:57:B3:96:38:1A:1F:1A:04:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGxIzMzjIewYcClXs5Y4Gh8aBBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/EtYvb7lNj2HWeDkpKO-RbboNyCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.240.0/22
45.85.212.0/22
45.88.252.0/22
Signature Algorithm: sha256WithRSAEncryption
30:b0:0a:91:34:55:65:26:cd:5e:b5:f3:5f:4b:b0:ac:48:0a:
12:ec:04:c0:c7:13:96:2b:df:1b:98:c1:75:99:47:3a:b6:f0:
1b:45:1c:97:52:9f:bf:e5:d5:d2:96:53:6a:6b:fb:c7:44:1d:
09:55:f3:cb:ca:77:8a:26:65:ef:ba:ae:42:41:8d:56:06:bb:
42:19:b5:09:b0:65:21:0b:30:72:fb:16:b7:0c:f5:17:50:1f:
4a:d9:35:fd:50:70:a6:32:35:13:c9:4e:b1:69:a7:7b:d2:37:
b2:39:23:f3:fa:fd:99:1f:b1:c7:a3:46:9d:28:1d:fb:8a:ea:
d4:ea:fc:7d:82:81:80:4f:7d:1d:65:b9:75:92:03:3f:c1:14:
6e:8b:75:7d:6d:00:a5:f6:ea:17:f7:72:9e:f2:11:83:05:78:
eb:71:a1:f9:52:35:e9:0a:92:fd:08:6d:82:8f:20:2c:c3:b6:
9c:14:17:e7:28:15:e4:a1:2e:02:f5:24:17:a1:6f:aa:e9:ef:
47:b6:04:c5:83:42:b5:19:7b:18:8b:ad:f3:06:fc:21:42:70:
74:01:88:65:8c:c6:21:7b:b8:ed:65:57:f2:6c:50:53:2d:4e:
67:9e:76:e8:85:ec:37:6c:24:be:7e:4f:0a:8e:a7:74:b6:2f:
e7:a1:8f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 6 08:56:48 2023 by rpki-client on console-ams.rpki-client.org