Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/v9-_pZMWy7-2pkLuVq84LIUBsS8.roa
File: v9-_pZMWy7-2pkLuVq84LIUBsS8.roa (raw, json)
Hash identifier: LNR/MiH5o5CP3XsNJmNk+C3x+rCDdFP1HiCwcl8GDeQ=
Subject key identifier: BF:DF:BF:A5:93:16:CB:BF:B6:A6:42:EE:56:AF:38:2C:85:01:B1:2F
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 0189487B0E9B7E9DD262998D8FC72A3251E1
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/v9-_pZMWy7-2pkLuVq84LIUBsS8.roa
Signing time: Wed 12 Jul 2023 05:02:51 +0000
ROA not before: Wed 12 Jul 2023 05:02:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204916
IP address blocks: 45.151.139.0/24 maxlen: 24
84.54.36.0/24 maxlen: 24
83.171.240.0/24 maxlen: 24
83.171.240.0/22 maxlen: 22
83.171.243.0/24 maxlen: 24
83.171.242.0/24 maxlen: 24
194.113.105.0/24 maxlen: 24
2a10:c0c3::/32 maxlen: 32
2a10:c0c0::/29 maxlen: 29
2a11:200:4000::/36 maxlen: 36
2a11:200::/36 maxlen: 36
2a11:200:5000::/36 maxlen: 36
2a11:200:7000::/36 maxlen: 36
2a11:200:8000::/36 maxlen: 36
2a0d:5ec5::/32 maxlen: 32
2a11:202::/32 maxlen: 32
2a0c:e8c0::/29 maxlen: 29
2a10:c0c1::/32 maxlen: 32
2a10:c0c7:5000::/36 maxlen: 36
2a10:c0c7:3000::/36 maxlen: 36
2a09:3b00::/29 maxlen: 29
2a09:4e01:5000::/36 maxlen: 36
2a09:4e01:4000::/36 maxlen: 36
2a09:4e01:3000::/36 maxlen: 36
2a11:201::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:48:7b:0e:9b:7e:9d:d2:62:99:8d:8f:c7:2a:32:51:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Jul 12 05:02:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bfdfbfa59316cbbfb6a642ee56af382c8501b12f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cd:2d:de:ac:3f:b9:d9:9a:e0:87:a1:9a:20:
8a:82:d5:33:2c:bf:68:74:9d:4a:fb:88:f0:20:3f:
f1:63:31:d3:59:a9:dd:8a:b0:b6:ff:cb:52:4c:cc:
21:ce:d2:ba:d8:fe:51:fb:b9:80:3c:9a:2d:dc:39:
d8:5a:90:0f:e2:b8:c5:82:99:04:ea:63:7e:25:2b:
cb:b8:30:c2:09:3d:ac:05:d9:3d:de:b9:ef:e7:fa:
17:b4:ab:58:e5:5e:37:20:fa:7d:17:e9:2d:a5:4c:
92:d9:20:ac:ad:69:00:19:93:d0:64:3c:e6:b7:9d:
ef:87:58:8d:77:ea:b2:d7:60:fe:66:72:2e:db:0b:
e2:88:53:31:fe:00:9a:57:c3:d1:30:22:e8:d3:e9:
d5:6d:5c:df:2d:3c:90:3d:46:d3:e8:6b:79:c8:a2:
e7:e1:3e:e5:45:eb:9f:26:de:f8:3a:9b:c9:dd:ce:
65:a2:af:83:af:ad:5b:88:3f:d0:3b:5d:39:ab:e3:
db:7f:f4:d1:74:88:3f:79:59:1c:65:06:b7:c2:7d:
69:9f:e8:d8:00:f9:56:c0:82:b7:6f:86:16:3e:d8:
18:c7:68:67:85:2c:e4:c9:83:94:98:b9:03:06:c5:
60:d1:57:16:d8:23:bf:77:ea:28:37:34:a3:34:5c:
6b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:DF:BF:A5:93:16:CB:BF:B6:A6:42:EE:56:AF:38:2C:85:01:B1:2F
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/v9-_pZMWy7-2pkLuVq84LIUBsS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.139.0/24
83.171.240.0/22
84.54.36.0/24
194.113.105.0/24
IPv6:
2a09:3b00::/29
2a09:4e01:3000::-2a09:4e01:5fff:ffff:ffff:ffff:ffff:ffff
2a0c:e8c0::/29
2a0d:5ec5::/32
2a10:c0c0::/29
2a11:200::/36
2a11:200:4000::/35
2a11:200:7000::-2a11:200:8fff:ffff:ffff:ffff:ffff:ffff
2a11:201::-2a11:202:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
80:db:36:18:54:c9:68:fa:7c:1b:a9:f9:32:78:ec:13:9a:f9:
3b:49:8c:c0:9e:ac:f1:7e:d5:24:0a:b5:bc:d8:7e:2e:bd:49:
32:96:fc:7e:5d:a9:13:76:95:f2:29:40:4d:fe:32:99:26:0d:
a3:c7:ef:e0:e9:9e:db:54:98:9b:8b:2e:a9:ea:28:58:d2:93:
37:1c:2e:69:24:cb:a3:68:dc:00:38:0d:91:c3:de:50:8f:ff:
2b:e8:58:5d:95:9a:5e:d8:3b:73:aa:03:f3:d7:a8:38:f7:7e:
f4:c5:f9:30:21:8b:2d:69:06:bf:86:ef:6e:10:68:d9:2d:f5:
9a:5f:a3:10:38:5b:84:13:af:1b:63:1f:7b:06:f4:4b:1a:61:
b2:07:6b:e5:23:c6:84:e5:33:94:53:d3:06:68:f1:92:1e:af:
96:55:86:b1:03:9b:2c:03:64:d5:74:11:99:08:f0:45:ec:22:
a6:38:e4:14:c7:39:8a:a1:79:71:86:c8:e7:c7:2c:ca:9b:43:
aa:73:49:6e:81:fc:7b:56:d3:c9:7d:9f:32:b0:0d:8f:e8:76:
f8:33:97:5d:6f:4e:5d:c6:b1:8d:d8:03:29:13:59:33:c9:5e:
83:99:ea:6b:26:eb:9f:df:c4:6f:21:59:65:14:8e:e4:fd:4b:
ac:0e:63:9a
-----BEGIN CERTIFICATE-----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Generated at Mon Jul 31 05:25:48 2023 by rpki-client on console-ams.rpki-client.org