Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/bHM2CPBtXTtFcuzmrgCp2ca8HRQ.roa
File: bHM2CPBtXTtFcuzmrgCp2ca8HRQ.roa (raw, json)
Hash identifier: iI7QrCU4x7qewAXn0MJC5Dj34pf8thAaJ4lydQFapjc=
Subject key identifier: 6C:73:36:08:F0:6D:5D:3B:45:72:EC:E6:AE:00:A9:D9:C6:BC:1D:14
Certificate issuer: /CN=6fa86d1c1676a59a46acf37336192e985cff0e5b
Certificate serial: 018A83BC99E38EF77E8DA73AE77576FA541D
Authority key identifier: 6F:A8:6D:1C:16:76:A5:9A:46:AC:F3:73:36:19:2E:98:5C:FF:0E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/bHM2CPBtXTtFcuzmrgCp2ca8HRQ.roa
Signing time: Mon 11 Sep 2023 10:14:50 +0000
ROA not before: Mon 11 Sep 2023 10:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209242
IP address blocks: 45.14.174.0/24 maxlen: 24
80.94.83.0/24 maxlen: 24
45.80.111.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:83:bc:99:e3:8e:f7:7e:8d:a7:3a:e7:75:76:fa:54:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fa86d1c1676a59a46acf37336192e985cff0e5b
Validity
Not Before: Sep 11 10:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6c733608f06d5d3b4572ece6ae00a9d9c6bc1d14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6c:f8:ab:ed:e0:2b:a5:83:5b:43:26:01:e7:
d8:41:a8:34:96:99:d4:12:84:1f:d7:f7:23:3f:79:
9e:df:ac:57:f1:48:22:ed:9e:99:64:98:50:f5:f7:
14:56:c1:27:6a:be:6f:c7:6d:f0:e2:1a:9a:a0:73:
47:81:f6:d0:15:18:09:82:7d:5c:ac:37:86:00:67:
ce:9b:4f:45:d9:3f:8a:7b:cf:f2:dc:72:74:bb:20:
62:08:50:ca:7c:db:da:0b:e7:a5:75:2f:ba:b5:85:
e7:c1:08:3c:3f:c3:1d:e7:cf:be:c7:92:67:13:0b:
f0:92:dc:ae:69:46:9d:e8:94:33:54:3a:77:60:a8:
d5:26:5c:e1:1e:ac:a7:4b:10:61:3f:a7:40:8e:b5:
1f:a0:04:43:ed:88:8e:d3:e7:a1:51:88:7d:bb:af:
e8:2d:47:d6:b9:ee:ca:f6:6f:34:d4:d8:e3:b6:89:
d5:a0:2f:37:44:bb:1e:42:18:18:ca:6b:b2:2d:9b:
d1:71:11:32:1f:43:94:47:45:c8:74:b9:5e:cf:e5:
70:6e:d9:26:ce:20:1b:65:5d:6c:8c:0d:69:e8:a1:
ab:9e:d0:94:36:c8:de:aa:8e:fa:48:06:a9:eb:17:
a7:3e:7f:2c:2f:29:da:49:fe:ee:e8:c5:ae:6d:c4:
be:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:73:36:08:F0:6D:5D:3B:45:72:EC:E6:AE:00:A9:D9:C6:BC:1D:14
X509v3 Authority Key Identifier:
keyid:6F:A8:6D:1C:16:76:A5:9A:46:AC:F3:73:36:19:2E:98:5C:FF:0E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/bHM2CPBtXTtFcuzmrgCp2ca8HRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.174.0/24
45.80.111.0/24
80.94.83.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:d6:8a:c6:b3:10:db:1a:ee:25:37:df:78:20:02:a2:7d:7b:
78:a9:a7:fc:c1:6e:7d:b2:6d:a8:29:12:70:99:21:04:4e:c6:
b7:1c:93:74:1d:ec:73:8a:3b:8b:9a:7d:e0:4c:10:f5:1e:7d:
3a:ee:49:8c:bf:62:07:c3:34:84:a2:4c:4f:d7:ad:08:5b:24:
06:53:44:1b:ff:ea:02:ef:cd:df:bd:fb:b1:38:c0:32:68:2a:
9f:e7:20:3e:85:9c:37:d4:29:60:c4:b2:1a:24:84:b9:26:a6:
95:a7:8d:b3:0c:f7:7f:7a:b4:c8:ce:f9:05:0b:45:fe:eb:0b:
f8:05:7b:28:c6:b8:15:c4:66:b9:1c:5c:6f:90:57:19:ee:b6:
b7:9d:a6:e4:31:a0:f8:e0:82:f2:81:8f:64:ff:57:0d:2e:ce:
31:46:15:31:aa:e7:25:8e:9a:f3:38:5f:b2:f9:00:f8:fb:ee:
13:37:9c:cf:41:2e:e6:e5:3c:06:03:83:68:8c:86:0e:34:b7:
7a:51:dc:f1:97:48:86:97:aa:c1:ee:01:eb:cc:da:b9:db:0e:
9b:35:91:09:f2:d3:81:ea:53:f9:04:7d:7b:ca:84:20:f1:0c:
7e:63:87:85:33:c2:fe:a4:20:cb:35:3f:cf:d0:3d:fb:10:e8:
86:43:d2:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 10 12:03:21 2023 by rpki-client on console-ams.rpki-client.org