Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/2M6nhla6CLJ4EvR26akStht2kz0.roa
File: 2M6nhla6CLJ4EvR26akStht2kz0.roa (raw, json)
Hash identifier: +MrbzOtacMLbEjnrjjy1S+Rs05lgphwzGTXQYBWTM+c=
Subject key identifier: D8:CE:A7:86:56:BA:08:B2:78:12:F4:76:E9:A9:12:B6:1B:76:93:3D
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 0186CA49B4E2BC7A2A821D8C00C8FA068350
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/2M6nhla6CLJ4EvR26akStht2kz0.roa
Signing time: Fri 10 Mar 2023 06:51:13 +0000
ROA not before: Fri 10 Mar 2023 06:51:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 32181
IP address blocks: 45.84.214.0/24 maxlen: 24
45.84.215.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ca:49:b4:e2:bc:7a:2a:82:1d:8c:00:c8:fa:06:83:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Mar 10 06:51:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d8cea78656ba08b27812f476e9a912b61b76933d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:17:06:3f:98:10:db:6c:b2:ca:a0:a1:ce:8c:
28:f6:73:29:32:08:a4:8b:c5:f4:0b:ad:51:a5:11:
01:8d:38:6e:8a:ce:d2:28:96:90:95:91:c1:8f:bb:
60:01:b7:74:b0:ac:22:ea:02:64:51:11:8c:04:fe:
e0:df:4b:6f:66:fd:ae:14:0d:09:b7:07:e0:85:21:
9e:3e:37:b3:11:0b:a8:7a:e0:f6:be:8d:cc:e8:e0:
7e:4c:5c:c8:01:ed:31:71:34:77:c2:aa:71:7a:b8:
c3:89:0b:1d:eb:46:50:ad:34:f7:3b:92:3d:7a:75:
77:e4:48:e4:49:d0:a9:b1:f3:2c:d1:6e:13:bf:3b:
26:50:56:9c:5d:d0:44:55:f4:ef:7c:81:c6:9f:f7:
c7:8a:3b:1e:57:30:9a:af:41:cf:ce:64:b7:9e:83:
50:0f:71:2d:09:fd:28:07:3f:ae:68:10:f1:e4:6b:
24:2a:9c:11:a0:0c:2e:e5:ec:8e:c3:27:9d:a6:db:
11:3e:6b:01:71:53:52:71:30:88:de:43:4a:65:61:
3b:c1:9e:67:be:d6:ae:b1:dc:f3:0d:80:68:bf:9d:
0b:3e:15:bf:34:dc:42:36:f7:ad:11:13:52:25:c5:
4c:a3:c3:c0:76:97:56:de:15:30:d2:92:e3:59:4e:
cc:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:CE:A7:86:56:BA:08:B2:78:12:F4:76:E9:A9:12:B6:1B:76:93:3D
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/2M6nhla6CLJ4EvR26akStht2kz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.214.0/23
Signature Algorithm: sha256WithRSAEncryption
b6:bd:cb:73:73:ee:4a:98:9b:c4:68:16:1c:26:6b:85:62:a8:
10:d4:57:fc:16:2e:72:ea:f0:9c:27:c0:45:b0:e7:02:43:73:
38:79:fe:d1:a7:42:57:6a:ec:1d:ee:02:af:6e:1f:bd:cb:f3:
77:f6:cd:17:14:ac:58:48:31:49:23:ee:22:65:8b:31:4d:c4:
b7:4b:4a:fa:41:15:34:22:d5:30:57:2c:5e:db:03:75:cd:a4:
e3:6e:4a:75:aa:43:1a:fd:bf:a6:30:ab:7b:47:da:d0:21:17:
4f:13:09:de:e1:a3:17:f6:43:cd:ec:36:b5:f0:52:33:83:9b:
8d:07:3c:cb:21:a4:0e:37:d9:cd:c6:69:68:8a:66:fb:5f:9d:
31:48:69:2f:48:8d:09:1f:96:c1:ad:75:5f:ad:68:36:98:e7:
65:ca:b1:17:f5:d2:45:34:37:66:88:fa:6a:50:59:d1:6e:b5:
8d:03:dc:a8:44:09:54:17:cd:3a:aa:e0:dc:ef:53:43:dc:55:
0c:34:f5:b9:5c:96:03:a0:74:7e:81:f2:f1:88:25:6f:8a:fe:
19:2a:41:10:16:86:f5:c9:11:c4:e0:ef:3b:d6:34:8a:eb:19:
5b:4a:dd:96:7f:34:16:7b:fc:36:10:e8:03:57:94:9d:71:61:
8b:d0:65:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:24 2023 by rpki-client on console-ams.rpki-client.org