Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/m2xVbY1_LxZFoCR7IkDrJHiU2tM.roa
File: m2xVbY1_LxZFoCR7IkDrJHiU2tM.roa (raw, json)
Hash identifier: mWmLiTIdn4buEJkN/+GNtR/aSchwDocF9j1NS4h5TO0=
Subject key identifier: 9B:6C:55:6D:8D:7F:2F:16:45:A0:24:7B:22:40:EB:24:78:94:DA:D3
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 01856F799C94FFD59005682696C80B2D5966
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/m2xVbY1_LxZFoCR7IkDrJHiU2tM.roa
Signing time: Sun 01 Jan 2023 22:35:18 +0000
ROA not before: Sun 01 Jan 2023 22:35:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 396356
IP address blocks: 45.84.219.0/24 maxlen: 24
45.85.91.0/24 maxlen: 24
136.144.35.0/24 maxlen: 24
136.144.43.0/24 maxlen: 24
45.84.212.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:9c:94:ff:d5:90:05:68:26:96:c8:0b:2d:59:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 1 22:35:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b6c556d8d7f2f1645a0247b2240eb247894dad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c0:4d:61:7e:00:c0:a0:ea:ee:17:43:2b:61:
2a:63:39:10:75:24:5b:1c:5a:13:8c:d0:b2:bd:38:
6d:5b:00:ac:90:6a:13:2f:df:40:7c:18:43:6b:a0:
8c:86:0d:7b:be:ad:90:43:b6:dc:7e:34:29:4c:f9:
82:47:73:27:86:e5:6f:29:20:cc:c1:79:48:72:2a:
3c:e4:d8:70:6b:a7:89:a2:25:ea:62:15:eb:f4:c6:
1e:af:5f:36:ec:4c:60:66:de:1d:a9:5f:c9:31:d6:
61:13:2f:55:26:46:31:68:ad:54:42:67:95:0c:3f:
2e:d5:f0:a6:a6:c2:b5:cf:92:b6:5a:87:9f:6d:23:
80:7e:21:b0:66:0a:3f:c3:c1:ff:b4:c3:3e:ea:41:
62:c2:64:7d:a7:36:4c:8d:1e:7f:58:d7:60:d1:50:
5b:31:dc:bb:f9:61:43:f3:d5:d8:f9:8e:1c:dc:2e:
d0:6e:99:b0:5f:e1:53:bf:f1:91:cc:f9:c8:07:58:
2f:c9:03:58:1a:82:63:bc:79:99:1f:9b:a6:42:ac:
5a:0b:81:e9:c3:18:78:c5:12:70:11:73:b7:e2:e7:
45:19:3d:dc:f7:a1:6b:75:a4:7a:9f:d4:1b:68:d4:
f1:80:5c:6d:9d:64:56:bb:66:59:fa:45:99:10:5d:
45:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:6C:55:6D:8D:7F:2F:16:45:A0:24:7B:22:40:EB:24:78:94:DA:D3
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/m2xVbY1_LxZFoCR7IkDrJHiU2tM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.212.0/24
45.84.219.0/24
45.85.91.0/24
136.144.35.0/24
136.144.43.0/24
Signature Algorithm: sha256WithRSAEncryption
93:d4:42:6c:23:fc:23:1c:b0:e6:ed:42:3b:48:c8:58:b2:8b:
56:bb:1a:a3:bb:c3:de:1f:b4:44:67:66:05:6f:69:3a:3e:b9:
40:8f:01:9f:61:d3:05:49:bc:94:e5:b8:b6:07:45:82:7e:44:
ed:78:a3:e0:71:51:88:0b:70:fe:4a:9e:5b:81:68:45:9f:83:
0d:84:b4:cb:c9:2e:a3:25:4c:e6:07:7f:5e:54:f2:ac:72:35:
e9:5b:a6:74:52:e9:74:e3:0d:e4:2a:8a:1c:1b:03:0d:c2:ac:
93:c3:cd:bf:fb:b5:13:5a:1b:43:74:d4:69:96:30:24:80:c0:
60:c0:0d:81:4a:a5:95:23:df:37:5c:65:a5:66:77:ea:18:93:
8c:11:13:be:3e:2c:37:73:d8:8e:09:c7:61:7a:cf:6e:cd:34:
64:a4:a8:e0:e7:cd:5b:9b:f9:4c:47:c3:1c:dc:73:72:b3:ca:
e8:e0:bc:3a:2e:25:09:af:35:73:be:a2:e8:1d:bd:63:8f:fb:
92:fe:fa:2a:3c:ca:3a:f8:88:b7:ba:c2:7f:e9:0c:ad:a6:31:
66:1b:ce:c0:45:35:e6:af:63:f1:00:92:36:11:bd:92:54:e2:
09:08:7f:6f:fc:e7:4c:8f:72:f1:2e:ec:eb:60:54:ab:35:51:
1e:a9:e8:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:51:57 2024 by rpki-client on console-fra.rpki-client.org