Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/lVJxHJ6HOMhuaMgVwtoUFMgsNrA.roa
File: lVJxHJ6HOMhuaMgVwtoUFMgsNrA.roa (raw, json)
Hash identifier: guRdgg4zNpncGlUefXwEOn5wHhvvPX2RFWDI0N/xbXM=
Subject key identifier: 95:52:71:1C:9E:87:38:C8:6E:68:C8:15:C2:DA:14:14:C8:2C:36:B0
Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Certificate serial: 01856EA6CC2143DF68562F08F21CAE940BFB
Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/lVJxHJ6HOMhuaMgVwtoUFMgsNrA.roa
Signing time: Sun 01 Jan 2023 18:45:03 +0000
ROA not before: Sun 01 Jan 2023 18:45:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 194.247.44.0/23 maxlen: 23
45.149.164.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:a6:cc:21:43:df:68:56:2f:08:f2:1c:ae:94:0b:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Validity
Not Before: Jan 1 18:45:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9552711c9e8738c86e68c815c2da1414c82c36b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4e:51:3e:96:e9:b1:95:fb:31:22:b8:9c:63:
ed:45:c6:fc:8b:dc:79:a3:63:b8:db:46:1d:8f:18:
e7:86:d4:0f:21:14:4f:35:5c:80:99:eb:f2:f7:d4:
8c:bf:c9:78:c2:80:50:cc:03:09:43:29:f4:99:3a:
5e:90:cc:47:36:1c:64:45:aa:06:d1:f6:fc:3f:f4:
7e:ea:a9:d6:cf:5a:57:b9:ad:90:f0:3a:88:dc:fa:
6a:23:34:f4:9b:ad:df:a7:d0:a3:09:98:38:70:53:
5d:9e:b6:55:b2:90:ce:05:de:df:0b:9f:52:10:60:
90:47:f9:ac:5e:10:83:3d:c2:ca:f7:c4:86:46:7a:
04:2f:e4:ba:4e:ff:c7:48:cb:f4:77:01:a7:88:a7:
34:dd:e5:9b:25:8c:6e:76:ce:41:7a:2c:39:2d:5e:
42:aa:d8:48:9f:cc:a7:ea:e8:31:f1:3f:7e:ae:6e:
4e:e6:79:4f:dd:cd:8f:e0:fc:11:35:af:e5:32:e3:
7d:ce:57:46:a0:f6:bd:c0:80:40:16:1a:ea:9a:79:
c3:00:8e:4b:3f:0a:90:b0:3d:0b:52:3c:70:14:fa:
7d:3f:c0:41:fa:3e:82:49:e2:16:8b:df:20:23:1d:
f0:dc:00:83:b0:c2:3b:8e:b5:f1:73:c7:bf:c1:bf:
2f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:52:71:1C:9E:87:38:C8:6E:68:C8:15:C2:DA:14:14:C8:2C:36:B0
X509v3 Authority Key Identifier:
keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/lVJxHJ6HOMhuaMgVwtoUFMgsNrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.164.0/24
194.247.44.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:d9:6b:44:66:da:75:0b:22:a9:82:f4:82:1a:ef:e1:06:4e:
e3:c7:4d:c2:1a:e5:55:09:40:0d:ff:31:d4:a6:b8:e3:5d:03:
84:b1:ba:5d:50:e6:e1:c9:13:75:9c:dc:02:2c:48:36:47:9a:
d2:b8:3e:f7:80:47:f9:d0:3c:69:61:0f:9d:e9:12:a5:6b:f4:
cc:c7:da:c4:9e:8e:d5:71:80:96:55:de:b7:6f:af:c6:47:44:
5c:fc:7f:75:44:f9:42:ec:e6:10:83:cf:70:d0:12:7c:2e:3c:
2a:af:74:ec:06:43:04:33:0d:8f:96:27:f8:c4:bf:df:0f:71:
11:c5:b7:9c:7d:9d:09:49:0e:5d:a8:67:c8:53:da:a4:9b:da:
ac:67:ba:4f:9e:40:7f:e1:59:08:cd:c8:19:c0:d8:8b:38:b0:
32:0c:42:29:4a:9c:b8:1e:98:b8:ac:93:4c:a7:7b:4c:74:57:
5e:ea:8f:0f:bd:e8:28:a1:9a:bd:6b:35:23:41:fc:d6:3f:57:
5c:d8:ef:f5:88:7b:52:e1:e4:6b:ac:02:e4:fc:3a:97:f2:e8:
10:f5:03:3d:11:92:1d:ed:0e:d9:9f:f0:7d:6f:c5:9f:46:4e:
81:1f:57:83:a9:b7:1d:31:4c:70:78:88:ee:1f:b0:22:cc:3c:
7d:16:c5:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:53 2023 by rpki-client on console-fra.rpki-client.org