Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/pFTWtaPpcK68zv5b9UPfNX7D5P0.roa
File: pFTWtaPpcK68zv5b9UPfNX7D5P0.roa (raw, json)
Hash identifier: dZwsh0VbQkotKoAt4zY4cpLGj2KbTggbLUwfcv4qNPc=
Subject key identifier: A4:54:D6:B5:A3:E9:70:AE:BC:CE:FE:5B:F5:43:DF:35:7E:C3:E4:FD
Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Certificate serial: 018606233E5B77CF41CF26187E98E21588F0
Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/pFTWtaPpcK68zv5b9UPfNX7D5P0.roa
Signing time: Tue 31 Jan 2023 04:43:38 +0000
ROA not before: Tue 31 Jan 2023 04:43:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 194.246.36.0/24 maxlen: 24
45.143.160.0/24 maxlen: 24
45.143.162.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:06:23:3e:5b:77:cf:41:cf:26:18:7e:98:e2:15:88:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Validity
Not Before: Jan 31 04:43:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a454d6b5a3e970aebccefe5bf543df357ec3e4fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:84:53:3b:86:a9:d0:2c:30:a6:a0:a8:32:c9:
64:7c:d1:6b:db:fe:cd:86:44:91:6b:e8:7c:1d:11:
83:c0:df:1e:a0:91:3b:ef:43:75:6d:a5:18:54:06:
a0:c1:6e:72:27:ba:13:51:1a:ff:f2:6c:77:e2:8f:
9d:a5:18:fa:e8:ba:f9:df:6d:11:fd:5a:27:c9:c3:
9a:29:c0:6a:13:0e:1f:03:ea:75:ce:1c:6c:6e:d5:
b2:05:94:e2:76:46:d7:6e:1e:75:5d:3a:04:5e:31:
02:80:c8:7d:1e:e8:62:b1:e1:a7:98:c4:df:57:df:
11:75:c7:70:5d:85:4c:d7:1d:3b:f8:83:f4:96:64:
91:99:48:bd:33:d6:03:3a:e3:12:59:63:a2:56:f1:
1a:91:6f:5e:9d:98:c1:8e:1b:6f:b9:ad:29:a3:05:
60:4d:c3:98:a6:4b:eb:a3:09:80:f6:bf:62:28:05:
39:1e:cc:6d:8c:69:7f:a4:a7:f1:89:b2:06:ab:4a:
b0:ff:90:11:a1:1b:99:fe:e7:0a:e0:03:46:e2:14:
75:12:e9:8a:14:b8:9d:6a:ab:96:2b:e9:48:e5:76:
7f:d4:4a:b2:4c:de:6c:b5:9d:25:05:e1:73:7f:6c:
ae:7c:15:7e:0a:71:06:c4:2b:1f:fe:df:09:f3:2e:
04:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:54:D6:B5:A3:E9:70:AE:BC:CE:FE:5B:F5:43:DF:35:7E:C3:E4:FD
X509v3 Authority Key Identifier:
keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/pFTWtaPpcK68zv5b9UPfNX7D5P0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.160.0/24
45.143.162.0/24
194.246.36.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:83:1b:8f:2a:16:8d:02:ef:40:c6:a5:d2:9f:72:23:69:5d:
26:ab:98:dd:88:6c:ca:df:7c:58:cc:65:42:a7:5a:33:57:d8:
fb:96:a2:b1:3a:92:c3:95:a6:da:69:e2:27:26:6f:1e:55:dd:
df:12:1d:a8:e5:ad:d8:2d:f9:10:5d:05:b1:9c:37:6f:7e:7c:
19:05:13:71:bb:d0:5e:ad:de:9e:f3:33:ff:b3:f2:6c:44:d0:
88:a3:b9:be:6e:1d:ae:e1:71:b7:b0:ba:90:ea:81:6d:d2:58:
1e:be:a2:a2:bd:68:3f:20:aa:02:dc:6d:55:4d:2d:a1:09:88:
e7:0d:52:78:14:ed:e5:d6:e5:e4:5d:6a:77:04:99:a3:8c:5c:
fc:6d:3d:11:65:85:c6:4c:e4:66:43:24:00:4b:ea:27:74:db:
c1:0c:62:2c:fa:ee:20:cc:d2:65:e4:68:49:ff:53:89:dd:03:
9d:16:82:cc:be:a1:29:50:75:e7:a2:db:4e:7b:88:c5:48:da:
65:40:f3:7a:de:d3:61:63:8e:59:8f:bd:50:5e:3e:21:1f:3e:
ac:e0:c1:49:30:6a:eb:92:9f:e0:e4:08:00:6b:14:1f:0f:5f:
79:29:48:52:96:8a:06:d7:73:6b:6a:5c:5f:f6:bb:36:1c:e9:
0b:1d:51:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:53 2023 by rpki-client on console-fra.rpki-client.org