Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/AByy2mqkS6xyDgifezHoRDcyqsY.roa
File: AByy2mqkS6xyDgifezHoRDcyqsY.roa (raw, json)
Hash identifier: loN09D5i6mOPd2QI7P2vOQOMHb27+EISeN67FeFMDRM=
Subject key identifier: 00:1C:B2:DA:6A:A4:4B:AC:72:0E:08:9F:7B:31:E8:44:37:32:AA:C6
Certificate issuer: /CN=23446da7a70bce773ec2bc1655aae30c3c18412c
Certificate serial: 01856D78A4AA959AB13DE539DCDD2E363B80
Authority key identifier: 23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/AByy2mqkS6xyDgifezHoRDcyqsY.roa
Signing time: Sun 01 Jan 2023 13:15:00 +0000
ROA not before: Sun 01 Jan 2023 13:15:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 45.153.238.0/24 maxlen: 24
45.153.236.0/24 maxlen: 24
45.153.237.0/24 maxlen: 24
77.83.71.0/24 maxlen: 24
84.252.84.0/23 maxlen: 23
45.11.232.0/24 maxlen: 24
84.252.86.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:78:a4:aa:95:9a:b1:3d:e5:39:dc:dd:2e:36:3b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23446da7a70bce773ec2bc1655aae30c3c18412c
Validity
Not Before: Jan 1 13:15:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=001cb2da6aa44bac720e089f7b31e8443732aac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6c:2f:7c:51:79:a8:88:7a:65:0a:65:6c:cb:
9e:81:06:d4:03:80:42:f8:ba:a7:0e:c3:96:ad:69:
d5:63:65:e2:7b:ad:6b:d1:11:51:63:be:c7:57:24:
32:06:25:98:76:14:5a:c3:f0:51:62:a0:0c:48:c6:
6d:d1:5e:00:ea:3e:90:dd:4b:f4:82:df:25:09:23:
f8:06:5a:f8:02:a7:4b:55:df:55:98:fb:ff:03:06:
00:ea:ba:89:66:09:40:11:c2:38:b5:76:df:b6:b3:
66:73:bf:ae:a8:d6:54:ea:dc:42:e8:c4:f4:24:6c:
ed:39:19:a1:6e:1a:3c:07:7e:6b:21:fd:fd:e2:5d:
0c:8e:66:c0:b4:ab:7d:1e:54:78:90:6c:f6:50:15:
aa:a1:2a:0c:af:ee:26:9a:3b:24:c3:51:61:a3:db:
05:e6:c7:c3:60:e8:d6:78:e1:93:fa:88:8a:eb:5b:
f2:3d:24:db:8c:cb:0a:ee:40:09:cc:7b:4d:4e:f3:
8c:4f:29:14:55:05:71:79:f8:4d:64:99:73:8d:99:
e7:9b:19:92:a5:26:bd:e3:5e:ae:b3:b6:19:41:0e:
5c:fe:d4:cc:cf:e8:90:b3:61:2b:3a:18:65:f0:e7:
74:3d:bd:12:27:89:e5:f6:a1:bb:4f:38:53:38:d8:
6d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:1C:B2:DA:6A:A4:4B:AC:72:0E:08:9F:7B:31:E8:44:37:32:AA:C6
X509v3 Authority Key Identifier:
keyid:23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/AByy2mqkS6xyDgifezHoRDcyqsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.232.0/24
45.153.236.0-45.153.238.255
77.83.71.0/24
84.252.84.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:96:96:27:7c:cb:ed:39:fb:45:ff:95:d4:fa:1d:33:a5:c8:
9f:13:bd:9b:ee:14:29:41:63:05:cf:e4:5e:b5:14:90:bb:f8:
a2:48:44:c3:0a:4b:c3:fe:57:f4:e2:17:43:5d:9e:35:ee:a8:
58:1b:a2:1d:3e:6a:b6:ce:cf:91:59:e5:66:01:44:b7:42:52:
37:57:8a:5b:f0:c6:bb:a4:1c:22:ea:51:54:29:83:65:f1:a6:
0e:94:f1:16:e7:a4:f7:e3:c3:85:72:21:4e:61:03:60:6b:ee:
f6:f1:9b:ed:0f:91:1d:b5:2d:5b:20:67:d9:e6:87:2c:a0:f8:
97:1a:f8:78:51:23:95:af:f7:a2:75:1d:fb:ae:7d:3c:36:dd:
73:13:a1:42:4b:7a:5b:29:53:95:60:c8:06:e5:a8:42:e2:05:
19:f9:19:20:37:e8:32:df:83:f5:ad:d7:27:54:24:da:3a:9a:
ee:d5:92:ad:9d:9c:02:93:7e:2d:88:6b:18:1c:bb:69:3b:3d:
2e:48:ad:0f:cf:a6:fc:fa:3b:1d:4d:1e:1b:52:0f:f1:02:c5:
a0:0c:f0:e9:3b:7b:b7:a3:79:47:d8:c4:42:5a:97:c6:78:c5:
a4:e1:4c:d8:1e:59:d0:19:ee:fe:c1:05:6e:41:eb:c7:72:c5:
6b:1c:88:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:07 2023 by rpki-client on console-fra.rpki-client.org