Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/28coqoel9F2AedFQK49lstVPPGk.roa
File: 28coqoel9F2AedFQK49lstVPPGk.roa (raw, json)
Hash identifier: v+hQPD+le+7aSwYWaKQc74wY8/42P2GVvSOYMFFCdcQ=
Subject key identifier: DB:C7:28:AA:87:A5:F4:5D:80:79:D1:50:2B:8F:65:B2:D5:4F:3C:69
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 018B850E1BF9D5BB485DB59D1AB10E997A13
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/28coqoel9F2AedFQK49lstVPPGk.roa
Signing time: Tue 31 Oct 2023 09:26:16 +0000
ROA not before: Tue 31 Oct 2023 09:26:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 45.149.92.0/24 maxlen: 24
80.246.225.0/24 maxlen: 24
80.246.228.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:85:0e:1b:f9:d5:bb:48:5d:b5:9d:1a:b1:0e:99:7a:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Oct 31 09:26:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dbc728aa87a5f45d8079d1502b8f65b2d54f3c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9e:08:c6:4a:f0:74:b7:0c:e2:72:c6:69:ad:
4b:0a:fe:77:a2:d4:29:83:3e:df:a3:c4:84:21:72:
9e:82:c2:63:ec:76:c4:fb:d5:ea:6d:40:30:27:80:
f3:26:62:51:46:ec:f4:65:67:9d:fd:13:0f:d0:7f:
16:ec:6b:b7:84:85:e7:b6:82:46:e7:b2:73:e5:8e:
d7:4c:8b:42:a5:56:0f:00:52:9f:b7:2e:1d:69:5d:
a5:f2:ab:8f:c8:59:e6:e8:59:3b:56:6c:17:d9:02:
c2:c2:6e:fa:c3:4d:8c:d2:85:49:06:05:1f:e3:13:
19:ed:8a:c4:93:96:4b:d8:7e:ea:cc:9f:b6:1b:7c:
c4:cc:9f:d1:85:66:60:c2:ed:83:25:91:59:2e:a6:
f1:ee:ed:ac:6e:dd:2d:c3:21:0e:2e:39:d4:44:0c:
73:65:8b:cf:cf:b1:46:3c:c0:f8:64:92:2a:e9:59:
51:ef:b8:e3:a1:e8:b9:10:2a:d8:78:d4:b8:65:59:
b1:a2:fb:04:d3:75:73:5e:58:23:9c:2c:94:2e:80:
9f:21:58:bf:bc:5b:31:ae:95:fd:e4:4b:05:a1:c0:
3c:d7:bd:50:ea:d2:0a:2f:8f:9c:2e:74:a9:3f:36:
f7:54:7f:a4:a1:8e:61:a9:c0:9c:f7:b9:8c:e5:68:
2e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:C7:28:AA:87:A5:F4:5D:80:79:D1:50:2B:8F:65:B2:D5:4F:3C:69
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/28coqoel9F2AedFQK49lstVPPGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.92.0/24
80.246.225.0/24
80.246.228.0/24
Signature Algorithm: sha256WithRSAEncryption
28:d2:3d:a3:bb:4e:76:09:f9:21:69:4f:82:32:b1:85:ed:59:
9a:27:9d:80:fb:98:be:3d:bd:42:09:b6:3f:d2:e8:f4:be:6b:
ef:27:79:d8:3a:29:18:5a:bd:40:22:d7:b3:7a:a0:5e:91:c2:
41:3d:9b:f5:1f:d6:db:de:97:ed:8a:bb:49:14:39:ba:35:73:
f4:f7:6b:2d:98:a5:9f:eb:66:e0:cb:f2:a1:88:9b:bf:aa:d1:
1b:b8:58:18:1a:80:1c:62:4f:e0:65:20:0f:15:d9:aa:f4:d9:
77:d6:8e:18:8d:47:5c:7c:c2:75:a7:d7:97:e3:52:50:ba:4f:
61:ee:a3:f5:a4:39:ad:22:ea:0c:7a:1c:0b:00:b2:da:19:59:
01:60:53:9b:bb:90:65:c8:ff:cf:1d:bc:8e:48:84:52:f4:44:
f6:e9:b7:76:7c:e5:52:dc:76:0f:72:e0:c5:70:d9:b5:56:d6:
93:0f:53:46:80:61:96:2d:b8:b6:d2:68:38:67:58:73:a6:62:
c5:e1:bc:77:e3:98:d9:b3:62:8b:d0:bc:a7:15:de:ff:ef:b9:
39:2a:a7:dd:be:35:5e:1d:04:59:a2:80:37:2b:3e:36:ad:96:
53:08:c1:89:74:f4:00:7c:d7:86:f8:e6:0f:56:f2:c0:e7:bc:
b7:08:44:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 31 10:16:39 2023 by rpki-client on console-fra.rpki-client.org