Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/6dc3BL34ix-P7fJHGjI82XwQ9Ks.roa
File: 6dc3BL34ix-P7fJHGjI82XwQ9Ks.roa (raw, json)
Hash identifier: 6Tb3joy6iEeVJrVvbux/zac9M9fJp2lcWnaKgtUFljY=
Subject key identifier: E9:D7:37:04:BD:F8:8B:1F:8F:ED:F2:47:1A:32:3C:D9:7C:10:F4:AB
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 0189F84AF070B6C49747E587BCFBCE0C9A77
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/6dc3BL34ix-P7fJHGjI82XwQ9Ks.roa
Signing time: Tue 15 Aug 2023 08:23:28 +0000
ROA not before: Tue 15 Aug 2023 08:23:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.149.94.0/24 maxlen: 24
80.246.225.0/24 maxlen: 24
80.246.232.0/24 maxlen: 24
80.246.228.0/24 maxlen: 24
80.246.236.0/24 maxlen: 24
80.246.236.0/22 maxlen: 24
80.246.237.0/24 maxlen: 24
80.246.238.0/24 maxlen: 24
80.246.239.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f8:4a:f0:70:b6:c4:97:47:e5:87:bc:fb:ce:0c:9a:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Aug 15 08:23:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9d73704bdf88b1f8fedf2471a323cd97c10f4ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:73:96:4f:20:d4:80:24:0d:1b:78:e7:2f:94:
d7:94:d7:b6:1e:bf:0e:ae:6b:0e:93:0a:da:65:bc:
47:3f:ed:ba:fc:34:89:54:80:e9:a9:3d:68:60:a5:
54:8a:a3:5a:7d:dd:7f:a7:c1:03:76:96:4a:3c:4e:
44:d2:8e:13:0a:59:a9:01:06:eb:42:b6:ba:d5:1b:
8c:22:75:ea:ba:d7:99:ff:72:a5:9b:ac:3d:7b:2c:
99:63:2b:e8:8e:a5:19:20:9f:13:b8:cb:b2:98:d9:
29:4e:21:49:52:af:9f:50:ff:6c:e8:83:cd:b8:e3:
22:45:c3:cc:d6:8d:6e:e2:fb:9a:af:2b:96:2e:a5:
0b:60:0e:b2:fc:e0:e1:5e:36:97:f1:a5:39:24:50:
f9:9b:65:e9:d1:1f:8e:e5:b7:f6:35:c9:7f:46:83:
c3:e5:1c:65:f8:67:be:de:df:c4:09:6f:ae:4e:19:
ae:a9:c8:3c:4d:8b:8f:0f:07:eb:b5:8a:f4:9c:ad:
a4:08:81:e5:bc:8a:12:7d:aa:ca:94:d7:01:4d:44:
18:94:1f:50:91:77:17:1b:6b:8e:b5:48:31:a7:de:
d0:51:31:00:b8:86:71:56:16:fa:f3:77:cc:12:c6:
10:a3:fe:d8:e4:1e:4d:97:43:eb:55:04:65:34:cd:
c4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:D7:37:04:BD:F8:8B:1F:8F:ED:F2:47:1A:32:3C:D9:7C:10:F4:AB
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/6dc3BL34ix-P7fJHGjI82XwQ9Ks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.94.0/24
80.246.225.0/24
80.246.228.0/24
80.246.232.0/24
80.246.236.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:cc:f9:58:99:66:3a:f7:b2:24:a1:7b:da:6b:6d:14:54:2a:
94:99:3d:76:79:8f:bf:01:b5:08:95:17:c4:aa:f3:97:e7:9d:
10:b8:f8:7c:3a:67:bd:cd:69:31:84:f1:17:ca:16:ac:84:6b:
ea:20:55:04:ee:29:d9:00:d4:da:4f:64:59:49:b0:d2:83:39:
55:d7:50:ea:44:e1:d7:76:13:a8:7f:b4:44:9e:4d:34:e6:1a:
06:3a:59:35:32:2c:46:94:5c:7f:2c:45:91:73:85:b5:8d:12:
cd:18:19:fb:41:eb:bf:53:3e:70:3d:7d:f3:dc:79:48:33:3f:
7c:0c:84:ba:6e:dd:3e:c2:23:44:79:09:58:71:d8:3d:aa:f5:
66:ae:3d:ef:0e:22:fd:5a:9c:9f:a1:50:21:f1:2b:b1:4f:ea:
15:6d:56:ff:86:ab:bc:62:e8:63:16:13:3d:65:47:4b:74:7b:
b2:56:b5:6f:17:db:d3:a0:58:05:75:4e:8e:71:3b:c3:2a:8d:
80:e0:cd:1b:ea:1b:e3:86:b4:27:66:2e:4a:77:ad:81:be:45:
b6:61:70:cb:2f:c9:88:99:47:30:51:3a:0d:a1:d3:e0:22:17:
eb:46:c1:ea:2b:33:08:94:85:00:e2:d0:71:07:26:ef:ff:80:
bf:8a:e7:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 17 19:37:59 2023 by rpki-client on console-ams.rpki-client.org