Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/7FvutPA8VxROblh68TdIhSAMpws.roa
File: 7FvutPA8VxROblh68TdIhSAMpws.roa (raw, json)
Hash identifier: vetCtEsdmGyCtK1+3eBwSb7xqZX9FYm3ulePGwvTxqM=
Subject key identifier: EC:5B:EE:B4:F0:3C:57:14:4E:6E:58:7A:F1:37:48:85:20:0C:A7:0B
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 018B107682547C9478665DB43EDF90FBD124
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/7FvutPA8VxROblh68TdIhSAMpws.roa
Signing time: Sun 08 Oct 2023 18:04:43 +0000
ROA not before: Sun 08 Oct 2023 18:04:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.149.92.0/23 maxlen: 24
45.149.94.0/24 maxlen: 24
80.246.224.0/24 maxlen: 24
80.246.225.0/24 maxlen: 24
80.246.232.0/24 maxlen: 24
80.246.233.0/24 maxlen: 24
80.246.236.0/24 maxlen: 24
80.246.236.0/22 maxlen: 24
80.246.237.0/24 maxlen: 24
80.246.238.0/24 maxlen: 24
80.246.239.0/24 maxlen: 24
80.246.234.0/24 maxlen: 24
80.246.235.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:10:76:82:54:7c:94:78:66:5d:b4:3e:df:90:fb:d1:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Oct 8 18:04:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec5beeb4f03c57144e6e587af1374885200ca70b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:52:06:3a:3a:db:ac:6e:e7:9f:df:5d:f7:c0:
17:47:d2:21:8e:d8:cc:ca:d0:5c:cb:6e:6e:80:5d:
a0:a9:29:90:81:6b:f2:72:dd:23:2c:2d:2f:f4:b6:
65:24:1e:ec:0e:fd:ed:52:11:55:9a:f8:ae:d4:b0:
06:5c:c7:a7:7f:73:7f:43:2d:d6:0b:ab:9a:42:3a:
24:f1:49:f0:26:70:a4:68:3c:e9:6d:bc:78:0c:1c:
74:56:78:64:11:3c:9c:bd:2b:db:31:0d:f9:fc:f5:
70:69:f2:71:46:44:60:34:fc:47:43:f0:91:b3:af:
22:3e:db:5d:1e:10:54:ef:22:06:fc:8d:1a:e6:e9:
ec:c1:be:26:e4:1e:a3:5d:a4:9f:4f:b1:ef:20:ee:
89:03:db:25:0c:0a:94:1b:90:63:bd:6a:50:48:81:
48:be:d7:c9:b0:bb:c4:68:7e:40:f1:06:1e:66:b8:
3c:ef:40:b9:4a:00:80:17:b0:74:7d:47:4d:cd:60:
60:82:b8:71:f8:69:96:31:57:40:0f:37:ba:09:b5:
dc:4b:37:a6:9c:93:5d:1b:87:7c:5a:c7:4b:70:47:
cc:e7:f7:6a:47:6c:8c:08:3c:08:aa:01:a7:53:bf:
5a:ae:f4:83:54:b7:12:59:4c:0d:76:b5:72:a1:09:
de:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:5B:EE:B4:F0:3C:57:14:4E:6E:58:7A:F1:37:48:85:20:0C:A7:0B
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/7FvutPA8VxROblh68TdIhSAMpws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.92.0-45.149.94.255
80.246.224.0/23
80.246.232.0/21
Signature Algorithm: sha256WithRSAEncryption
14:4f:61:c0:2f:5c:b1:68:36:90:4a:07:b3:bb:5c:50:05:77:
4a:ca:73:0a:d5:16:50:8f:1f:30:da:ad:63:7e:e2:ea:5f:3d:
f9:57:12:d3:45:5d:0e:f7:72:e9:b9:21:be:12:5f:fd:ba:99:
90:ea:af:b0:3f:e3:6b:1c:27:2f:15:bc:54:08:49:65:b6:27:
e4:17:70:56:98:63:4f:a3:41:cf:00:c9:50:86:13:64:6c:c9:
78:fd:51:2f:0e:14:b3:1b:e7:cc:a0:9c:7c:80:a2:f1:f5:f4:
15:cd:6b:90:e8:86:f3:b1:b3:ee:ad:5f:a4:7b:3d:ef:89:d6:
87:14:85:ba:71:8c:9a:ba:24:5d:ea:61:d3:5b:21:92:61:ac:
ff:bb:f4:17:ee:ce:ad:8e:f9:2b:a5:93:cb:2a:7b:3b:82:cf:
e7:91:5c:4a:33:81:db:20:6e:e4:c1:19:52:8e:f5:86:b6:a3:
79:24:da:ad:b8:f7:ea:3f:8e:71:5b:7e:6f:f5:e2:cf:bb:14:
44:de:49:21:e6:af:d0:74:b2:fd:8a:56:7a:97:e9:61:db:9f:
40:e7:2a:c9:c7:d0:32:ce:df:a1:f5:d1:eb:99:ef:e5:0a:e5:
d8:98:7d:1b:7a:5a:16:12:d2:5e:c4:16:26:f2:33:51:0c:71:
a2:bd:d5:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 10 21:34:58 2023 by rpki-client on console-ams.rpki-client.org