Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/cUYOv6Q0eKgvRK0oiIUFH9ZEDG8.roa
File: cUYOv6Q0eKgvRK0oiIUFH9ZEDG8.roa (raw, json)
Hash identifier: hRV48WzFZ/waZ6yAGKSOyEm6ZiEXiaPOxxC8AB7Hc88=
Subject key identifier: 71:46:0E:BF:A4:34:78:A8:2F:44:AD:28:88:85:05:1F:D6:44:0C:6F
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 018AC32D1C73D6FC3A9C1ED811772265EE68
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/cUYOv6Q0eKgvRK0oiIUFH9ZEDG8.roa
Signing time: Sat 23 Sep 2023 17:53:48 +0000
ROA not before: Sat 23 Sep 2023 17:53:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.149.92.0/23 maxlen: 24
45.149.94.0/24 maxlen: 24
80.246.224.0/24 maxlen: 24
80.246.225.0/24 maxlen: 24
80.246.232.0/24 maxlen: 24
80.246.233.0/24 maxlen: 24
80.246.228.0/24 maxlen: 24
80.246.236.0/24 maxlen: 24
80.246.236.0/22 maxlen: 24
80.246.237.0/24 maxlen: 24
80.246.238.0/24 maxlen: 24
80.246.239.0/24 maxlen: 24
80.246.234.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:c3:2d:1c:73:d6:fc:3a:9c:1e:d8:11:77:22:65:ee:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Sep 23 17:53:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=71460ebfa43478a82f44ad288885051fd6440c6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:db:9a:c6:b3:ab:69:02:7d:ab:47:76:60:95:
31:b3:e7:27:65:1f:ba:07:5c:58:28:a4:94:d8:af:
d6:96:96:14:0c:3f:6d:a8:70:08:ba:72:4f:20:ad:
52:f0:ea:f8:40:31:85:df:c4:70:80:a9:9f:fe:3d:
14:7f:5c:8f:6a:10:9e:79:fd:b6:05:fb:ed:f3:0a:
eb:88:d7:05:96:30:9e:d6:a5:84:75:86:ca:24:d8:
b0:33:2a:a0:2c:e5:8c:a7:60:cc:fb:39:5b:f5:69:
0e:56:1b:f7:8f:3a:43:4f:69:d2:9d:b0:5d:b4:65:
45:c9:5a:10:35:f1:ec:96:d0:d5:4e:ec:be:1e:e6:
e9:4c:be:25:f7:bb:ae:07:71:25:81:29:3b:03:4b:
7d:c3:c3:f9:88:10:d5:1c:82:f8:72:0e:ba:62:5c:
1e:a2:6f:85:a7:ef:f0:0a:8f:56:50:b5:ed:b6:9a:
ef:ed:05:f9:a6:f6:87:63:b5:62:9a:b4:58:2b:2d:
45:45:1f:31:1d:e8:4c:52:4e:25:cc:19:49:37:28:
b7:eb:ec:63:22:c3:24:12:37:ed:89:fd:5c:b4:bb:
5f:40:9f:8b:21:df:95:9e:95:fc:61:29:59:6f:31:
1a:b4:78:a4:99:2a:08:dd:c4:44:75:f8:77:ee:f1:
41:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:46:0E:BF:A4:34:78:A8:2F:44:AD:28:88:85:05:1F:D6:44:0C:6F
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/cUYOv6Q0eKgvRK0oiIUFH9ZEDG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.92.0-45.149.94.255
80.246.224.0/23
80.246.228.0/24
80.246.232.0-80.246.234.255
80.246.236.0/22
Signature Algorithm: sha256WithRSAEncryption
50:9f:95:6b:07:b3:22:dd:ca:e2:d5:98:5f:b7:54:e6:33:14:
7f:f5:53:8f:6d:08:a9:37:bd:1f:e9:8c:e7:c0:80:1c:2f:45:
06:5b:b8:db:22:3b:44:f6:87:fe:6a:3d:49:da:06:0d:92:22:
af:a8:6a:82:e8:a9:53:3f:2b:42:e4:44:f8:20:14:4b:8b:ef:
cd:db:0c:5f:f1:90:50:42:31:dc:76:7e:af:ab:5e:bf:cc:63:
13:f4:22:24:d4:50:1f:d4:16:b2:2b:2c:b1:15:bd:b8:fe:53:
0a:a3:19:a6:2d:8a:58:a3:b5:de:a8:a2:19:c2:b1:a5:a4:5b:
10:bb:7b:bb:70:e5:d5:a2:32:e3:64:7a:e2:9a:c7:44:76:cb:
a4:a8:28:e4:4a:81:a1:e2:14:b4:b3:3e:25:cb:59:78:be:c6:
4b:ef:3b:58:49:0c:96:39:76:0b:16:a1:b0:b8:3b:c3:d2:c8:
12:38:a8:b2:16:09:33:58:3c:a6:76:69:77:95:e9:37:bd:4c:
df:d1:7d:97:8a:47:cc:94:58:cd:e4:15:e5:80:a7:28:1b:7d:
0b:03:70:57:f7:42:77:ff:64:be:f9:f5:cc:fa:a0:5d:9a:96:
1e:57:10:f2:96:9a:35:ce:3f:d8:fb:c2:0e:4f:13:30:64:27:
ec:20:bc:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 3 00:04:26 2023 by rpki-client on console-fra.rpki-client.org