Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/cmevkTTfhgESjiLI-onc0pC6EKg.roa
File: cmevkTTfhgESjiLI-onc0pC6EKg.roa (raw, json)
Hash identifier: fJyn3u9YbWhY4H5O4eANJZSBAzlBK+IC0WMnLjxyPYI=
Subject key identifier: 72:67:AF:91:34:DF:86:01:12:8E:22:C8:FA:89:DC:D2:90:BA:10:A8
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 018B67C7E5FE909E174284AC25D53DDC2975
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/cmevkTTfhgESjiLI-onc0pC6EKg.roa
Signing time: Wed 25 Oct 2023 17:00:35 +0000
ROA not before: Wed 25 Oct 2023 17:00:35 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 45.149.92.0/24 maxlen: 24
80.246.228.0/24 maxlen: 24
80.246.229.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:67:c7:e5:fe:90:9e:17:42:84:ac:25:d5:3d:dc:29:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Oct 25 17:00:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7267af9134df8601128e22c8fa89dcd290ba10a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:99:c7:e4:70:3f:a0:83:3f:cd:c2:54:29:9c:
d0:2b:9c:56:1a:45:ae:46:46:3f:51:09:83:02:b0:
f5:9e:0f:d0:12:aa:0c:65:22:f3:88:79:9d:41:eb:
27:97:d6:a3:ac:e6:89:2b:96:af:47:56:18:5d:36:
77:c5:7d:de:44:d0:ab:4d:66:0b:94:23:7d:76:89:
1b:64:c7:9c:d2:ea:2a:c3:80:fc:59:a9:2c:6e:52:
2a:30:fe:f8:17:41:3f:2d:12:e5:78:6c:b7:fb:93:
78:9d:0f:86:af:a1:e5:1c:42:9d:63:54:9e:6c:84:
65:2c:7a:4b:3a:01:07:17:70:aa:c7:15:17:9f:8c:
dc:c0:c5:a2:e8:7f:18:48:d1:c4:e6:d1:5d:6c:27:
bf:27:89:22:61:1c:98:fe:6b:46:86:d9:f7:5a:64:
3d:90:ad:09:6e:49:e4:11:ec:af:bf:a9:83:48:1b:
ea:3b:75:8a:af:ab:5c:d9:ea:fc:bf:ae:19:73:31:
87:19:bd:9a:2c:91:bb:8c:b4:69:5b:8c:42:ee:85:
bf:87:05:39:5e:57:f8:5b:35:2e:14:5d:5e:67:da:
98:aa:29:59:62:95:c8:84:62:fe:e4:6d:42:c9:72:
26:e5:be:78:29:8f:e6:9a:a5:ea:47:20:6a:a3:5c:
84:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:67:AF:91:34:DF:86:01:12:8E:22:C8:FA:89:DC:D2:90:BA:10:A8
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/cmevkTTfhgESjiLI-onc0pC6EKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.92.0/24
80.246.228.0/23
Signature Algorithm: sha256WithRSAEncryption
89:7b:4e:9a:3b:39:03:f6:4b:68:1c:89:fb:2a:34:fe:f8:d0:
44:ed:13:3b:5c:b4:20:b4:82:bb:65:45:ad:d2:87:75:5d:06:
f7:17:04:00:35:b5:c6:15:ea:b1:f8:16:18:50:ee:15:a9:d1:
df:2a:6e:8d:b7:16:b4:56:f4:c1:93:b8:bb:f0:79:a6:c4:1f:
9a:2b:fe:34:e2:3a:06:2a:fa:19:71:ed:b8:50:38:4f:4e:d0:
b4:c9:a2:33:05:0c:a5:fe:66:df:b2:e6:15:e0:2d:b8:2e:b7:
0c:5a:0a:d9:d5:3f:7b:02:a6:f2:5b:ad:50:98:26:6b:21:de:
23:f5:f2:3e:8a:ca:90:63:96:0a:bf:59:35:4b:c8:23:a7:e7:
f1:df:fd:cb:19:65:07:32:2a:ce:46:d6:c8:94:bf:4e:7a:07:
26:59:64:7c:4e:56:26:fa:a1:5b:2e:07:5c:c6:e7:25:9b:cc:
97:15:14:9b:ca:68:9d:db:fa:1e:42:b8:3c:d6:81:0b:3a:a9:
13:12:79:ec:79:b5:af:13:66:15:fc:3b:18:be:14:8d:17:70:
05:38:48:26:40:9b:da:b7:6d:af:d5:53:d4:ad:6d:e3:08:e8:
a6:33:ba:49:b6:98:02:4c:e3:1a:30:0f:17:17:a8:eb:06:f3:
0f:85:90:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 27 10:21:10 2023 by rpki-client on console-ams.rpki-client.org