Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/h0X9DpgP5QhSGjOVEBSQbkZp2Cg.roa
File: h0X9DpgP5QhSGjOVEBSQbkZp2Cg.roa (raw, json)
Hash identifier: lpcIuqUbF9BI64wcnCx8LjSUGDltSWhIdCTO9V/ZGvc=
Subject key identifier: 87:45:FD:0E:98:0F:E5:08:52:1A:33:95:10:14:90:6E:46:69:D8:28
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 018BD4D1BE91DCA8A30789093034B45E08BC
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/h0X9DpgP5QhSGjOVEBSQbkZp2Cg.roa
Signing time: Wed 15 Nov 2023 21:09:57 +0000
ROA not before: Wed 15 Nov 2023 21:09:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 45.149.92.0/24 maxlen: 24
80.246.225.0/24 maxlen: 24
80.246.231.0/24 maxlen: 24
80.246.228.0/24 maxlen: 24
80.246.229.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d4:d1:be:91:dc:a8:a3:07:89:09:30:34:b4:5e:08:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Nov 15 21:09:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8745fd0e980fe508521a33951014906e4669d828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:61:fd:9e:e1:ce:85:02:1a:ce:0e:8b:3b:50:
c5:1d:81:f6:3d:3d:9e:a9:71:54:7e:d9:5e:67:fb:
78:c5:47:0f:4d:af:66:d4:04:9d:ef:dc:0f:7f:3c:
3d:ec:16:e4:e2:a0:10:d7:86:a2:ba:22:96:59:c0:
63:f3:d3:e0:94:0d:07:e5:93:31:98:8a:cf:88:11:
b7:69:70:7e:d6:38:1c:84:21:d7:91:9c:2a:94:e1:
ee:41:f6:af:eb:03:f1:87:98:1d:17:b4:a7:ce:4c:
fe:01:56:31:98:40:41:62:c8:f4:8f:37:1f:ad:51:
8b:4a:83:00:8d:7b:57:50:5a:86:94:d8:48:3d:f0:
48:2f:a6:60:bb:11:46:c9:0f:33:af:58:38:fb:29:
1a:12:7a:f3:c0:43:1b:7a:bd:6e:90:73:5b:fa:96:
6d:b0:14:09:5e:b4:e8:2d:f7:d8:5c:46:b8:f3:90:
c0:5d:56:13:fb:ab:c7:f4:0f:98:25:da:9b:a9:5c:
e3:6e:a6:12:4b:8d:f9:5d:6e:dd:11:38:ce:6b:47:
78:96:02:e1:75:90:4b:51:31:ea:2d:13:ae:58:25:
99:a2:0d:bb:2c:f4:31:4c:73:78:21:84:2e:1d:b2:
d6:07:97:0e:dc:91:44:93:3c:75:93:81:93:1f:6d:
d1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:45:FD:0E:98:0F:E5:08:52:1A:33:95:10:14:90:6E:46:69:D8:28
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/h0X9DpgP5QhSGjOVEBSQbkZp2Cg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.92.0/24
80.246.225.0/24
80.246.228.0/23
80.246.231.0/24
Signature Algorithm: sha256WithRSAEncryption
38:7a:c7:cb:e5:d6:0e:e6:0d:5c:f8:95:ea:36:29:5f:1a:f9:
c9:cd:2a:d2:14:c0:63:0c:e4:90:b1:41:30:d1:ba:47:c1:66:
9d:20:bf:0b:a7:23:3f:bd:ee:e8:1c:a2:de:d9:7e:c8:ec:24:
9d:3e:a7:a1:c0:41:cf:39:d2:84:b8:d1:d2:63:fe:8d:47:be:
e2:b6:25:14:35:de:b9:95:d7:c8:0d:bb:d1:f9:46:68:5b:d3:
67:69:fa:a9:1e:8b:cd:82:74:95:49:fd:47:7a:5b:7b:c3:22:
a6:62:25:f3:11:20:08:6c:88:e9:66:da:a7:95:b3:88:07:23:
cf:0b:83:bb:f5:56:ca:cd:db:90:aa:fd:6f:fc:36:5c:f0:fe:
92:5a:cf:87:49:cb:79:3e:a5:5a:e5:54:7f:4b:50:17:33:55:
20:9d:fa:6a:62:9c:6c:fe:27:6d:ba:9d:f1:b6:ba:8a:15:9a:
13:b1:1e:48:9e:86:d0:4b:15:30:a4:fe:cb:ad:7b:d8:b0:c4:
3a:17:9e:99:06:68:a6:79:95:8c:18:b9:cc:f0:5d:4c:1f:33:
e9:ec:5c:db:b7:7c:d0:29:76:70:12:dc:b5:c8:38:42:a4:0d:
b1:3d:6d:25:f0:96:63:b7:80:d8:5a:b5:9e:cf:91:53:ab:f4:
24:dc:fc:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 17 18:47:03 2023 by rpki-client on console-ams.rpki-client.org