Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/45XLBueYLVuVHeEmqwiUVvRrGyo.roa
File: 45XLBueYLVuVHeEmqwiUVvRrGyo.roa (raw, json)
Hash identifier: AdI89Z7zisEiBkNlLzGYkv1yzad0MlnA2CzZMlHuw+0=
Subject key identifier: E3:95:CB:06:E7:98:2D:5B:95:1D:E1:26:AB:08:94:56:F4:6B:1B:2A
Certificate issuer: /CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c
Certificate serial: 01856CEF4A0B9653EB494CAB31F7F949D0C6
Authority key identifier: 3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/45XLBueYLVuVHeEmqwiUVvRrGyo.roa
Signing time: Sun 01 Jan 2023 10:44:59 +0000
ROA not before: Sun 01 Jan 2023 10:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47846
IP address blocks: 82.98.86.0/24 maxlen: 24
213.83.58.0/24 maxlen: 24
82.98.99.0/24 maxlen: 24
82.98.109.192/27 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ef:4a:0b:96:53:eb:49:4c:ab:31:f7:f9:49:d0:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c
Validity
Not Before: Jan 1 10:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e395cb06e7982d5b951de126ab089456f46b1b2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7d:01:08:94:47:27:66:95:fe:32:84:fe:24:
84:a6:5d:b4:5c:19:68:f8:a9:9a:2d:8f:18:b6:ee:
a4:cd:e1:5b:85:06:87:fd:2d:a8:72:0d:2d:f1:40:
00:fe:ce:e5:a3:b0:98:f6:a9:bf:2b:50:87:77:c3:
4d:7c:a1:05:70:55:d8:4f:f5:42:2b:bf:f4:f8:87:
91:a7:70:4e:24:40:72:1c:ff:32:53:d4:2c:11:b5:
b8:7c:ad:f3:5c:f4:65:55:28:54:eb:29:0d:42:c9:
e9:21:e8:b7:1e:00:87:5e:66:7d:fb:e9:68:7b:e3:
b3:21:65:fe:8c:2c:d6:e2:0c:7b:c8:cb:35:25:f0:
29:45:7c:6e:8c:89:25:44:03:2a:ad:ea:93:de:b3:
05:dd:4f:05:2b:23:f4:85:73:1e:6a:b1:23:6d:fc:
37:be:f3:e1:50:67:e6:71:d8:a4:e7:84:d5:30:00:
46:32:05:8a:b2:12:ef:91:c8:93:e5:8d:53:e1:c6:
ed:15:7e:06:8a:23:23:9c:10:5a:52:66:88:d5:5e:
59:8c:4f:2f:0b:fd:57:5d:be:b8:d9:15:09:9a:1e:
e0:d0:3c:94:71:69:1d:c1:b2:cc:b5:3c:24:b6:9a:
6c:34:5a:e8:cd:72:1e:51:1f:70:c3:f2:36:a4:df:
8b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:95:CB:06:E7:98:2D:5B:95:1D:E1:26:AB:08:94:56:F4:6B:1B:2A
X509v3 Authority Key Identifier:
keyid:3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/45XLBueYLVuVHeEmqwiUVvRrGyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.98.86.0/24
82.98.99.0/24
82.98.109.192/27
213.83.58.0/24
Signature Algorithm: sha256WithRSAEncryption
05:4c:19:b8:4e:57:69:cb:f0:7e:35:7c:26:f5:15:e3:5e:9d:
7e:ee:07:77:ef:d3:f0:74:6b:bb:a2:1c:7f:b6:78:16:01:f3:
7e:4a:16:8f:cd:2f:0e:f2:cc:9a:d4:9a:d9:f1:1a:a3:4f:c2:
97:d6:05:35:c8:11:32:e3:fe:38:5a:2e:da:f1:b5:d6:9e:01:
2e:e5:34:03:c4:bc:d1:46:e6:4c:ba:de:bc:ed:37:ca:62:21:
d5:18:c4:ce:db:18:91:35:22:e2:e9:be:f0:2d:1d:ee:0d:6f:
b5:db:5c:f1:fe:66:25:2b:22:22:ac:64:61:79:55:4c:38:16:
92:db:2a:d0:0b:ff:1e:59:bf:1f:82:c1:d2:7e:62:60:2f:90:
ad:91:1b:46:06:1e:fb:f1:23:83:b3:cf:85:dd:03:a0:4c:54:
87:31:43:fe:4b:a8:c3:8f:16:d2:04:61:20:97:fa:c0:e5:cc:
15:d0:7a:0a:30:f6:2b:b9:9e:e6:db:40:af:02:83:cb:85:bc:
0a:79:ca:1b:bf:93:b3:fb:c2:c2:53:cf:cc:fa:22:fa:5c:a4:
2c:fd:e5:50:4c:04:29:73:28:7a:4b:08:04:1e:d6:2b:2b:e1:
3b:bf:d1:51:a9:b3:f7:a2:39:85:52:02:80:85:9f:51:4b:35:
2f:f8:b9:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:22:30 2024 by rpki-client on console-ams.rpki-client.org