Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/I67z17vQ0lOGBPn5nI9tfq_DhWY.roa
File: I67z17vQ0lOGBPn5nI9tfq_DhWY.roa (raw, json)
Hash identifier: IRINcgymut5DmKLsKDlxUlbQbY5d7xBbfUHMUKv/APc=
Subject key identifier: 23:AE:F3:D7:BB:D0:D2:53:86:04:F9:F9:9C:8F:6D:7E:AF:C3:85:66
Certificate issuer: /CN=f6090b4db06a4d65935141bac98098127a8b8f5a
Certificate serial: 0189B60C2BF01DBD7EB6D24A9DB31DCDF41A
Authority key identifier: F6:09:0B:4D:B0:6A:4D:65:93:51:41:BA:C9:80:98:12:7A:8B:8F:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/I67z17vQ0lOGBPn5nI9tfq_DhWY.roa
Signing time: Wed 02 Aug 2023 11:39:58 +0000
ROA not before: Wed 02 Aug 2023 11:39:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200514
IP address blocks: 45.87.223.0/24 maxlen: 24
45.87.220.0/24 maxlen: 24
45.87.221.0/24 maxlen: 24
45.87.222.0/24 maxlen: 24
185.192.125.0/24 maxlen: 24
185.192.127.0/24 maxlen: 24
185.192.126.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b6:0c:2b:f0:1d:bd:7e:b6:d2:4a:9d:b3:1d:cd:f4:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6090b4db06a4d65935141bac98098127a8b8f5a
Validity
Not Before: Aug 2 11:39:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=23aef3d7bbd0d2538604f9f99c8f6d7eafc38566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:fc:3e:76:33:bb:22:dc:9e:80:0a:5d:d1:85:
cf:bb:9f:8b:7a:6b:2f:91:30:9b:28:ed:ac:e8:86:
ce:98:b7:89:28:6f:a0:f5:60:4d:ab:69:8a:12:d1:
a4:53:72:53:6a:3d:d2:d8:b5:e8:ca:21:56:aa:d3:
54:04:91:23:09:0b:9e:4f:88:12:7d:6a:bc:9f:88:
df:de:aa:ce:2e:e0:b2:4c:45:39:14:e8:80:f7:a4:
03:c2:31:aa:5f:8f:84:50:14:62:98:50:ec:da:f6:
0a:87:0b:9e:67:94:8b:75:28:d9:86:88:4a:fa:4c:
4a:b3:7a:55:a7:5e:ca:81:2f:87:db:84:fa:cd:61:
81:a2:ba:fb:7d:28:ee:e3:cb:20:15:6a:ec:fe:37:
19:62:a2:31:80:8e:c1:0b:26:26:09:ff:98:49:e4:
82:49:13:0a:c8:90:4e:fe:c7:30:91:37:18:0a:7c:
a2:2b:5c:8a:c9:eb:94:3f:73:18:6b:c9:c0:b3:b1:
0e:d9:4e:65:51:9c:d0:4a:03:61:58:ba:0c:15:31:
52:29:23:b6:28:ee:cd:eb:32:5b:67:42:0c:4a:b1:
47:dd:af:cc:c6:13:d1:9e:d8:69:32:6c:25:7c:24:
78:a1:60:e4:c1:19:06:c8:95:3e:56:df:a5:f0:39:
c5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:AE:F3:D7:BB:D0:D2:53:86:04:F9:F9:9C:8F:6D:7E:AF:C3:85:66
X509v3 Authority Key Identifier:
keyid:F6:09:0B:4D:B0:6A:4D:65:93:51:41:BA:C9:80:98:12:7A:8B:8F:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/I67z17vQ0lOGBPn5nI9tfq_DhWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.220.0/22
185.192.125.0-185.192.127.255
Signature Algorithm: sha256WithRSAEncryption
a2:5f:8c:00:3c:83:44:b2:33:38:25:3d:a9:c5:53:7e:34:c7:
0f:4d:c1:0c:83:94:54:65:91:44:1c:2c:7c:df:5d:7e:bd:d5:
1c:34:92:c7:a6:75:15:69:54:7c:42:21:90:ec:2a:b1:2d:9c:
c5:31:2c:03:9e:2b:b5:c9:43:1a:aa:43:81:15:70:28:ac:06:
80:76:3b:01:8b:0f:88:1e:88:3a:88:79:f7:cc:a2:06:39:c7:
87:69:9c:6c:80:d8:55:19:b3:51:75:ba:8b:cc:5c:73:6b:60:
00:ed:05:31:bf:f4:2e:e8:37:ff:de:ab:a1:c6:c1:63:cb:83:
d6:42:78:db:5e:3e:b0:0d:4c:b6:64:4b:2e:35:5f:5d:ea:de:
c9:a1:bc:a4:bf:f3:a2:1f:a7:d3:0a:02:05:6a:25:46:76:1b:
be:92:5c:55:a5:94:45:00:e9:34:be:b7:ef:cf:b5:34:20:bc:
c8:61:d8:31:3d:57:57:3f:b8:e3:a4:dc:da:9d:2b:7c:76:ad:
10:09:61:fc:ee:f7:c1:fa:1c:a8:09:19:e4:5d:b7:77:5a:54:
6d:7b:31:42:2b:b8:d3:0d:25:36:b8:fe:c4:e6:08:a4:0b:52:
6b:13:fe:ab:4e:75:f0:9b:f2:15:5a:10:3d:24:00:66:50:c7:
54:22:3c:e1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jan 1 13:11:34 2024 by rpki-client on console-ams.rpki-client.org