Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/8K6YWgY0zlNJWI1Vhs9LQVOv7L8.roa
File: 8K6YWgY0zlNJWI1Vhs9LQVOv7L8.roa (raw, json)
Hash identifier: IKvHdjPnomM0KK1Zx+0eeF+tzSPb7p7QCMch3ewgq6I=
Subject key identifier: F0:AE:98:5A:06:34:CE:53:49:58:8D:55:86:CF:4B:41:53:AF:EC:BF
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018571030C45E85D90A3578B2282C7F49943
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/8K6YWgY0zlNJWI1Vhs9LQVOv7L8.roa
Signing time: Mon 02 Jan 2023 05:45:03 +0000
ROA not before: Mon 02 Jan 2023 05:45:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49981
IP address blocks: 45.130.201.0/24 maxlen: 24
185.244.138.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:03:0c:45:e8:5d:90:a3:57:8b:22:82:c7:f4:99:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 2 05:45:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f0ae985a0634ce5349588d5586cf4b4153afecbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:22:f6:e4:50:9e:be:0f:77:61:aa:e8:7f:fe:
af:bd:dc:f3:a9:41:c9:2a:0c:6c:02:8b:a8:5a:c5:
0d:ea:03:6c:4e:ef:0b:fa:97:e6:90:f5:84:0d:bc:
df:e6:05:03:86:e3:d3:fe:04:dc:ff:35:2a:49:3d:
5d:98:91:4f:1d:ae:dc:de:07:50:65:af:db:49:49:
d6:91:c7:d4:d5:8b:47:45:71:5f:fe:6b:93:ba:e8:
0c:a7:14:e2:69:c1:43:4e:a1:ad:77:03:ae:c9:aa:
b8:69:2f:d5:21:27:85:c9:58:c4:14:0d:d1:95:5a:
27:0e:8c:3b:52:86:de:65:a2:08:55:31:5c:41:25:
65:63:7f:f9:2c:db:f6:59:a1:32:de:dd:31:33:94:
72:a1:99:44:95:46:46:2c:fc:fc:78:d6:8a:d5:c0:
43:79:65:c0:46:45:cc:0a:a1:b6:6d:6a:d7:d8:ec:
e6:1d:eb:cf:19:ee:a8:6d:2a:50:01:a3:f1:f1:c9:
7d:1a:25:51:2c:ef:9d:fe:05:8f:3a:a5:5e:f2:22:
f6:62:d8:9e:df:d3:05:5b:9b:01:84:9e:42:1a:0f:
65:fa:f4:b4:f1:22:7b:83:87:60:e6:1a:3e:53:31:
1f:fe:d8:8e:a8:74:e8:1c:b7:35:96:29:db:40:d3:
9c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:AE:98:5A:06:34:CE:53:49:58:8D:55:86:CF:4B:41:53:AF:EC:BF
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/8K6YWgY0zlNJWI1Vhs9LQVOv7L8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.201.0/24
185.244.138.0/24
Signature Algorithm: sha256WithRSAEncryption
33:d4:ff:96:71:5a:52:5a:4f:0e:67:37:bd:79:be:83:5f:04:
7a:d8:be:ca:7c:ff:da:51:f5:87:be:a0:f6:2c:6c:c8:00:7e:
ed:46:88:ec:ee:ee:16:64:65:1d:85:e2:6f:92:e4:dd:98:28:
81:ca:1a:c5:31:39:ee:fa:04:38:f5:1c:f7:7c:46:7a:e6:00:
20:22:18:a9:5f:72:d2:f7:81:23:7f:dc:ca:dc:87:f8:0b:c9:
57:07:b9:ae:19:e9:89:68:cd:b8:08:3a:ba:cf:60:7f:e2:8f:
b4:34:52:ff:a1:13:85:4e:d2:88:bd:5c:55:f6:ac:97:69:5d:
21:91:ed:5e:b9:3b:c3:1c:8e:e2:99:a4:e9:e8:7b:53:18:e0:
10:de:74:80:a0:48:6f:23:75:84:04:a6:8a:89:31:b7:13:8b:
bf:0c:8b:fb:a7:af:cb:a3:8e:3b:d9:71:ef:3f:9b:50:07:44:
93:38:dc:da:16:a0:f7:b9:88:31:b0:91:8a:ad:29:8c:90:28:
95:8b:85:48:c9:46:37:33:f8:f7:00:e2:de:5e:91:70:4a:f0:
d3:af:fa:0f:5f:d7:83:b0:1e:0d:18:e9:3a:bc:12:3b:d3:50:
37:2b:1f:7d:11:3d:08:1b:02:6f:5c:c0:20:13:c0:1e:e5:fb:
c5:b2:f6:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:53 2023 by rpki-client on console-ams.rpki-client.org