Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/wKuPAzmAYU6jn9U4hTTthrfmnoM.roa
File: wKuPAzmAYU6jn9U4hTTthrfmnoM.roa (raw, json)
Hash identifier: F55iIjKw2hreMmw1s3omWoLyZxsy4MVczEPiySSjf74=
Subject key identifier: C0:AB:8F:03:39:80:61:4E:A3:9F:D5:38:85:34:ED:86:B7:E6:9E:83
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018571031C607BAB4E2B9BA8B9A155E3926D
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/wKuPAzmAYU6jn9U4hTTthrfmnoM.roa
Signing time: Mon 02 Jan 2023 05:45:07 +0000
ROA not before: Mon 02 Jan 2023 05:45:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210636
IP address blocks: 91.190.106.0/24 maxlen: 24
185.241.211.0/24 maxlen: 24
45.83.30.0/23 maxlen: 23
45.80.156.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:03:1c:60:7b:ab:4e:2b:9b:a8:b9:a1:55:e3:92:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 2 05:45:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0ab8f033980614ea39fd5388534ed86b7e69e83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5c:43:70:90:f0:d4:51:8d:8a:55:a7:74:9a:
43:b3:b1:4c:74:7f:d0:69:80:a5:ba:53:05:80:73:
da:8b:2c:8f:cf:19:42:13:43:00:b2:9b:f5:fa:fb:
b0:87:16:e9:8d:c0:99:76:04:5d:06:80:b2:e3:c9:
4b:93:ae:94:62:25:90:19:f6:d1:a8:d1:ae:df:53:
3a:9c:ba:f6:62:a3:17:03:c0:e8:a4:8a:a8:9c:80:
54:ec:1a:b5:e4:01:80:e6:01:b8:24:a6:ad:68:c6:
6a:a8:c4:b9:df:4a:f4:15:58:3c:e7:7d:e7:1d:b2:
96:c3:fa:a8:66:c8:28:9d:d6:b1:06:7b:d0:11:eb:
95:15:b5:56:1a:62:eb:78:81:55:d7:a7:a8:61:60:
04:2a:8a:2b:4c:5e:bd:27:96:de:6a:f1:b8:b4:ec:
89:3c:89:05:16:89:67:08:27:10:f3:63:80:12:76:
f1:09:94:f5:3f:af:e2:42:ee:ed:b2:ad:b2:c0:b2:
14:42:d4:c6:64:5c:bc:b3:c7:47:9a:d9:c8:bd:75:
c7:aa:ec:dc:40:34:06:e6:ea:53:6a:04:18:e1:d9:
27:5e:dd:7b:c6:21:c1:a8:1e:da:3a:4c:57:ca:7b:
9a:4a:5c:6f:b2:3d:04:69:2c:dc:d8:83:4b:68:3d:
a5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:AB:8F:03:39:80:61:4E:A3:9F:D5:38:85:34:ED:86:B7:E6:9E:83
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/wKuPAzmAYU6jn9U4hTTthrfmnoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.156.0/24
45.83.30.0/23
91.190.106.0/24
185.241.211.0/24
Signature Algorithm: sha256WithRSAEncryption
15:e9:3e:67:af:33:fc:cf:22:a8:40:d2:37:90:a4:9b:73:b0:
b7:f2:b2:88:4e:af:16:0b:f8:99:92:bd:b5:ff:36:84:8d:15:
e7:f1:e9:97:a6:bf:7d:8b:a5:10:03:7d:91:f7:af:a9:17:28:
f2:11:b6:d3:a7:78:61:cb:35:98:e5:f1:31:af:3b:d5:15:ea:
84:67:c4:1c:98:85:7b:34:d1:cf:0b:83:8f:2f:81:a3:cb:e4:
5b:41:a2:02:ee:84:fc:d7:fb:a1:b5:5a:ac:57:bc:65:87:46:
4d:cb:11:fc:73:37:46:ac:7a:d2:76:de:cd:a3:31:d7:d8:34:
80:c1:53:cd:49:07:31:5e:6b:3c:5c:43:4c:0c:bd:19:f1:07:
ff:47:bf:8d:f0:ed:b8:e2:77:91:3c:97:5d:8a:79:0b:34:f3:
94:33:28:4d:b3:da:dd:4c:14:e8:4b:84:6d:7d:d0:fe:83:5a:
d9:17:14:8e:df:1e:b3:09:f2:09:cc:58:02:4f:25:43:eb:39:
22:d2:27:57:eb:b6:31:dc:e3:d4:22:00:30:45:a4:b8:27:f8:
37:23:10:9d:d9:dc:e4:08:24:03:2c:1f:ea:9f:da:cc:1a:38:
1f:bc:11:c9:1e:e9:95:d4:49:cb:39:d1:ff:9c:06:17:0d:35:
06:89:46:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:03 2023 by rpki-client on console-fra.rpki-client.org