Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/al9ToYautIOwpp3thdhIxjhJeXI.roa
File: al9ToYautIOwpp3thdhIxjhJeXI.roa (raw, json)
Hash identifier: bywIXeodnS8omd8+I2u+vjuQwj+9MpIu5mwfmuZv45I=
Subject key identifier: 6A:5F:53:A1:86:AE:B4:83:B0:A6:9D:ED:85:D8:48:C6:38:49:79:72
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 018B1B9A8E5D2B280E345B277934A3EABD25
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/al9ToYautIOwpp3thdhIxjhJeXI.roa
Signing time: Tue 10 Oct 2023 21:59:55 +0000
ROA not before: Tue 10 Oct 2023 21:59:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 91.217.125.0/24 maxlen: 24
188.64.162.0/24 maxlen: 24
45.131.51.0/24 maxlen: 24
45.93.82.0/24 maxlen: 24
185.210.136.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1b:9a:8e:5d:2b:28:0e:34:5b:27:79:34:a3:ea:bd:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Oct 10 21:59:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6a5f53a186aeb483b0a69ded85d848c638497972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:17:ff:b3:51:b6:05:4c:55:32:ca:55:44:04:
35:3e:52:57:2a:af:1e:bb:8f:43:95:52:6f:d6:ae:
f0:45:f6:54:1a:ed:d6:36:d5:20:d4:33:08:b1:f1:
35:9a:3a:be:13:5b:f3:23:64:bd:7d:96:96:9c:dc:
4a:d2:c6:3e:d4:de:28:bc:b8:1d:c4:c3:05:ed:4b:
91:b2:50:17:26:02:e6:d4:32:42:df:e5:a5:d7:d0:
b1:af:14:7f:4e:94:bb:c9:57:64:3d:fb:76:c9:69:
3c:a5:76:e9:e9:42:22:b8:76:03:72:18:53:15:92:
4f:52:aa:7d:fd:ec:09:62:7f:d2:c6:aa:0b:3d:95:
0a:92:73:29:44:36:31:53:de:f9:3f:2c:cd:e8:b4:
bc:29:08:13:25:5d:0c:e5:f0:ab:5b:b2:31:7f:24:
3f:45:e7:78:52:be:94:2f:08:8b:2e:9a:b9:74:fc:
e1:e9:01:fd:72:b5:53:f2:90:d9:10:cb:fa:67:a7:
17:de:d9:9c:da:bb:81:a8:ec:2d:ca:e2:a3:6d:47:
91:57:7f:56:19:b0:ed:94:32:e1:74:a9:52:b7:8e:
61:d7:7a:e0:11:9d:12:ef:ae:52:3f:d2:29:5a:76:
72:9e:91:76:9e:4b:d8:66:82:5f:1a:93:66:bc:ec:
17:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:5F:53:A1:86:AE:B4:83:B0:A6:9D:ED:85:D8:48:C6:38:49:79:72
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/al9ToYautIOwpp3thdhIxjhJeXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.82.0/24
45.131.51.0/24
91.217.125.0/24
185.210.136.0/24
188.64.162.0/24
Signature Algorithm: sha256WithRSAEncryption
34:1c:48:a8:16:62:7d:14:a7:0e:e5:95:42:6b:f3:4f:35:b6:
5b:5b:f9:4f:39:f4:9e:c1:32:d2:c6:48:34:6f:db:f9:b2:5e:
3b:ce:e8:e8:46:14:70:50:1a:b7:61:9b:ff:f8:a0:8d:c2:bc:
8b:5a:d1:5c:5d:76:e4:92:2f:7e:ac:9e:0f:27:fa:50:01:05:
01:06:1c:c0:be:dc:0a:e6:80:d4:9d:e3:d7:4d:e9:45:ec:a8:
f7:1c:3e:d5:d1:21:0a:dc:70:96:24:87:51:01:16:f0:eb:87:
24:71:13:1a:41:86:67:22:5e:54:b6:61:14:84:9c:39:f9:11:
7d:7f:1c:4a:06:f1:94:f7:b9:66:32:7d:08:c9:4e:f7:10:60:
11:4c:8b:33:b2:98:2d:42:ea:b3:18:5c:14:58:51:23:b9:8c:
b1:29:e5:75:51:fa:66:ff:0a:a8:99:9f:68:62:2b:18:c6:82:
db:97:c3:a1:bc:91:11:c0:e5:04:93:4d:f4:44:b3:58:c8:47:
f0:51:4a:29:6a:e5:4b:05:09:41:18:eb:c1:4c:b8:da:4f:c2:
55:20:92:73:4b:df:99:52:83:97:59:e4:5b:a9:08:39:aa:da:
3d:68:8a:34:44:d6:8e:b0:f3:17:dc:dd:26:12:87:b9:3f:4f:
a7:f6:f8:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:41 2024 by rpki-client on console-ams.rpki-client.org