Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/uLnGsK-IXyYy0-A0EoD5ydXkw2g.roa
File: uLnGsK-IXyYy0-A0EoD5ydXkw2g.roa (raw, json)
Hash identifier: 9XbOYs10ekcHa7WMTRIyye2SU5YXIkRFqFHB4uVlC34=
Subject key identifier: B8:B9:C6:B0:AF:88:5F:26:32:D3:E0:34:12:80:F9:C9:D5:E4:C3:68
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 018AB4FA4D828317188589C0657877978FAD
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/uLnGsK-IXyYy0-A0EoD5ydXkw2g.roa
Signing time: Wed 20 Sep 2023 23:43:37 +0000
ROA not before: Wed 20 Sep 2023 23:43:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52423
IP address blocks: 45.85.85.0/24 maxlen: 24
185.185.248.0/24 maxlen: 24
185.185.249.0/24 maxlen: 24
45.85.86.0/24 maxlen: 24
185.190.80.0/24 maxlen: 32
185.184.141.0/24 maxlen: 32
185.184.143.0/24 maxlen: 24
185.184.142.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b4:fa:4d:82:83:17:18:85:89:c0:65:78:77:97:8f:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Sep 20 23:43:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8b9c6b0af885f2632d3e0341280f9c9d5e4c368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:26:b8:5a:d9:41:0a:16:89:57:3a:55:54:65:
44:d7:ae:09:82:27:8e:83:be:1c:fe:94:e7:7d:95:
46:36:8a:f4:03:c9:08:af:50:8d:47:fd:d4:ad:08:
30:35:6e:7d:9e:e5:77:1d:ed:da:2b:41:ab:2b:97:
a7:6b:6a:8f:ac:2b:62:e3:8c:5c:ea:8a:49:a3:c5:
b3:a2:3b:d2:d2:5a:1d:52:91:8e:72:f8:39:32:b2:
5d:3f:96:6d:2f:c2:5f:cd:0b:ed:1c:75:e1:ef:ab:
14:65:03:f9:d2:71:e7:7f:41:f0:f3:06:d6:ab:9a:
12:56:ed:59:d0:5f:50:1c:bd:67:56:b1:3e:da:7a:
4a:79:0a:db:be:64:46:2d:49:7d:f4:12:c1:70:49:
40:f1:5e:1e:cc:a7:66:2e:71:94:34:6b:48:22:89:
b5:d0:55:ea:b9:1a:60:0f:0e:5e:09:9b:95:61:1f:
4c:27:c1:48:38:4a:9a:ca:a1:c5:aa:cb:48:96:7b:
96:b6:65:15:d2:da:c4:49:27:1c:dc:ae:26:0c:81:
b0:05:b2:fc:94:d6:e5:44:09:64:ce:1d:c9:08:bb:
1c:2c:a5:c8:b3:6d:10:fd:0d:0a:ed:ef:6f:59:ee:
2c:02:f3:34:64:b4:de:eb:66:72:f4:11:c2:b6:7a:
c6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:B9:C6:B0:AF:88:5F:26:32:D3:E0:34:12:80:F9:C9:D5:E4:C3:68
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/uLnGsK-IXyYy0-A0EoD5ydXkw2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.85.0-45.85.86.255
185.184.141.0-185.184.143.255
185.185.248.0/23
185.190.80.0/24
Signature Algorithm: sha256WithRSAEncryption
61:ec:78:4e:c7:9f:3a:76:c4:b3:ee:b6:12:9b:eb:55:90:fe:
13:44:98:8c:da:aa:4a:23:b8:b0:49:a4:f2:c3:dc:c6:44:1b:
65:89:c3:3f:6a:00:14:84:bf:31:13:aa:ac:99:9d:2b:99:bb:
82:79:82:3f:ae:19:9d:44:ab:99:49:d8:c9:0c:03:72:d6:e4:
b1:a9:f9:a8:e2:af:be:28:36:7a:ca:ff:6c:6f:92:fe:9d:af:
e8:b7:4c:57:a3:4f:35:6a:80:a0:46:c4:1d:f9:65:8d:bc:61:
3a:0e:5a:61:bf:6c:fa:6c:e0:8c:84:c2:15:49:83:8d:cf:b4:
e9:6a:cc:6f:52:e8:d0:70:f8:9c:39:a9:bb:c2:fc:56:a4:b0:
41:3e:13:e1:20:5f:d1:55:5d:64:45:a7:07:29:c9:f4:f9:5f:
84:48:f9:02:fe:0b:d1:cf:b6:f2:57:30:53:12:8b:ff:a6:ba:
7f:30:75:2e:c7:ed:38:72:db:77:e0:10:b0:03:9c:a9:0d:01:
bd:1e:42:61:8a:e2:1e:1a:e8:5e:96:83:47:c0:4f:6b:42:cb:
12:54:c8:da:f2:29:d6:d5:26:61:0e:43:ea:4b:69:8a:5a:ae:
14:1c:95:1e:70:b3:83:3a:48:79:12:cc:1a:91:5a:e9:dd:6b:
d4:e6:a7:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 13 22:17:02 2023 by rpki-client on console-fra.rpki-client.org