Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/6T9Y367lVG0QS6QngGG1YKRWQXE.roa
File: 6T9Y367lVG0QS6QngGG1YKRWQXE.roa (raw, json)
Hash identifier: nBdyuElnsEG9xzj2eVDRTfIGwRo0SpX5WTjmPNVLLV0=
Subject key identifier: E9:3F:58:DF:AE:E5:54:6D:10:4B:A4:27:80:61:B5:60:A4:56:41:71
Certificate issuer: /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Certificate serial: 01856FB11B7D9A976C4144E7D30EBD11BABB
Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/6T9Y367lVG0QS6QngGG1YKRWQXE.roa
Signing time: Sun 01 Jan 2023 23:35:55 +0000
ROA not before: Sun 01 Jan 2023 23:35:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39782
IP address blocks: 45.82.222.0/24 maxlen: 24
45.82.221.0/24 maxlen: 24
45.82.220.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:b1:1b:7d:9a:97:6c:41:44:e7:d3:0e:bd:11:ba:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Validity
Not Before: Jan 1 23:35:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e93f58dfaee5546d104ba4278061b560a4564171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ca:78:d7:c1:76:0e:e7:83:b1:9b:a7:98:30:
7c:21:28:66:96:c8:61:c4:cd:1f:40:cf:4a:de:fd:
f6:ed:d0:7d:1f:47:cb:f0:0e:8c:03:af:00:6c:90:
27:04:99:ad:d1:ec:45:0a:64:ad:c7:af:90:5f:44:
b7:38:cb:56:7f:ae:b6:67:94:61:c4:a8:b8:9c:9b:
73:c9:8a:39:ed:71:43:52:85:a9:a2:dd:be:8b:a1:
10:e6:4f:8b:0d:62:d6:e4:f7:79:f2:cd:c4:21:2a:
ab:6e:ea:2a:e5:62:b9:d3:3d:88:94:af:d2:be:64:
14:b9:45:aa:04:45:40:ba:e6:6a:36:fd:72:6b:ce:
56:e5:46:c7:a9:89:05:36:5b:f5:ee:20:a6:a7:ef:
75:0c:e6:17:3f:08:21:22:01:a8:08:0d:51:b2:64:
87:50:18:15:46:a2:15:77:56:60:b3:8e:4b:54:46:
e6:96:6f:ac:d0:8d:80:46:74:48:d3:0f:61:57:26:
e2:d0:eb:f0:70:bb:48:44:fa:3b:be:e4:a6:0e:ab:
b3:28:70:77:b3:39:8c:28:f3:b1:67:8a:73:bc:1c:
d4:9c:56:66:cf:57:3d:c4:67:49:53:50:78:43:d0:
db:2c:b0:bf:65:5c:4b:b3:6d:38:e4:28:ab:2d:27:
55:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:3F:58:DF:AE:E5:54:6D:10:4B:A4:27:80:61:B5:60:A4:56:41:71
X509v3 Authority Key Identifier:
keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/6T9Y367lVG0QS6QngGG1YKRWQXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.220.0-45.82.222.255
Signature Algorithm: sha256WithRSAEncryption
af:bf:44:e1:4c:3a:b1:f1:fc:f0:29:6f:12:9c:f9:0a:3c:62:
fc:b7:2f:11:0a:8e:02:d0:e6:a1:6b:c5:4d:43:95:26:8a:5a:
33:dd:ae:6f:45:64:21:75:32:33:51:eb:b3:7a:15:22:62:fe:
52:8b:c2:8d:94:0f:1c:04:a3:ee:d6:b4:80:a7:36:85:1e:16:
8d:75:e4:59:23:5f:0f:b0:3a:ff:0e:e2:b1:09:f7:d2:2f:e6:
d1:c5:21:7e:9f:a3:77:84:91:88:1d:d5:3e:7a:bd:b7:ba:d2:
d9:67:a1:ee:5a:7e:84:82:6c:b2:40:91:c0:0d:b7:57:99:8e:
b8:1c:b2:b4:8d:88:ba:7a:78:48:8b:20:d9:a3:bd:58:c3:99:
07:26:ae:07:d7:c2:31:ae:45:3e:9f:15:24:27:ef:56:6d:24:
29:73:99:68:d3:fd:62:94:7c:71:c5:2e:da:85:81:a8:25:47:
7a:24:47:68:f0:3e:b0:91:92:b4:ed:b8:30:ee:38:b0:d9:56:
0e:e8:d4:6a:ad:dc:46:85:5c:e9:f2:01:2a:2b:2a:86:c2:4a:
a3:b0:cc:f9:d1:c1:98:8c:1b:ff:3d:c1:fc:95:6b:bb:eb:f1:
bc:8d:3c:69:30:9b:df:e3:ae:21:c0:73:08:8f:d1:09:a7:f0:
f2:f5:bb:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:10:42 2024 by rpki-client on console-ams.rpki-client.org