Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/djxQjnH3s_vK6vn_DKkyhYpeJzY.roa
File: djxQjnH3s_vK6vn_DKkyhYpeJzY.roa (raw, json)
Hash identifier: JlxJ2zBYXzUTIHw0onaWJk+0qqQ4+G1ncmmuQ59LXu0=
Subject key identifier: 76:3C:50:8E:71:F7:B3:FB:CA:EA:F9:FF:0C:A9:32:85:8A:5E:27:36
Certificate issuer: /CN=a634878281144a46a856003d622f6141ea4e006f
Certificate serial: 0186549F52D1FA69309011FA1A3B9C2CD768
Authority key identifier: A6:34:87:82:81:14:4A:46:A8:56:00:3D:62:2F:61:41:EA:4E:00:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjSHgoEUSkaoVgA9Yi9hQepOAG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/djxQjnH3s_vK6vn_DKkyhYpeJzY.roa
Signing time: Wed 15 Feb 2023 10:29:32 +0000
ROA not before: Wed 15 Feb 2023 10:29:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44381
IP address blocks: 217.144.64.0/20 maxlen: 20
92.62.32.0/20 maxlen: 20
45.154.233.0/24 maxlen: 24
45.154.232.0/24 maxlen: 24
45.154.232.0/22 maxlen: 22
45.154.234.0/24 maxlen: 24
45.154.235.0/24 maxlen: 24
95.141.64.0/20 maxlen: 20
2a02:2c8::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:54:9f:52:d1:fa:69:30:90:11:fa:1a:3b:9c:2c:d7:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a634878281144a46a856003d622f6141ea4e006f
Validity
Not Before: Feb 15 10:29:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=763c508e71f7b3fbcaeaf9ff0ca932858a5e2736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:8f:2b:84:be:05:38:e1:5f:24:05:05:b4:f8:
fd:8d:36:90:fa:a4:f7:d1:79:43:ce:26:ce:c8:b6:
e6:70:38:bd:6a:cb:bf:8f:74:e3:89:e6:ca:42:5f:
c1:38:dc:53:e7:cd:f2:13:16:9e:0f:79:25:8f:f2:
07:c0:1f:c2:95:04:58:a7:41:1c:bb:c2:bb:d3:ad:
81:67:44:5d:39:50:a8:ea:fb:bc:a2:df:a0:fc:4a:
2b:83:14:81:7c:5b:40:73:a9:77:61:04:d4:d9:f5:
b5:d0:a1:11:2f:ca:db:e5:f3:cf:7e:12:cb:c6:26:
77:fe:13:50:f1:6c:5e:ad:0b:d5:2a:2a:26:50:43:
be:cd:3d:ee:f8:06:ad:a8:d5:fc:9f:32:52:f1:9c:
2d:f3:02:5a:e2:f3:a6:26:34:de:cd:ad:99:33:7c:
83:a9:b1:0e:4d:7d:3f:c5:db:4c:38:c5:ac:0a:33:
f8:f9:91:2a:7a:98:50:19:2c:84:28:05:e7:70:e8:
47:bc:19:f4:61:e6:a3:17:cd:22:ad:5a:3e:66:90:
b2:90:86:d3:77:07:d4:5b:a6:09:0f:f8:06:98:ef:
84:d0:4b:b7:57:5f:08:4f:ef:36:8f:a8:1f:4a:32:
96:00:ca:f5:48:93:33:26:2a:2e:b3:4a:a2:99:34:
7b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:3C:50:8E:71:F7:B3:FB:CA:EA:F9:FF:0C:A9:32:85:8A:5E:27:36
X509v3 Authority Key Identifier:
keyid:A6:34:87:82:81:14:4A:46:A8:56:00:3D:62:2F:61:41:EA:4E:00:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjSHgoEUSkaoVgA9Yi9hQepOAG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/djxQjnH3s_vK6vn_DKkyhYpeJzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.232.0/22
92.62.32.0/20
95.141.64.0/20
217.144.64.0/20
IPv6:
2a02:2c8::/32
Signature Algorithm: sha256WithRSAEncryption
9f:66:d6:06:d8:ba:3e:92:54:d2:68:e2:9a:fd:ca:24:a1:ac:
67:3b:f8:ac:f3:f5:cf:1e:20:0c:17:f4:22:a6:5f:e1:96:53:
54:d0:07:31:99:40:36:4a:2c:6b:e7:b5:f3:46:0e:91:9d:13:
78:dd:40:8a:62:fd:a2:66:82:8d:4e:c5:75:8f:b8:2d:b7:18:
ea:17:b0:dd:c8:3f:72:21:34:6e:b8:0c:91:f6:dc:ce:12:92:
36:51:21:9f:1d:e4:94:34:50:a7:d0:ca:0d:99:34:ac:3a:e7:
9b:67:3f:f4:52:45:9d:de:88:b3:01:9e:2b:1c:fa:ae:b1:fa:
95:95:07:15:ad:2d:c6:50:6d:e0:b3:13:e1:68:7d:44:d9:4c:
d6:77:c0:59:ea:30:b6:a1:10:dc:dc:39:bc:33:c0:a8:ce:12:
cd:c7:82:f8:20:6c:08:46:8c:c0:e4:99:55:7c:14:f7:bf:40:
9c:08:56:64:dc:7d:15:fa:a0:8e:b7:f5:dc:a7:03:f3:ac:ee:
6e:54:9e:25:7e:a8:4f:5a:23:7c:5f:fa:3d:97:e4:4c:f9:b8:
14:b2:f7:25:00:71:2c:3e:b1:8e:8a:14:37:c7:43:af:bb:c7:
08:4f:36:ea:41:d6:72:d0:3a:83:a5:f2:c5:d3:61:e7:de:84:
16:de:95:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:22 2023 by rpki-client on console-fra.rpki-client.org