Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/f5d671-adee-4e78-ae22-9b38607f4e3e/1/OquEGM2ILwOgbj0vZl_-02F5iiE.roa
File: OquEGM2ILwOgbj0vZl_-02F5iiE.roa (raw, json)
Hash identifier: VM2BhV2YV39hRoxQwNvEpv15WQ+E77aA7xfFNUEvH+Y=
Subject key identifier: 3A:AB:84:18:CD:88:2F:03:A0:6E:3D:2F:66:5F:FE:D3:61:79:8A:21
Certificate issuer: /CN=f28d10ff00e7a463efc7fba7cd4d4446fe6ad678
Certificate serial: 01856D016E56C38166C0C5EFB4329DC2B471
Authority key identifier: F2:8D:10:FF:00:E7:A4:63:EF:C7:FB:A7:CD:4D:44:46:FE:6A:D6:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8o0Q_wDnpGPvx_unzU1ERv5q1ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/f5d671-adee-4e78-ae22-9b38607f4e3e/1/OquEGM2ILwOgbj0vZl_-02F5iiE.roa
Signing time: Sun 01 Jan 2023 11:04:48 +0000
ROA not before: Sun 01 Jan 2023 11:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48133
IP address blocks: 45.146.244.0/22 maxlen: 22
94.228.80.0/20 maxlen: 20
2a03:f040::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:01:6e:56:c3:81:66:c0:c5:ef:b4:32:9d:c2:b4:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f28d10ff00e7a463efc7fba7cd4d4446fe6ad678
Validity
Not Before: Jan 1 11:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3aab8418cd882f03a06e3d2f665ffed361798a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:31:3f:de:86:a4:fa:e0:1b:82:ba:df:24:29:
c9:d2:2b:76:22:22:b5:19:04:41:bd:10:fe:1b:d5:
d1:9e:2c:0d:e0:f9:ae:5c:78:42:83:c9:3b:06:0c:
99:3f:af:1e:55:9f:00:d1:0e:35:8c:16:95:da:32:
b8:02:32:3b:4d:5b:14:57:da:0d:28:5f:8a:44:c6:
76:f2:b6:cd:37:d5:13:33:f9:f2:c0:3f:f6:18:15:
64:dd:d5:e1:36:c7:fa:14:45:da:52:32:ce:89:74:
81:1e:d6:16:5e:d5:5e:4b:d5:bd:16:2c:6a:5b:30:
d7:14:35:60:de:df:ff:5a:f5:6e:ce:86:3c:2b:3c:
35:e4:12:fc:55:9b:5f:64:4c:31:46:82:b8:72:f3:
f5:16:2a:42:1c:2a:ba:38:35:22:1b:51:a7:a5:99:
d2:9d:b5:ea:54:3e:2b:5a:ad:c1:49:0c:36:13:42:
da:d3:4b:97:52:2b:fd:51:19:89:a2:59:2e:32:e3:
7b:68:89:30:49:64:ed:5d:5c:66:8e:79:44:c3:d1:
62:6e:e7:4f:de:17:46:77:c3:91:f7:51:66:5a:52:
7a:9e:bc:06:4c:d7:b1:64:79:ff:0d:8a:8f:9f:2c:
fc:ea:3e:c9:0b:da:33:e2:7d:b3:59:88:68:e9:13:
8c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:AB:84:18:CD:88:2F:03:A0:6E:3D:2F:66:5F:FE:D3:61:79:8A:21
X509v3 Authority Key Identifier:
keyid:F2:8D:10:FF:00:E7:A4:63:EF:C7:FB:A7:CD:4D:44:46:FE:6A:D6:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8o0Q_wDnpGPvx_unzU1ERv5q1ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/f5d671-adee-4e78-ae22-9b38607f4e3e/1/OquEGM2ILwOgbj0vZl_-02F5iiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/f5d671-adee-4e78-ae22-9b38607f4e3e/1/8o0Q_wDnpGPvx_unzU1ERv5q1ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.244.0/22
94.228.80.0/20
IPv6:
2a03:f040::/32
Signature Algorithm: sha256WithRSAEncryption
7d:0f:29:6b:27:01:77:cd:9c:3c:3f:77:7f:80:85:b9:03:59:
11:f8:a4:64:61:cd:ca:00:be:bf:68:f4:06:c5:3b:95:2c:7d:
f5:4b:b2:5b:48:88:a1:53:46:3b:cf:25:0d:02:90:ec:de:fc:
bb:8d:b9:23:28:e8:89:c0:bf:42:6f:7b:7a:33:bb:0b:f5:82:
83:3e:76:3a:02:06:b2:ee:a9:98:87:a0:a6:04:82:2f:e6:35:
9b:e1:91:a1:c5:cd:73:3d:0c:97:05:ca:33:a8:a7:6c:4b:31:
bf:07:7e:e6:e8:66:78:09:6b:ca:7f:c9:8d:5c:12:4e:db:52:
7f:a9:e4:8d:95:0f:e7:87:79:00:b9:3d:ba:5d:a0:9f:46:3d:
d3:57:18:6e:12:40:cd:f4:ff:0b:1c:f9:39:16:e6:5b:aa:e5:
18:c8:76:f5:c7:ac:fc:f0:78:76:96:fc:2a:7a:bb:d1:23:73:
aa:28:22:fd:ee:07:a7:63:06:a5:cc:61:08:25:f5:4f:ce:27:
1e:33:f8:42:5f:b7:ff:d1:9f:46:58:bf:15:da:1d:18:e4:da:
0a:49:a5:02:48:14:60:75:e1:1c:38:aa:2a:db:46:27:38:12:
b2:05:0c:a4:65:13:46:78:7b:23:c5:9a:ab:aa:a2:bf:bc:62:
b8:0a:4b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:20:35 2024 by rpki-client on console-fra.rpki-client.org