Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/3uENhhpgjVBqiVt0MU8gJsCTmgs.roa
File: 3uENhhpgjVBqiVt0MU8gJsCTmgs.roa (raw, json)
Hash identifier: 6zuQACRdaUMqIGgJNs/OFZozlfI/bw8gJkaWxvCIbAg=
Subject key identifier: DE:E1:0D:86:1A:60:8D:50:6A:89:5B:74:31:4F:20:26:C0:93:9A:0B
Certificate issuer: /CN=c2d82ccf0c8dea7d7f6ad72e8e62462d7be20d56
Certificate serial: 0185EE95B94CE5B185BD887283483C7F26D0
Authority key identifier: C2:D8:2C:CF:0C:8D:EA:7D:7F:6A:D7:2E:8E:62:46:2D:7B:E2:0D:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtgszwyN6n1_atcujmJGLXviDVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/3uENhhpgjVBqiVt0MU8gJsCTmgs.roa
Signing time: Thu 26 Jan 2023 14:57:47 +0000
ROA not before: Thu 26 Jan 2023 14:57:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49810
IP address blocks: 45.84.147.0/24 maxlen: 24
45.84.146.0/24 maxlen: 24
2a04:d202::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ee:95:b9:4c:e5:b1:85:bd:88:72:83:48:3c:7f:26:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d82ccf0c8dea7d7f6ad72e8e62462d7be20d56
Validity
Not Before: Jan 26 14:57:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dee10d861a608d506a895b74314f2026c0939a0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:db:16:76:44:a4:72:10:16:ed:6f:d5:9e:d8:
d4:e4:5d:62:94:be:d6:70:ca:7a:3d:d7:6d:6d:e0:
71:e2:2d:a3:bd:61:a9:a2:21:a1:dd:0d:77:00:3c:
e8:f4:76:76:04:ce:46:19:bc:ae:e7:c7:40:10:c5:
1a:4e:9f:49:5d:5c:f6:55:33:79:a7:ea:ac:94:a6:
06:28:f3:11:e5:73:22:ec:a7:15:00:00:42:61:92:
60:66:87:8e:d9:ec:f9:90:16:3f:fd:84:52:23:8b:
43:7b:6a:14:c0:2d:f8:85:1a:7d:ef:82:63:5a:15:
07:80:d8:d7:70:b4:08:cd:fe:29:b3:41:67:2a:18:
43:28:1a:ca:06:dc:47:dc:49:74:75:ef:28:41:87:
b9:03:8b:82:ff:77:f7:3e:32:ff:ea:be:6b:f6:c8:
b1:24:aa:27:78:a3:5a:91:78:00:9e:1a:16:a3:eb:
57:40:02:03:55:95:47:9e:d5:6d:58:c7:0d:eb:ff:
7a:b1:6b:b1:02:21:81:51:b5:50:b8:09:03:48:3f:
75:42:0c:b2:c8:67:c0:a2:26:b4:dc:9d:1c:1f:51:
8d:1d:00:09:f2:5a:5b:cc:8e:3b:fa:5d:5b:ac:24:
d8:0d:da:37:07:b3:35:76:61:c6:15:29:d5:e0:5c:
d8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:E1:0D:86:1A:60:8D:50:6A:89:5B:74:31:4F:20:26:C0:93:9A:0B
X509v3 Authority Key Identifier:
keyid:C2:D8:2C:CF:0C:8D:EA:7D:7F:6A:D7:2E:8E:62:46:2D:7B:E2:0D:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtgszwyN6n1_atcujmJGLXviDVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/3uENhhpgjVBqiVt0MU8gJsCTmgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/wtgszwyN6n1_atcujmJGLXviDVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.146.0/23
IPv6:
2a04:d202::/32
Signature Algorithm: sha256WithRSAEncryption
8a:c4:9c:2a:ee:7d:42:11:6b:a7:35:d2:2f:2b:c9:c3:9f:e5:
ae:39:1e:c7:8b:37:6c:f7:8e:1f:11:a7:c6:d4:13:f1:db:5f:
f8:d1:2e:b1:b8:cf:a4:98:22:a1:6c:de:3f:01:25:19:93:17:
d6:7f:9e:5b:73:95:8b:0d:49:92:43:34:88:c7:1d:c6:1d:a8:
00:23:de:cb:b2:d3:d7:b7:1f:8e:d2:f9:ea:f5:7b:28:e9:89:
de:68:42:fd:96:cb:a1:0a:55:02:bc:4e:25:a1:fb:9a:9d:bd:
69:92:07:17:d8:6b:98:d2:41:42:a5:04:b4:fd:7b:6f:d1:84:
c9:31:e2:ab:d7:fb:aa:b0:17:8b:20:f0:2f:50:9b:75:52:7a:
f2:bd:a7:bb:b4:8e:3c:27:a6:2d:77:52:54:13:08:89:06:6e:
df:12:2f:f5:8d:ad:bf:f0:07:69:2f:7b:b8:35:5b:dd:22:df:
b6:73:9d:3b:ff:d1:9a:ce:80:8d:d1:96:98:e0:4b:d1:b6:a2:
b8:bb:9c:6a:15:7b:2e:c9:9a:c0:e4:d5:59:cf:cb:61:cd:ce:
6a:32:87:cb:8f:8c:72:58:0a:b4:5c:35:d1:47:8d:66:61:c6:
8e:8f:b5:28:05:b1:46:a6:a2:5f:14:c6:bd:91:cc:d7:71:6f:
7f:b7:71:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:47 2023 by rpki-client on console-ams.rpki-client.org