Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/k6kKQrQQm_R3nKF5CYBNlA4efHs.roa
File: k6kKQrQQm_R3nKF5CYBNlA4efHs.roa (raw, json)
Hash identifier: 3FVPP4EEaAbY8zX6zcWu8T6MgKaGCVt+3iyp5+njC+8=
Subject key identifier: 93:A9:0A:42:B4:10:9B:F4:77:9C:A1:79:09:80:4D:94:0E:1E:7C:7B
Certificate issuer: /CN=5b2dd9fe628b6bc10141de0241766a1b7a63193f
Certificate serial: 01856CB85A01ECFBE25B074D1C8D2AC04CB4
Authority key identifier: 5B:2D:D9:FE:62:8B:6B:C1:01:41:DE:02:41:76:6A:1B:7A:63:19:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/k6kKQrQQm_R3nKF5CYBNlA4efHs.roa
Signing time: Sun 01 Jan 2023 09:44:59 +0000
ROA not before: Sun 01 Jan 2023 09:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8796
IP address blocks: 45.81.128.0/24 maxlen: 24
45.135.116.0/23 maxlen: 24
45.91.83.0/24 maxlen: 24
45.91.82.0/24 maxlen: 24
45.91.80.0/24 maxlen: 24
45.91.81.0/24 maxlen: 24
45.155.222.0/23 maxlen: 24
45.140.88.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:5a:01:ec:fb:e2:5b:07:4d:1c:8d:2a:c0:4c:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b2dd9fe628b6bc10141de0241766a1b7a63193f
Validity
Not Before: Jan 1 09:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=93a90a42b4109bf4779ca17909804d940e1e7c7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ca:a3:85:cc:0d:f1:a0:94:05:2f:40:b8:84:
3b:a3:77:39:af:0a:e3:92:55:85:94:42:b4:c8:b5:
c8:ad:82:61:70:fe:fe:8e:28:98:9b:95:83:4f:d9:
49:20:12:18:18:c7:ec:67:0f:d7:7e:11:28:bd:32:
d7:32:e8:7e:08:0e:f8:f6:5e:e4:04:5b:97:13:3f:
22:4c:72:af:ef:5b:81:8e:8c:e4:6d:1a:97:26:f0:
0a:37:9b:50:5e:89:55:db:10:d1:1b:4d:69:15:69:
dc:96:61:0f:6e:65:b1:be:64:23:2d:a6:f9:b7:50:
08:20:e8:f8:69:f1:94:70:44:66:16:e1:cc:91:7b:
40:6f:d4:25:0e:58:e0:f9:f4:74:88:68:22:59:2f:
13:3b:58:0d:5f:b8:a8:05:0d:b3:5b:c4:ba:5d:1c:
a4:8f:12:45:3e:75:1f:29:40:74:43:d3:91:ce:30:
25:32:33:be:0a:71:fa:11:9d:87:dc:d1:e6:cd:2f:
4b:8b:5c:12:c6:a0:59:ed:6c:1d:24:e0:c3:a0:ef:
af:ca:d3:fe:f2:1c:fd:78:8e:1b:5d:a3:dc:34:3c:
59:4c:4a:4f:48:7e:3c:da:4c:dd:4c:88:8a:64:bb:
21:06:a1:95:15:5b:52:8a:a6:c6:91:84:ff:ec:f5:
03:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A9:0A:42:B4:10:9B:F4:77:9C:A1:79:09:80:4D:94:0E:1E:7C:7B
X509v3 Authority Key Identifier:
keyid:5B:2D:D9:FE:62:8B:6B:C1:01:41:DE:02:41:76:6A:1B:7A:63:19:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/k6kKQrQQm_R3nKF5CYBNlA4efHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.128.0/24
45.91.80.0/22
45.135.116.0/23
45.140.88.0/23
45.155.222.0/23
Signature Algorithm: sha256WithRSAEncryption
41:71:d4:27:e9:57:2e:12:40:54:8f:15:69:b9:27:54:6e:c7:
b2:56:01:1d:28:b5:42:4e:96:f0:af:d4:a6:86:fe:5c:b0:21:
24:4f:29:9b:3e:1e:0c:3a:a3:7c:e6:fc:41:e3:00:36:8e:f4:
e5:d2:21:6f:ba:5a:a9:c8:97:53:f9:20:35:e5:a8:5a:b2:17:
b0:df:bb:38:da:35:36:46:3b:82:35:7b:7d:cb:cb:c4:b1:95:
ac:0a:2c:4c:a6:c5:96:6f:d0:cd:00:a5:3b:5a:fd:25:a2:62:
1b:a7:fc:a7:7f:6f:81:fe:09:cd:fa:92:6b:05:0b:37:cc:1c:
9f:87:59:ec:49:ca:05:14:e5:d6:f6:0a:62:5e:83:43:71:44:
5e:19:11:cd:c2:51:13:02:43:86:7d:ea:5f:29:f3:ee:dc:8a:
da:f8:6d:77:9e:fb:73:9f:1b:55:e2:70:20:6f:91:09:1c:aa:
44:16:a2:29:90:ed:8a:f7:cf:75:28:4e:62:ce:10:aa:d8:cc:
e4:d7:70:fe:95:cc:70:75:4c:39:55:58:da:c1:b1:b7:33:36:
be:46:1b:c3:26:b0:48:2c:bf:c1:9b:17:ef:ef:38:e2:69:c6:
1a:99:bc:01:f9:f3:ab:cb:c9:9b:3f:c5:20:75:cb:f5:c8:2e:
e0:6e:3b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:33:23 2024 by rpki-client on console-ams.rpki-client.org