Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/CRaOAa9c_3XLA2iEwULJ0myP05w.roa
File: CRaOAa9c_3XLA2iEwULJ0myP05w.roa (raw, json)
Hash identifier: jKzf9DRa9qf8rRev3qZFkaRKVpd31o0qOiMJc2JM2vg=
Subject key identifier: 09:16:8E:01:AF:5C:FF:75:CB:03:68:84:C1:42:C9:D2:6C:8F:D3:9C
Certificate issuer: /CN=b9b0d33432eca77c054e8fa8707248da4e47db0b
Certificate serial: 0189537A4C9EAB6BF3FA732A2E1B84E69499
Authority key identifier: B9:B0:D3:34:32:EC:A7:7C:05:4E:8F:A8:70:72:48:DA:4E:47:DB:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubDTNDLsp3wFTo-ocHJI2k5H2ws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/CRaOAa9c_3XLA2iEwULJ0myP05w.roa
Signing time: Fri 14 Jul 2023 08:17:51 +0000
ROA not before: Fri 14 Jul 2023 08:17:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 45.85.95.0/24 maxlen: 24
45.85.94.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:53:7a:4c:9e:ab:6b:f3:fa:73:2a:2e:1b:84:e6:94:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b0d33432eca77c054e8fa8707248da4e47db0b
Validity
Not Before: Jul 14 08:17:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=09168e01af5cff75cb036884c142c9d26c8fd39c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3e:42:da:9f:e2:bd:bb:56:92:4b:ca:6e:35:
3b:f9:29:55:b1:95:21:e2:b4:1b:ea:4f:59:ae:66:
68:c7:f7:f1:47:09:d7:55:11:c9:db:39:b2:fb:1b:
2f:03:51:3f:44:0a:d2:e6:dd:97:3d:ae:0c:41:9c:
19:34:6f:66:14:62:d2:de:26:b4:e4:ae:5d:8d:b1:
68:35:2b:1a:6a:6e:b4:b2:1a:92:f6:f4:5b:6f:7c:
84:06:6c:69:c6:98:d5:13:09:36:ef:aa:f6:dc:53:
97:fa:fe:e9:dc:4b:b9:ba:a5:7d:59:b9:45:fb:43:
56:e9:79:b0:b7:68:d5:cb:54:1c:cd:0c:9f:0c:80:
60:6d:65:3a:36:15:ae:97:93:fc:58:5d:ed:d5:2b:
75:5f:7e:bd:f4:da:2c:c2:5c:bf:7e:91:66:38:a6:
3f:44:58:d7:f1:23:ec:2d:38:6e:d6:23:5c:5c:44:
58:57:fe:69:ec:8e:11:14:6f:1d:02:a2:91:4d:69:
25:00:77:3d:dc:10:dd:f5:42:c9:9b:b6:58:de:1b:
00:23:87:85:e9:e1:80:3c:77:5f:e1:88:2c:3d:bc:
56:83:72:79:ad:d1:f3:72:e2:48:8f:b1:21:8f:60:
95:6e:d7:a5:99:e8:ee:b1:82:e8:fd:98:73:8d:c6:
5a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:16:8E:01:AF:5C:FF:75:CB:03:68:84:C1:42:C9:D2:6C:8F:D3:9C
X509v3 Authority Key Identifier:
keyid:B9:B0:D3:34:32:EC:A7:7C:05:4E:8F:A8:70:72:48:DA:4E:47:DB:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubDTNDLsp3wFTo-ocHJI2k5H2ws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/CRaOAa9c_3XLA2iEwULJ0myP05w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.94.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:d8:c8:f4:d4:5e:bf:8e:9e:ad:e5:86:08:8b:4e:fe:d0:ed:
db:63:dc:ee:80:55:32:d1:71:23:a3:45:74:b4:27:0d:93:75:
5b:0b:4e:4e:43:b0:a1:c1:7a:11:36:37:5d:2a:e1:6f:b3:92:
1c:93:ad:f9:1b:cd:f5:27:f7:ef:98:2e:83:34:1d:79:02:d7:
5f:e4:bd:51:4b:7b:0d:4c:e5:ac:c6:05:59:67:b7:5a:78:7c:
f7:cb:3d:f2:4c:ea:52:5a:22:96:2a:04:d2:bb:d0:4c:67:4c:
08:3f:27:7c:66:66:3b:0a:04:c6:a9:46:90:e6:2e:75:fd:6a:
06:8e:e1:ae:ca:69:f8:69:d9:de:c3:d4:c8:2c:6a:7f:57:98:
fa:b7:8c:19:8f:b1:0c:3b:c3:1d:20:89:03:f3:b9:c5:7e:6c:
30:39:a7:40:67:8d:5b:1e:c6:8b:08:b7:47:06:e0:28:36:93:
ca:ac:49:c5:6e:8c:fd:f6:98:aa:b3:ae:f0:48:fb:66:14:66:
25:31:15:9c:75:b6:65:b5:10:8f:86:fc:cb:5c:46:96:f6:0e:
24:e6:1d:48:bf:52:95:fb:f8:b1:8d:70:58:6b:c0:ce:a9:bc:
90:53:eb:b7:ec:51:15:49:26:95:35:e6:1f:e8:72:03:2d:21:
b8:14:5c:5c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYlTekyeq2vz+nMqLhuE5pSZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5YjBkMzM0MzJlY2E3N2MwNTRlOGZhODcwNzI0OGRhNGU0
N2RiMGIwHhcNMjMwNzE0MDgxNzUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOTE2OGUwMWFmNWNmZjc1Y2IwMzY4ODRjMTQyYzlkMjZjOGZkMzljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApj5C2p/ivbtWkkvKbjU7+SlVsZUh
4rQb6k9ZrmZox/fxRwnXVRHJ2zmy+xsvA1E/RArS5t2XPa4MQZwZNG9mFGLS3ia0
5K5djbFoNSsaam60shqS9vRbb3yEBmxpxpjVEwk276r23FOX+v7p3Eu5uqV9WblF
+0NW6Xmwt2jVy1QczQyfDIBgbWU6NhWul5P8WF3t1St1X3699Noswly/fpFmOKY/
RFjX8SPsLThu1iNcXERYV/5p7I4RFG8dAqKRTWklAHc93BDd9ULJm7ZY3hsAI4eF
6eGAPHdf4YgsPbxWg3J5rdHzcuJIj7Ehj2CVbtelmejusYLo/ZhzjcZaawIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAkWjgGvXP91ywNohMFCydJsj9OcMB8GA1UdIwQY
MBaAFLmw0zQy7Kd8BU6PqHBySNpOR9sLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWJEVE5ETHNwM3dGVG8tb2NISkkyazVIMndzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9iNDMxY2EtNTI3NS00MmI1LThkNTQt
ZDE5NmY5MjkxNzMyLzEvQ1JhT0FhOWNfM1hMQTJpRXdVTEowbXlQMDV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9iNDMxY2EtNTI3NS00MmI1LThkNTQtZDE5NmY5MjkxNzMy
LzEvdWJEVE5ETHNwM3dGVG8tb2NISkkyazVIMndzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLVVeMA0G
CSqGSIb3DQEBCwUAA4IBAQBf2Mj01F6/jp6t5YYIi07+0O3bY9zugFUy0XEjo0V0
tCcNk3VbC05OQ7ChwXoRNjddKuFvs5Ick635G831J/fvmC6DNB15Atdf5L1RS3sN
TOWsxgVZZ7daeHz3yz3yTOpSWiKWKgTSu9BMZ0wIPyd8ZmY7CgTGqUaQ5i51/WoG
juGuymn4adnew9TILGp/V5j6t4wZj7EMO8MdIIkD87nFfmwwOadAZ41bHsaLCLdH
BuAoNpPKrEnFboz99piqs67wSPtmFGYlMRWcdbZltRCPhvzLXEaW9g4k5h1Iv1KV
+/ixjXBYa8DOqbyQU+u37FEVSSaVNeYf6HIDLSG4FFxc
-----END CERTIFICATE-----
Generated at Mon Jan 1 17:14:56 2024 by rpki-client on console-ams.rpki-client.org