Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/E0XMDrCxGuqMLxVnmY_CIjTSyMA.roa
File: E0XMDrCxGuqMLxVnmY_CIjTSyMA.roa (raw, json)
Hash identifier: pCqB+fMI5+CNGHhhllRjTC1gSGkPTzkHZecCCChIF2M=
Subject key identifier: 13:45:CC:0E:B0:B1:1A:EA:8C:2F:15:67:99:8F:C2:22:34:D2:C8:C0
Certificate issuer: /CN=8e6bd3d545eeb0be40f283899d218cf4868e9490
Certificate serial: 01856D2F4842488EE5BCCAA0EE6CAC6FA0CE
Authority key identifier: 8E:6B:D3:D5:45:EE:B0:BE:40:F2:83:89:9D:21:8C:F4:86:8E:94:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/E0XMDrCxGuqMLxVnmY_CIjTSyMA.roa
Signing time: Sun 01 Jan 2023 11:54:52 +0000
ROA not before: Sun 01 Jan 2023 11:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49103
IP address blocks: 45.15.248.0/22 maxlen: 24
45.86.196.0/24 maxlen: 24
45.86.196.0/22 maxlen: 24
45.86.199.0/24 maxlen: 24
45.132.168.0/22 maxlen: 24
45.86.198.0/24 maxlen: 24
45.86.197.0/24 maxlen: 24
45.156.196.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:2f:48:42:48:8e:e5:bc:ca:a0:ee:6c:ac:6f:a0:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e6bd3d545eeb0be40f283899d218cf4868e9490
Validity
Not Before: Jan 1 11:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1345cc0eb0b11aea8c2f1567998fc22234d2c8c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:be:5f:71:ef:6a:b5:7a:bd:0c:37:db:2b:d5:
fb:b2:32:70:a9:bc:3b:ca:29:2d:61:ad:c4:a9:1a:
a4:a8:c9:dd:46:d7:42:58:49:5a:9a:aa:ad:2b:a4:
88:67:fb:a0:49:4e:30:d6:73:15:cf:e2:ce:6f:18:
54:f0:4b:4d:a6:0e:52:3e:6e:98:ef:6a:21:60:4f:
c2:1e:fe:db:c1:11:46:b0:83:18:69:2c:f0:92:d9:
3f:04:8b:f3:05:12:88:e1:a9:a9:db:8f:a0:07:27:
ca:e5:bb:7b:48:bb:94:61:7a:84:16:bc:dc:07:0a:
e5:10:16:4b:b3:12:e4:51:0c:4b:ba:00:95:a7:95:
f0:b9:4d:09:dd:c2:9a:f0:58:34:7e:6c:db:c0:bc:
56:ea:a2:3d:09:bd:76:5f:04:ac:98:8c:ad:8b:78:
3c:a6:bb:6b:de:9a:5b:f4:7b:23:43:1e:f3:5e:21:
b9:67:84:d7:05:36:7d:28:f6:d6:15:90:fa:09:0b:
31:ef:28:0e:90:49:5f:4e:ca:7f:37:21:89:1b:f1:
98:f8:1c:a9:f9:66:c3:9c:cd:6d:59:02:84:0a:97:
1b:49:85:8f:28:47:8c:ad:5f:75:c0:a9:e8:de:15:
ff:ac:67:91:b9:24:c7:4f:20:b7:68:30:30:46:3a:
08:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:45:CC:0E:B0:B1:1A:EA:8C:2F:15:67:99:8F:C2:22:34:D2:C8:C0
X509v3 Authority Key Identifier:
keyid:8E:6B:D3:D5:45:EE:B0:BE:40:F2:83:89:9D:21:8C:F4:86:8E:94:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/E0XMDrCxGuqMLxVnmY_CIjTSyMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.248.0/22
45.86.196.0/22
45.132.168.0/22
45.156.196.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:d7:cc:89:be:78:f2:70:e1:fa:c2:da:e2:74:42:22:c0:89:
ba:47:9a:06:ee:b5:20:f1:19:39:47:45:44:27:4f:3f:ed:65:
7c:8a:4b:b6:83:fb:23:6b:0c:67:3d:b4:37:96:99:3b:de:b3:
81:91:88:31:c0:c7:9c:f0:c6:69:85:b2:39:1b:94:17:0b:2c:
4c:05:97:ba:a3:8f:aa:84:db:f5:56:b2:f2:de:21:85:1b:68:
0c:d5:17:d0:8b:0b:cd:9d:06:ab:ae:ed:f1:8e:36:76:a5:be:
17:3b:01:1f:fd:29:a9:b3:54:4e:72:bd:15:60:ee:fd:43:0b:
dc:7d:0b:84:5f:b9:b7:bf:9e:f1:bf:26:78:fa:71:80:a4:c4:
09:bb:45:ac:60:95:61:07:cd:84:3c:6c:6f:03:d2:c1:e3:47:
77:27:e0:f8:0f:27:5d:9c:24:46:d1:a0:67:a6:84:20:6b:35:
ab:e8:83:53:6d:da:19:36:37:ec:af:5f:7f:f4:36:35:03:a5:
29:e5:8e:2d:0e:32:d4:ba:69:ff:ed:c7:74:31:3c:ee:50:99:
b4:f5:ae:8d:e3:94:b7:7b:83:a8:c4:a3:fc:7d:df:40:67:6b:
7c:d2:63:2d:14:cc:0b:8f:51:9a:11:08:fe:0e:91:11:bf:21:
4e:26:68:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 26 13:07:11 2023 by rpki-client on console-fra.rpki-client.org