Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/016nR30kqsZt63aQfsJGYGVflBE.roa
File: 016nR30kqsZt63aQfsJGYGVflBE.roa (raw, json)
Hash identifier: IE5KylBauTFulxuB57neozGJKsj2GQ3/oCsIJheoh/U=
Subject key identifier: D3:5E:A7:47:7D:24:AA:C6:6D:EB:76:90:7E:C2:46:60:65:5F:94:11
Certificate issuer: /CN=ca1cc5c7b1217ccbb155dddae826ce6f9fdbacba
Certificate serial: 01856D81CBE78466503E1C1D86410A7A0D89
Authority key identifier: CA:1C:C5:C7:B1:21:7C:CB:B1:55:DD:DA:E8:26:CE:6F:9F:DB:AC:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhzFx7EhfMuxVd3a6CbOb5_brLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/016nR30kqsZt63aQfsJGYGVflBE.roa
Signing time: Sun 01 Jan 2023 13:25:00 +0000
ROA not before: Sun 01 Jan 2023 13:25:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208408
IP address blocks: 45.138.8.0/24 maxlen: 24
45.138.11.0/24 maxlen: 24
45.138.10.0/24 maxlen: 24
45.138.9.0/24 maxlen: 24
2a0e:aa40:2::/48 maxlen: 48
2a0e:aa40:a::/48 maxlen: 48
2a0e:aa40::/48 maxlen: 48
2a0e:aa40:3::/48 maxlen: 48
2a0e:aa40:1::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:cb:e7:84:66:50:3e:1c:1d:86:41:0a:7a:0d:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca1cc5c7b1217ccbb155dddae826ce6f9fdbacba
Validity
Not Before: Jan 1 13:25:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d35ea7477d24aac66deb76907ec24660655f9411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:dd:bc:14:2e:c0:77:76:c2:53:df:8b:00:2c:
9a:4a:b3:3a:c7:87:74:96:b1:9b:b0:d0:82:1b:27:
85:8a:fc:8d:ff:99:4f:ea:d9:a9:4b:a5:1a:51:a5:
de:ac:59:94:b3:11:64:80:44:29:0d:00:74:b7:91:
29:c9:8e:66:06:f6:41:ae:84:77:ab:4b:8b:dd:3f:
4c:e4:0c:a6:51:20:38:28:e3:f5:8e:08:48:84:77:
b4:47:02:09:be:ac:15:63:90:a6:d3:11:93:73:35:
b5:dd:8c:3c:00:58:55:f7:59:f1:2c:22:7d:a9:a1:
7a:70:74:3d:be:92:46:b0:85:ed:71:35:12:c6:ee:
dc:7e:31:3d:93:78:65:d6:39:c1:02:bf:8b:e3:55:
d3:89:64:95:86:7e:e8:a7:9b:ed:f1:b6:07:04:30:
ec:9f:68:87:1f:19:75:d7:7c:cc:03:6a:15:7d:20:
51:40:31:9a:78:42:ae:e6:55:35:2f:c5:92:51:d2:
e5:a1:14:2b:7c:27:64:3b:66:8a:8e:1b:e9:2a:fc:
3b:86:f5:8f:fe:7f:45:88:14:04:26:54:d1:5a:1d:
4d:f2:09:c1:79:27:a9:4a:ac:a4:74:6d:e1:cd:94:
8a:ad:98:67:db:31:0b:aa:33:21:e8:1d:c1:f3:2e:
8d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:5E:A7:47:7D:24:AA:C6:6D:EB:76:90:7E:C2:46:60:65:5F:94:11
X509v3 Authority Key Identifier:
keyid:CA:1C:C5:C7:B1:21:7C:CB:B1:55:DD:DA:E8:26:CE:6F:9F:DB:AC:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhzFx7EhfMuxVd3a6CbOb5_brLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/016nR30kqsZt63aQfsJGYGVflBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.8.0/22
IPv6:
2a0e:aa40::/46
2a0e:aa40:a::/48
Signature Algorithm: sha256WithRSAEncryption
cc:f3:82:56:6c:82:dc:5d:57:47:15:b7:3b:66:10:a6:df:81:
5d:1f:bc:ec:44:76:2f:a5:b9:ad:77:f6:ec:45:03:0b:2c:5a:
29:f8:00:c8:3b:b5:c4:28:6d:4a:09:45:9b:07:3c:48:a4:10:
fb:fe:fd:09:54:6f:aa:82:a4:72:b8:54:4e:69:86:36:9e:94:
f9:53:08:70:a6:50:7f:df:27:37:40:d4:c9:05:ea:a6:ae:69:
32:85:7b:b0:1a:06:e8:20:38:a8:0e:d8:39:a0:60:ae:18:e3:
21:d4:2d:3f:66:f8:ba:54:82:47:a5:ee:f3:4e:5f:10:4e:5a:
65:46:b0:7a:0b:01:33:39:fa:41:46:7a:bf:92:4b:87:93:b0:
ae:4f:ca:52:6e:b6:d8:f7:54:d0:02:23:bc:24:cd:5d:57:7c:
36:af:6f:a4:5d:2c:8f:35:2b:65:39:43:b7:67:bd:c2:5f:6d:
d2:c7:b0:b3:92:a9:79:84:e1:18:27:d3:93:92:36:79:3f:34:
3b:ab:1d:00:3c:c5:b6:40:9d:61:0f:2c:d2:47:55:bd:e4:19:
b2:e4:f5:c2:ec:73:69:05:10:09:cf:0f:8b:e2:a5:0b:f5:67:
50:6c:09:8c:8a:6c:42:cf:f6:ef:a3:af:16:b8:c3:1c:8c:2e:
79:d5:0f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:38:04 2024 by rpki-client on console-fra.rpki-client.org