Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/Py6d4mduCwg5CJ8CnPiufEDiKZw.roa
File: Py6d4mduCwg5CJ8CnPiufEDiKZw.roa (raw, json)
Hash identifier: CHyyMLaKWaGgLh7lhmznF0nL8hXWHnCyEEVlOLLXoj8=
Subject key identifier: 3F:2E:9D:E2:67:6E:0B:08:39:08:9F:02:9C:F8:AE:7C:40:E2:29:9C
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 01856CE60AEE7404D2A395E73BAF06CB4BF9
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/Py6d4mduCwg5CJ8CnPiufEDiKZw.roa
Signing time: Sun 01 Jan 2023 10:34:53 +0000
ROA not before: Sun 01 Jan 2023 10:34:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 45.86.153.0/24 maxlen: 24
45.13.226.0/24 maxlen: 24
204.11.0.0/24 maxlen: 24
45.147.7.0/24 maxlen: 24
45.84.197.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:0a:ee:74:04:d2:a3:95:e7:3b:af:06:cb:4b:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 1 10:34:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f2e9de2676e0b0839089f029cf8ae7c40e2299c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9e:8c:e6:15:ff:5e:dc:20:11:08:b5:cf:a8:
8c:0a:5c:92:da:e5:b1:69:40:da:37:b5:76:f3:94:
95:87:a4:53:b7:6b:26:0d:e4:ea:f0:9a:82:7e:a1:
8f:fa:69:ec:fb:ec:f6:5e:07:e0:a7:bc:0b:ea:94:
88:33:d8:9b:ae:07:a8:3a:2b:5c:30:8d:bb:fd:8a:
3e:d0:55:c5:7b:41:6c:85:ea:46:ee:ad:6e:9c:b2:
e1:dc:d9:a4:fd:45:e8:94:6a:05:ff:3b:29:b3:ee:
30:0f:ad:27:e3:a8:cb:cb:28:c5:5b:56:54:af:d0:
88:26:92:79:a7:4d:0c:03:61:1e:81:2a:82:b7:fb:
aa:32:68:14:df:30:81:d8:9a:f5:40:03:b0:4f:02:
82:f0:db:0c:2e:20:8b:2f:bb:7a:29:39:ca:91:31:
26:09:15:28:41:32:95:70:31:8f:3c:ad:f5:40:ea:
04:1c:a0:f5:c1:53:29:2c:4b:24:14:23:bd:5c:31:
d2:e5:28:fb:ee:c5:16:42:4c:b8:a1:b6:e9:59:b1:
67:f7:e1:50:ae:10:34:25:8a:25:f9:57:86:a1:c9:
c6:2e:82:74:93:cb:32:24:13:0d:6e:a2:2f:c8:13:
9b:5e:ce:58:d0:2b:7c:a5:b0:d8:ab:d9:b7:ab:39:
10:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:2E:9D:E2:67:6E:0B:08:39:08:9F:02:9C:F8:AE:7C:40:E2:29:9C
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/Py6d4mduCwg5CJ8CnPiufEDiKZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.226.0/24
45.84.197.0/24
45.86.153.0/24
45.147.7.0/24
204.11.0.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:20:46:81:7c:ba:98:39:5b:68:e9:f2:0c:ae:e7:9a:5a:fa:
ff:62:79:b0:e8:05:e8:7b:f0:cd:b0:33:8e:94:39:0f:83:e4:
cf:41:df:6a:c1:1e:2d:7b:fe:ba:ad:a5:d9:1f:13:9f:d5:7c:
4f:7a:df:65:7d:d9:0e:2f:ab:9c:a4:85:05:13:99:98:ba:30:
74:d7:c8:6a:60:8d:fd:76:a9:e7:32:10:41:ef:86:2d:b7:b7:
d3:b0:c5:48:c4:c8:dd:8f:77:85:fe:56:95:a2:f3:86:1a:e6:
f4:fb:73:c4:3f:c2:ff:55:39:19:01:8b:15:ff:66:45:16:bc:
bf:4a:35:7e:c4:f3:fa:bb:86:8f:ba:49:de:04:ea:54:52:d7:
b4:60:1d:65:3d:46:52:a2:99:9b:85:73:5d:70:c1:28:14:5d:
51:b0:22:6e:86:51:f3:b5:08:d5:16:fc:0b:3a:ac:59:ca:94:
45:a9:82:b6:83:9a:e1:15:35:24:67:3c:85:77:9b:36:18:5a:
37:06:eb:3c:77:82:38:67:62:ef:7d:53:de:b8:a5:3e:8f:08:
76:75:de:35:e2:ff:33:8f:0d:04:a4:2d:a2:76:25:eb:53:4a:
6b:18:e2:cb:78:49:f3:62:ca:13:06:ae:52:dd:e6:41:52:7a:
ab:ea:b3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:30 2023 by rpki-client on console-fra.rpki-client.org