Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/hPzRa9yhkJ6aDNpKXMdqEzpPVuc.roa
File: hPzRa9yhkJ6aDNpKXMdqEzpPVuc.roa (raw, json)
Hash identifier: 4gzpWCqqB1WHNJ9NG4QdLHZ+tqNc4dga1wNiRxla2bI=
Subject key identifier: 84:FC:D1:6B:DC:A1:90:9E:9A:0C:DA:4A:5C:C7:6A:13:3A:4F:56:E7
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 01856CE6159ACAC462A10A4D191D4314AA2B
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/hPzRa9yhkJ6aDNpKXMdqEzpPVuc.roa
Signing time: Sun 01 Jan 2023 10:34:56 +0000
ROA not before: Sun 01 Jan 2023 10:34:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39120
IP address blocks: 45.133.75.0/24 maxlen: 24
45.131.65.0/24 maxlen: 24
45.80.193.0/24 maxlen: 24
204.11.1.0/24 maxlen: 24
5.253.245.0/24 maxlen: 24
45.137.201.0/24 maxlen: 24
2.56.246.0/24 maxlen: 24
45.84.198.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:15:9a:ca:c4:62:a1:0a:4d:19:1d:43:14:aa:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 1 10:34:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=84fcd16bdca1909e9a0cda4a5cc76a133a4f56e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b2:75:0f:22:bf:aa:af:a1:97:c9:f4:e3:8f:
c3:ee:c1:74:1c:3b:99:0f:e9:05:81:67:b9:63:59:
af:6e:d6:6e:56:9f:3b:67:30:b6:55:af:71:2f:9a:
fa:66:25:0d:4f:b4:73:8f:b3:e3:d3:bb:21:b1:b8:
2e:fe:25:92:c8:7a:19:72:fb:1a:34:04:3b:2c:b1:
93:02:a0:08:2f:fd:8c:f3:c8:0c:c0:f6:d3:00:16:
19:2e:3d:5a:0e:f9:be:17:a7:e2:bc:63:8e:49:33:
6f:ef:b2:22:47:f6:33:8f:b6:89:a4:55:d5:3d:d9:
67:bb:af:a9:5c:3d:1e:fb:68:39:fe:3b:7e:a2:ee:
99:4f:3a:48:a1:59:d6:12:65:cc:0a:f9:d6:37:e7:
f9:e7:0b:a0:1d:10:e1:77:14:eb:2b:21:83:88:c1:
b2:8f:ba:a0:8f:9c:59:ca:c8:54:95:31:7d:3a:6e:
4d:ad:d3:4e:28:a4:cb:1e:fd:42:c1:01:29:3c:58:
c5:53:46:e8:a3:42:a5:ec:67:73:dd:38:cf:23:87:
14:cd:ec:99:9e:5c:63:2d:71:34:a7:fd:0c:72:8d:
25:4f:4b:a1:a9:cf:db:46:dd:24:4f:9c:2d:91:0e:
41:ec:e9:f2:a8:54:4b:3d:1e:1b:e8:68:b5:99:a9:
e4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:FC:D1:6B:DC:A1:90:9E:9A:0C:DA:4A:5C:C7:6A:13:3A:4F:56:E7
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/hPzRa9yhkJ6aDNpKXMdqEzpPVuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.246.0/24
5.253.245.0/24
45.80.193.0/24
45.84.198.0/24
45.131.65.0/24
45.133.75.0/24
45.137.201.0/24
204.11.1.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:39:53:af:19:f6:65:0d:61:89:89:82:bb:e8:3a:a6:25:37:
95:f5:97:49:e4:dd:4c:4c:ce:52:ca:e7:3b:22:44:93:78:b9:
f5:bc:f5:26:b7:a2:03:f9:12:13:c0:3b:4f:d4:45:5e:00:35:
84:f6:6f:35:32:e4:65:40:5d:b3:e1:7e:b0:cf:ed:33:6c:32:
11:82:4f:c4:97:6d:87:03:70:cc:37:37:31:07:22:82:51:64:
70:dc:53:2b:b7:64:d7:8e:33:b9:5d:9f:ef:42:50:c1:e3:93:
f5:c3:a7:cb:a5:29:e6:af:15:09:0b:23:df:1e:12:ac:82:2c:
cc:76:cc:f8:45:01:99:c2:ac:36:6c:bc:8a:4a:1a:bf:e0:09:
cb:5b:1c:f0:ab:be:45:a1:8f:40:0c:be:8d:3e:7b:0f:6d:53:
df:64:90:38:04:52:62:bc:7c:a1:72:69:a6:e0:d4:4e:57:db:
b3:0b:a6:ac:ed:93:39:eb:06:8b:5e:77:67:51:a8:ba:4a:18:
fb:e8:17:1d:da:7f:3c:59:cb:84:5e:fd:ac:d7:d0:1f:f8:35:
60:4d:86:2c:66:b2:30:21:97:5a:7e:32:9d:4d:ed:e4:34:07:
9d:9c:33:90:52:63:98:24:4d:77:ab:90:4c:7f:64:16:e1:09:
68:6a:49:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 7 12:10:54 2023 by rpki-client on console-fra.rpki-client.org