Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/9ZW2EGi6j-9CaPqInMULj_RF1J4.roa
File: 9ZW2EGi6j-9CaPqInMULj_RF1J4.roa (raw, json)
Hash identifier: xSbKV3ooxazq+5ZqB9/qGzqd7brPfxViB/t887/bgh8=
Subject key identifier: F5:95:B6:10:68:BA:8F:EF:42:68:FA:88:9C:C5:0B:8F:F4:45:D4:9E
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 0187ACAEAF34D5F2566E75A9CF5F9E330D47
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/9ZW2EGi6j-9CaPqInMULj_RF1J4.roa
Signing time: Sun 23 Apr 2023 05:55:41 +0000
ROA not before: Sun 23 Apr 2023 05:55:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39521
IP address blocks: 45.132.138.0/24 maxlen: 24
45.132.139.0/24 maxlen: 24
45.132.136.0/24 maxlen: 24
45.132.137.0/24 maxlen: 24
45.148.252.0/23 maxlen: 24
45.132.140.0/24 maxlen: 24
45.132.141.0/24 maxlen: 24
45.132.142.0/24 maxlen: 24
45.132.143.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ac:ae:af:34:d5:f2:56:6e:75:a9:cf:5f:9e:33:0d:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Apr 23 05:55:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f595b61068ba8fef4268fa889cc50b8ff445d49e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:23:37:85:3e:12:87:99:64:93:b5:b0:05:8a:
e4:83:eb:2e:e1:ab:36:a0:e6:f0:64:fa:ee:a6:ca:
f0:e6:4e:82:6a:a1:73:e1:47:aa:0e:d7:12:c6:e1:
b2:45:d5:18:44:73:7c:14:8c:40:1a:6d:9a:9f:0f:
b7:20:82:48:3e:1e:33:43:6e:3b:63:a2:b6:d1:cf:
80:4e:25:14:24:7c:3d:d7:29:46:05:47:44:aa:8e:
ec:53:5a:62:a4:b6:0c:52:92:76:e7:f0:0b:4a:73:
2d:5a:12:93:62:fc:c4:c2:12:e7:5f:8f:c2:47:1c:
96:f6:03:a8:0b:43:57:29:c4:5e:38:96:3c:4e:0b:
1e:47:4a:ec:53:af:34:c1:02:59:9a:0c:8f:87:83:
e5:00:3f:b1:88:a9:82:a6:f2:a2:3b:6a:50:3c:12:
0c:55:1e:8f:a2:49:30:11:6d:a3:54:7d:db:df:6d:
58:10:5d:da:58:ce:96:28:26:2e:60:9c:de:9c:78:
ce:61:c8:e9:6e:d5:df:17:9c:2e:f4:1b:92:01:9b:
8c:bc:81:31:01:73:4c:b3:f3:33:59:9f:be:1a:c1:
73:17:22:aa:ce:74:6d:49:7a:f1:66:80:3a:ea:9d:
8b:4a:1c:b6:f2:50:99:62:93:a8:76:2d:df:4f:46:
a6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:95:B6:10:68:BA:8F:EF:42:68:FA:88:9C:C5:0B:8F:F4:45:D4:9E
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/9ZW2EGi6j-9CaPqInMULj_RF1J4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.136.0/21
45.148.252.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:61:16:d8:a9:84:ee:f4:6e:e9:6d:b8:a9:d0:ea:d8:ec:f4:
90:24:5c:bc:ce:da:f4:64:b0:b0:6d:5a:63:e6:7c:1c:e5:97:
29:5b:38:bf:29:46:b1:65:13:04:93:91:02:43:b0:ad:31:0f:
6c:3f:1c:df:81:6f:28:4e:f7:37:4d:f4:ca:29:0e:0c:2f:70:
c0:8a:12:cd:36:9b:90:5d:1b:28:53:04:14:b6:42:40:2d:a4:
d4:e3:5e:fc:30:9a:5d:f6:a2:75:8d:51:8c:f0:42:3a:db:56:
91:b1:57:61:90:b5:8f:09:04:f9:1e:09:7c:ca:af:01:d0:0e:
82:97:85:fe:a7:a6:62:d6:34:15:d1:4a:6d:7b:31:fb:78:59:
1d:9b:e8:c7:61:c7:23:73:31:cf:b3:22:1d:5c:64:1b:21:b7:
c9:a2:e0:f5:74:99:21:6c:b7:ac:2c:99:32:25:ca:89:9d:7b:
a4:bb:60:67:0f:95:41:9a:aa:af:81:28:5f:8f:0a:a4:17:b2:
52:43:16:79:91:5b:02:33:b1:9e:69:bf:6c:df:aa:50:c4:7c:
0c:64:fd:ef:c4:e4:0b:f2:52:7f:86:9e:7e:58:62:32:f5:d0:
72:e4:55:1b:71:78:b1:53:1b:3d:8d:8b:69:0d:3d:0c:06:62:
6b:d8:ab:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:24 2023 by rpki-client on console-ams.rpki-client.org