Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/I3JaDZ0Qr3Mv4bdtHMfwCCXEsNY.roa
File: I3JaDZ0Qr3Mv4bdtHMfwCCXEsNY.roa (raw, json)
Hash identifier: xSmTrO0iK+PSM39bAxUFErZ7iSZ2vXkDRS7vCHjaINY=
Subject key identifier: 23:72:5A:0D:9D:10:AF:73:2F:E1:B7:6D:1C:C7:F0:08:25:C4:B0:D6
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 01856F798E674C2BE71F5D6095045E36B1FC
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/I3JaDZ0Qr3Mv4bdtHMfwCCXEsNY.roa
Signing time: Sun 01 Jan 2023 22:35:15 +0000
ROA not before: Sun 01 Jan 2023 22:35:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200023
IP address blocks: 45.139.164.0/22 maxlen: 24
45.139.160.0/23 maxlen: 24
45.139.172.0/22 maxlen: 24
45.92.248.0/22 maxlen: 24
45.83.206.0/24 maxlen: 24
45.95.176.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:8e:67:4c:2b:e7:1f:5d:60:95:04:5e:36:b1:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 1 22:35:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=23725a0d9d10af732fe1b76d1cc7f00825c4b0d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0a:a3:3e:2f:d3:b6:eb:a9:aa:71:5a:82:42:
1b:6d:eb:02:69:91:6d:17:56:a3:a2:cb:30:db:df:
ab:ef:ba:0c:d7:59:4b:da:dd:4d:35:4d:7e:18:1a:
d6:19:a2:bc:f5:ef:b7:ed:4d:4a:6a:19:59:b9:35:
9f:2d:d1:32:1e:a6:a6:8a:1e:d8:bb:e8:51:e9:7f:
ee:cf:74:79:72:2e:f0:e2:a5:85:be:70:6b:36:2d:
b9:0d:e3:83:f6:25:29:ec:0d:72:a0:3f:59:ed:cc:
0f:68:42:2f:fa:c9:35:4a:3d:34:f6:6c:c3:68:b2:
b6:c3:44:65:d7:d3:84:42:ed:74:c2:b7:42:bb:be:
11:b1:29:f3:3d:67:80:2b:f9:b5:bb:66:cc:c0:1d:
76:73:dc:e5:16:d1:15:4a:b8:68:ca:73:12:f5:fe:
41:2e:34:86:9c:60:df:3e:c6:d8:e5:4f:99:e8:0c:
bd:3a:39:69:c5:c4:4d:05:f1:e1:28:9b:14:cf:02:
a6:f9:47:a0:b6:b1:89:56:de:83:31:98:91:78:e1:
a9:02:38:e6:54:f5:1b:21:23:0c:e4:37:a3:f1:ac:
55:94:c4:d7:74:4f:ab:c8:c8:c9:9f:1f:4a:05:67:
74:09:a2:c1:7f:43:83:e8:52:c0:73:fd:fc:a7:5c:
07:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:72:5A:0D:9D:10:AF:73:2F:E1:B7:6D:1C:C7:F0:08:25:C4:B0:D6
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/I3JaDZ0Qr3Mv4bdtHMfwCCXEsNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.206.0/24
45.92.248.0/22
45.95.176.0/22
45.139.160.0/23
45.139.164.0/22
45.139.172.0/22
Signature Algorithm: sha256WithRSAEncryption
10:61:93:ae:10:a3:0e:2c:41:ae:cd:f6:bd:06:6c:c8:62:6b:
0e:ad:f5:c1:23:d6:2e:fe:cc:b8:8e:7a:24:18:a2:31:d1:b1:
ad:76:23:3f:47:8b:cf:9b:f9:1a:cc:73:1f:9f:b7:ee:7f:fc:
c9:4c:bb:de:4e:af:a6:6e:80:bf:d3:71:f6:4e:49:4f:41:dc:
e4:3a:f3:25:a4:93:55:8e:81:14:7f:52:4e:1f:df:cd:77:d9:
1a:d6:92:e6:14:95:5f:87:cd:34:70:f5:bc:84:06:b9:7d:0c:
15:31:d9:37:1c:e1:09:80:80:81:fd:49:8a:52:0b:b0:3e:6e:
2c:26:7c:68:27:97:f4:ce:b7:3c:01:bd:44:c3:e3:3d:8a:52:
f8:3f:cd:82:ba:7f:9a:e9:af:f8:4d:b0:c4:08:79:a1:b4:23:
7d:01:b4:57:b0:d5:c9:cf:8f:3b:f4:96:9d:02:ec:f7:ba:08:
00:ec:43:48:93:e4:c7:5e:99:02:85:0f:79:d4:d5:de:22:44:
04:af:5d:1a:62:7e:5a:74:e4:8d:2c:b1:d7:8f:54:91:48:f5:
93:b1:13:8f:c1:79:4f:b4:07:b6:60:ea:cb:80:58:55:12:83:
a6:6a:8f:16:f4:87:cd:37:67:40:b2:a0:96:a3:00:f0:2c:dd:
e6:67:6d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:51:57 2024 by rpki-client on console-fra.rpki-client.org