Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/PTUdoM7uxwLeLbWhvYO-Gn859vE.roa
File: PTUdoM7uxwLeLbWhvYO-Gn859vE.roa (raw, json)
Hash identifier: pMmjEznfAf5ANSmaAC7oELYEGpx10ZjhPkH7lAMxSoE=
Subject key identifier: 3D:35:1D:A0:CE:EE:C7:02:DE:2D:B5:A1:BD:83:BE:1A:7F:39:F6:F1
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 0189817132812863D3FC822AA1BB2E3362ED
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/PTUdoM7uxwLeLbWhvYO-Gn859vE.roa
Signing time: Sun 23 Jul 2023 06:30:26 +0000
ROA not before: Sun 23 Jul 2023 06:30:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 193.176.210.0/24 maxlen: 24
45.85.124.0/22 maxlen: 24
45.130.136.0/24 maxlen: 24
194.5.49.0/24 maxlen: 24
45.91.20.0/24 maxlen: 24
45.91.22.0/24 maxlen: 24
45.132.193.0/24 maxlen: 24
2a07:e341::/32 maxlen: 32
2a07:e340::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:81:71:32:81:28:63:d3:fc:82:2a:a1:bb:2e:33:62:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jul 23 06:30:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d351da0ceeec702de2db5a1bd83be1a7f39f6f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e6:0f:b4:ab:b5:44:18:48:66:e5:2e:30:67:
61:87:93:ef:8e:8c:50:68:1f:16:b0:2a:68:df:c7:
b7:4b:b4:c9:49:6a:f9:cd:0c:7f:86:be:90:99:99:
f4:05:07:f6:e0:73:35:d7:ce:ab:2f:e8:26:8a:98:
8f:06:74:27:b4:57:11:5a:95:e7:fc:38:2a:42:36:
d2:8e:d5:b0:b2:94:b4:43:74:4a:4a:77:1a:72:f5:
f2:cc:51:1b:db:87:bb:d4:a8:6c:c3:ba:9d:ce:ca:
0b:de:4b:d7:07:03:a0:e0:60:2b:e4:09:63:c2:d4:
41:7a:75:d2:c3:48:9f:7f:98:53:68:55:b8:bc:9d:
a9:39:0a:ef:70:b3:8a:64:3f:69:1c:52:ec:f1:b5:
7b:7c:b6:e4:5e:ff:2f:cf:e9:a0:13:d9:f0:52:b8:
79:83:04:43:f8:99:71:a6:e9:c3:b9:30:bb:69:53:
4c:a3:84:92:57:71:0e:b4:27:0b:0b:8e:b4:82:84:
04:c1:a9:1f:29:6f:ed:9c:23:c8:97:bf:09:8d:79:
f4:4b:40:26:43:56:e2:b8:80:c6:1f:de:4c:1d:9a:
bb:38:52:98:80:c3:50:9f:54:25:20:17:4d:8c:18:
ea:62:a6:2e:32:fd:69:7b:d2:18:de:2c:74:11:e0:
81:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:35:1D:A0:CE:EE:C7:02:DE:2D:B5:A1:BD:83:BE:1A:7F:39:F6:F1
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/PTUdoM7uxwLeLbWhvYO-Gn859vE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.124.0/22
45.91.20.0/24
45.91.22.0/24
45.130.136.0/24
45.132.193.0/24
193.176.210.0/24
194.5.49.0/24
IPv6:
2a07:e340::/31
Signature Algorithm: sha256WithRSAEncryption
7e:1c:77:39:af:3f:e2:fe:e8:23:6b:32:18:da:a2:34:56:f6:
73:9f:8b:b8:13:74:6c:3c:db:95:38:4a:78:af:b6:76:2f:48:
78:9d:74:57:70:f9:b9:dc:d3:43:90:9e:47:70:3c:54:91:16:
95:21:91:20:d3:c9:ca:2f:73:92:83:32:15:3e:56:76:27:58:
ab:a8:31:69:aa:8f:1f:28:8f:4b:74:bc:74:2d:63:66:57:b0:
54:57:06:17:d6:8a:9d:05:2b:68:06:20:6d:28:e8:5a:72:78:
d5:f1:7d:61:4c:ff:89:75:ec:f7:c8:b7:5e:1a:73:c0:9b:60:
09:4f:02:40:46:d5:a3:36:6b:a7:70:b4:de:2e:bc:86:fd:64:
32:76:9f:b4:1a:d3:c3:90:ca:37:14:82:4f:da:34:ab:6e:09:
52:30:9a:5c:69:a6:e6:80:e9:3f:b1:50:37:47:36:ae:22:aa:
57:7f:27:31:f8:73:f2:ed:ff:1b:48:92:6b:11:d3:fc:47:28:
b2:9e:ea:56:24:11:cb:47:32:03:94:31:57:64:ff:7d:66:37:
6a:78:0e:1d:eb:fe:f7:45:2e:0d:b8:2d:05:12:b0:55:a5:f4:
20:1e:7d:e0:0b:76:f4:e4:17:2d:8e:cd:0e:81:c5:f4:d2:88:
a2:06:a7:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 3 10:01:56 2023 by rpki-client on console-ams.rpki-client.org