Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/R7IerUVU52MzjqRibC2A88MAPKg.roa
File: R7IerUVU52MzjqRibC2A88MAPKg.roa (raw, json)
Hash identifier: BeKWPxRXqUNSlLYbA6FG/CRIaYFfquMLptcNKQQB+wM=
Subject key identifier: 47:B2:1E:AD:45:54:E7:63:33:8E:A4:62:6C:2D:80:F3:C3:00:3C:A8
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 01898B69B1A273D01BBCCC5FE0A0CF695C9D
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/R7IerUVU52MzjqRibC2A88MAPKg.roa
Signing time: Tue 25 Jul 2023 04:58:27 +0000
ROA not before: Tue 25 Jul 2023 04:58:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199524
IP address blocks: 45.130.137.0/24 maxlen: 24
45.130.139.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:8b:69:b1:a2:73:d0:1b:bc:cc:5f:e0:a0:cf:69:5c:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jul 25 04:58:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47b21ead4554e763338ea4626c2d80f3c3003ca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:10:38:fd:c2:e5:29:cc:cc:2a:8b:8e:dc:45:
7c:86:ea:6e:eb:ed:7d:64:5d:83:90:44:01:01:43:
1f:83:46:0b:bf:1e:e0:ac:0a:29:0e:40:e4:c7:e6:
72:99:7a:96:c6:e9:da:84:b7:fc:69:42:27:7a:3c:
ae:c3:0f:b2:6a:92:2a:aa:2c:c2:3b:de:f0:a1:ff:
cf:0e:55:f4:38:b8:1d:75:1a:ce:b3:99:09:c2:eb:
5e:0f:a6:72:cd:75:b8:ff:b2:a9:17:b1:dc:8c:89:
ed:8f:19:17:46:fc:73:24:eb:97:b7:c1:50:89:5c:
8e:8f:a1:00:af:c8:44:34:08:81:a3:66:3c:25:5e:
c6:95:b8:3f:ab:21:35:34:31:a0:c4:ee:db:b8:fc:
fa:2b:ab:82:73:f9:0b:2e:5a:ee:5e:78:0d:b9:9b:
a1:c6:59:8d:9d:d5:35:2a:b8:b6:e5:b2:57:6e:0e:
15:b8:9b:98:59:8b:4b:60:c4:7c:eb:9e:ce:79:a4:
0d:d5:d4:a0:cd:ea:c8:ad:e1:e1:64:66:53:1a:88:
f1:22:b3:5f:dd:d8:fd:08:9c:57:1e:34:2f:31:54:
85:ef:17:9d:d5:82:3a:b9:bf:08:df:c1:e3:f8:fa:
8d:8e:31:0c:45:79:0a:d9:d8:e4:d8:cf:4e:6b:b3:
ab:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B2:1E:AD:45:54:E7:63:33:8E:A4:62:6C:2D:80:F3:C3:00:3C:A8
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/R7IerUVU52MzjqRibC2A88MAPKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.137.0/24
45.130.139.0/24
Signature Algorithm: sha256WithRSAEncryption
98:bc:56:62:1b:58:26:cd:20:f4:4e:36:bf:6f:76:7d:f2:ff:
11:59:43:9f:5f:91:a1:1e:fd:b3:01:3f:10:fa:dd:a9:2c:67:
95:20:e4:b9:2b:82:e9:9e:0e:c1:87:ad:83:7c:20:a3:f8:c8:
c9:dd:a3:61:15:92:16:c7:52:35:c4:f3:4b:d8:c2:d7:03:64:
ed:4b:b2:18:0c:8e:dc:49:77:b7:3b:dd:47:ee:ae:ac:71:4c:
97:21:af:03:fe:e1:2e:fb:67:30:aa:07:85:c9:3d:c1:53:7d:
ec:90:4f:60:cb:5a:db:19:f0:76:19:d2:3c:f9:b5:b3:4b:05:
31:55:89:cb:3b:7a:31:4b:42:e9:d3:75:6d:c4:ac:e6:03:d2:
67:67:f1:11:a2:3c:9f:a6:ab:66:57:01:bc:2f:cf:17:51:10:
07:d7:f7:c2:d2:85:ec:45:ac:8c:42:ba:ed:cf:bc:10:43:65:
3a:65:c6:db:45:d0:7c:17:45:b4:f8:00:73:3e:e8:a6:e8:71:
f3:61:2c:47:3b:a4:50:13:a6:a9:78:f4:c5:f7:29:d4:45:22:
d3:a9:6b:86:b4:62:c2:f8:95:b9:92:f7:01:05:ea:93:4c:47:
ee:ee:c3:a0:23:c4:f9:e6:7f:b3:f5:b1:63:a1:7f:ba:58:95:
f0:5a:2d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:51:57 2024 by rpki-client on console-fra.rpki-client.org