Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/_y3G-IMKrrLoQ81hzEfsu935Bn8.roa
File: _y3G-IMKrrLoQ81hzEfsu935Bn8.roa (raw, json)
Hash identifier: cDsAazmHejrN2ijjWRqm9zRjJbHFH4UQsCa1d3OHPcs=
Subject key identifier: FF:2D:C6:F8:83:0A:AE:B2:E8:43:CD:61:CC:47:EC:BB:DD:F9:06:7F
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 0186A31A8439419245A8946A6AA171830553
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/_y3G-IMKrrLoQ81hzEfsu935Bn8.roa
Signing time: Thu 02 Mar 2023 16:14:29 +0000
ROA not before: Thu 02 Mar 2023 16:14:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49981
IP address blocks: 45.139.163.0/24 maxlen: 24
45.137.196.0/24 maxlen: 24
2a07:e344::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a3:1a:84:39:41:92:45:a8:94:6a:6a:a1:71:83:05:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Mar 2 16:14:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff2dc6f8830aaeb2e843cd61cc47ecbbddf9067f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3d:50:b8:dc:e1:40:3c:60:73:5d:4c:1a:03:
cf:e8:29:0f:fb:ab:d4:04:a2:33:44:07:a7:e7:a6:
f8:c2:6b:b9:55:ca:08:db:07:dc:37:62:34:ea:3b:
01:0e:ad:b0:27:4d:06:b3:38:ae:cc:f4:fc:48:30:
f2:4b:c0:de:5c:09:73:8c:2d:0b:b9:11:ee:3e:74:
66:3b:91:1c:d5:66:cb:ea:1c:42:4a:0e:64:e8:cc:
7e:50:e4:04:bb:79:5a:b6:66:ac:cc:f7:99:c9:a9:
6e:da:8a:27:28:56:e4:a0:38:e9:da:d3:e0:7b:08:
ac:17:9d:2f:a7:90:88:df:b5:4e:f3:01:b5:02:06:
51:6b:d9:cf:f5:1c:81:92:59:2f:3d:71:d3:d3:81:
42:9c:58:26:7a:d6:58:08:f1:d4:d5:eb:4b:ff:a3:
65:47:3f:13:26:57:1f:80:1b:d4:9c:f1:88:d0:96:
c0:df:cd:fc:c6:0b:9f:ca:30:83:39:4b:50:59:02:
3c:a1:9f:fd:6d:c1:a6:c3:07:8d:c4:20:df:37:dd:
43:88:ec:7c:8a:42:3e:78:c2:d8:a7:63:0e:e8:5c:
53:a6:37:f5:fe:2b:9a:19:3e:90:80:f3:f3:59:7d:
4c:5b:44:bf:55:6a:b7:83:4d:5d:09:a6:8a:9b:f9:
dd:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:2D:C6:F8:83:0A:AE:B2:E8:43:CD:61:CC:47:EC:BB:DD:F9:06:7F
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/_y3G-IMKrrLoQ81hzEfsu935Bn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.196.0/24
45.139.163.0/24
IPv6:
2a07:e344::/32
Signature Algorithm: sha256WithRSAEncryption
81:64:9d:a0:a7:57:8f:24:38:5c:04:f2:c6:1d:f2:34:8b:bc:
6b:52:4e:ad:c6:71:33:a0:24:b0:7d:b9:2c:10:8c:80:08:c2:
53:49:96:fa:0c:03:2a:97:75:82:41:8d:61:4d:9c:14:34:c1:
c6:6c:00:90:e0:d7:f0:b4:57:e6:cd:29:cb:9b:d2:f9:2f:e3:
74:31:d0:a4:bf:96:81:b5:54:97:46:54:ed:70:1e:53:f5:82:
f9:00:b7:68:87:74:a0:d3:7f:35:bd:ab:3c:5e:45:93:5e:3b:
8b:e8:f7:cd:81:b0:9d:c7:9a:2d:a0:1b:f5:aa:31:1e:16:ab:
cb:61:70:cb:a3:d6:b8:76:9f:e6:8f:2f:36:ab:9d:80:a9:fe:
80:62:4d:f3:38:e9:29:3d:22:35:8c:27:d2:20:ef:58:25:59:
33:59:40:aa:8d:17:f0:71:4d:0f:4b:27:2c:c9:0b:c6:6d:27:
fb:ba:ba:fd:5a:f1:e5:08:a6:34:cc:30:c4:8c:a8:99:8a:b3:
c3:c9:14:71:94:e5:35:6f:57:13:97:1b:59:72:22:c6:11:0a:
5b:14:47:f8:07:e5:49:e1:fd:65:1d:31:46:b4:88:74:49:ec:
01:11:db:15:e1:38:f2:68:33:74:5e:9f:65:dd:38:8c:0e:72:
e5:6e:39:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 3 06:21:11 2023 by rpki-client on console-ams.rpki-client.org