Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/gK9Yw8PPDFwaFOLgz0BRjB7MTZg.roa
File: gK9Yw8PPDFwaFOLgz0BRjB7MTZg.roa (raw, json)
Hash identifier: fLP4t3qWqNptsiSgM9JnhT6Ovmp7mcejHxXj6TpSuZU=
Subject key identifier: 80:AF:58:C3:C3:CF:0C:5C:1A:14:E2:E0:CF:40:51:8C:1E:CC:4D:98
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 0188B493C6AD470A14EB307F1CE51BCA40E0
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/gK9Yw8PPDFwaFOLgz0BRjB7MTZg.roa
Signing time: Tue 13 Jun 2023 11:46:03 +0000
ROA not before: Tue 13 Jun 2023 11:46:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.149.74.0/23 maxlen: 24
45.149.75.0/24 maxlen: 24
45.149.72.0/24 maxlen: 24
45.149.74.0/24 maxlen: 24
45.133.89.0/24 maxlen: 24
45.133.90.0/24 maxlen: 24
45.133.91.0/24 maxlen: 24
45.133.88.0/24 maxlen: 24
45.148.254.0/24 maxlen: 24
45.148.255.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b4:93:c6:ad:47:0a:14:eb:30:7f:1c:e5:1b:ca:40:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jun 13 11:46:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=80af58c3c3cf0c5c1a14e2e0cf40518c1ecc4d98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d0:7b:eb:12:5b:70:77:61:73:3e:16:9b:75:
f7:1f:25:be:a2:89:19:84:90:b9:a4:36:12:5f:9c:
3c:b6:3b:57:3e:c3:a1:af:2b:ce:86:8f:d4:a8:01:
7f:b7:f0:0c:b6:da:17:18:99:39:d7:2b:09:5b:9c:
78:c5:01:32:5c:4c:73:02:9b:d2:f0:47:cb:cf:68:
10:d4:a1:cc:d0:f1:51:bb:66:94:ac:bb:62:f7:3d:
34:95:41:1c:64:5d:c7:99:c3:48:05:4f:89:6b:f3:
f3:37:8b:a7:16:b9:9a:fd:74:be:dd:fb:ce:50:03:
a6:d8:be:55:35:74:1e:b4:f7:fa:c3:63:a0:e4:f1:
79:de:cb:ce:96:72:c3:f4:a7:08:76:de:b4:93:3e:
34:2b:d9:09:66:28:51:09:05:8b:16:ad:64:d0:fb:
b8:9c:87:93:f4:07:d9:d3:35:e2:21:44:98:c1:8e:
20:1a:8e:03:95:10:5d:e6:e8:02:8d:13:bb:02:4f:
c2:b6:15:72:27:1d:b4:87:b3:04:2c:18:e2:62:59:
00:b8:19:7b:05:1e:2f:e8:1c:04:12:14:30:7e:4f:
97:80:29:25:90:ab:c6:e9:46:7d:c2:0c:39:d3:4c:
8a:5d:9e:7b:c8:bc:0f:5d:b4:c2:cd:e0:ea:6b:6b:
fb:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:AF:58:C3:C3:CF:0C:5C:1A:14:E2:E0:CF:40:51:8C:1E:CC:4D:98
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/gK9Yw8PPDFwaFOLgz0BRjB7MTZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.88.0/22
45.148.254.0/23
45.149.72.0/24
45.149.74.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:b6:37:eb:61:df:c9:d8:e4:5d:c4:06:d5:9d:72:df:a7:3c:
74:6d:ef:1f:ee:75:9f:da:1a:f4:ac:06:75:06:e9:f7:2e:f0:
16:46:4a:0c:54:eb:8f:89:47:43:3d:80:9c:c2:75:da:dc:30:
de:31:31:a5:cd:53:5a:18:0a:87:cc:1c:43:b9:08:22:30:ee:
71:3f:9d:58:1b:83:e8:27:fe:08:64:ec:e6:fd:0a:e3:56:d2:
d8:59:56:28:0d:d1:54:93:41:e0:e9:92:15:64:fa:bf:49:ee:
a4:b9:8d:5a:68:d5:aa:98:05:57:47:32:e0:07:34:8f:39:b8:
41:66:45:d3:c3:1f:71:57:49:ff:82:48:5c:b6:66:38:c3:39:
0e:7f:5a:e6:00:83:4f:d1:ae:3a:1a:e6:fb:c2:e1:62:90:c6:
0e:02:55:cc:00:29:3c:4e:92:83:a1:3c:1b:e3:ac:7d:e7:24:
57:0b:fd:a5:2d:1d:96:77:49:67:62:bd:b0:e4:dd:f1:c1:c9:
bb:b2:73:3c:af:86:1f:48:bf:18:f4:72:dc:09:c2:7c:cc:1b:
a8:18:c3:22:04:03:66:b1:8a:12:1a:5e:73:2f:4e:df:6d:d0:
f4:71:de:33:8f:81:03:f9:5b:b3:3a:04:30:88:d7:ff:7b:90:
74:e6:5e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:25 2023 by rpki-client on console-ams.rpki-client.org