Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/iuYSvC9PQ-qhdQSmn57iWeHXMs0.roa
File: iuYSvC9PQ-qhdQSmn57iWeHXMs0.roa (raw, json)
Hash identifier: z1vlLU36z4Zl7Btc9SA5ClRtRL+UsEfP9/Hbx1mitqI=
Subject key identifier: 8A:E6:12:BC:2F:4F:43:EA:A1:75:04:A6:9F:9E:E2:59:E1:D7:32:CD
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 01897B8A9671D76DD5CACEAA115B3CBDFB81
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/iuYSvC9PQ-qhdQSmn57iWeHXMs0.roa
Signing time: Sat 22 Jul 2023 03:00:27 +0000
ROA not before: Sat 22 Jul 2023 03:00:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209854
IP address blocks: 91.206.168.0/24 maxlen: 24
45.149.3.0/24 maxlen: 24
45.95.242.0/24 maxlen: 24
93.185.162.0/24 maxlen: 24
45.130.137.0/24 maxlen: 24
45.139.253.0/24 maxlen: 24
45.139.252.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:7b:8a:96:71:d7:6d:d5:ca:ce:aa:11:5b:3c:bd:fb:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jul 22 03:00:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ae612bc2f4f43eaa17504a69f9ee259e1d732cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e5:92:1c:77:e0:36:79:b2:17:55:3e:8b:60:
6d:1a:f9:fa:36:18:ff:19:cf:5f:97:de:1f:ce:ed:
e5:fd:fd:44:5e:1b:62:e9:d6:91:ff:60:17:a7:38:
23:fe:6b:29:bb:74:1b:84:1a:da:31:4d:a5:0c:37:
9a:15:11:41:83:84:0f:d6:56:2b:79:c7:ab:69:6d:
23:eb:71:66:5d:47:ec:12:6f:b5:2c:5c:1a:f3:c2:
77:8c:91:41:21:2e:69:fa:65:b3:2a:11:5c:2a:1f:
4f:37:6b:c2:b9:8a:0e:c6:b8:e7:f6:8b:d7:9f:c9:
5b:0f:7d:02:a1:95:44:9d:28:a2:f6:b4:0a:61:4f:
fa:93:2e:49:7c:40:d7:a7:96:ea:a4:aa:97:1c:79:
6b:1e:0c:c4:26:8b:89:9a:16:5e:22:28:93:89:6e:
54:fb:2d:13:43:50:56:ac:9e:c8:fb:58:61:91:35:
a8:fb:45:1b:90:d6:28:44:94:17:ef:7e:70:c7:86:
d8:d1:f6:ab:a9:9e:ff:22:04:12:e2:7f:0c:ee:8e:
aa:5f:f3:d2:08:b8:1e:5c:9a:0c:36:ed:e7:4d:ac:
63:8a:43:00:1a:45:1b:d1:0f:11:7e:f0:3b:f3:a3:
ea:3e:b7:ac:0c:89:02:83:69:5c:19:78:a4:7b:47:
f3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E6:12:BC:2F:4F:43:EA:A1:75:04:A6:9F:9E:E2:59:E1:D7:32:CD
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/iuYSvC9PQ-qhdQSmn57iWeHXMs0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.242.0/24
45.130.137.0/24
45.139.252.0/23
45.149.3.0/24
91.206.168.0/24
93.185.162.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:5c:8a:f3:7c:f1:55:f4:0b:3d:a0:04:72:e3:37:15:06:42:
7d:bb:16:75:75:ff:b7:b5:a2:b3:46:95:97:3f:61:88:8c:94:
bb:6e:cd:25:47:20:2b:f9:45:c4:d8:8e:30:08:d8:d9:5f:d8:
1e:04:76:1a:80:18:4e:7e:58:3e:45:46:ee:b7:35:ce:24:04:
7f:49:e1:96:2a:df:1a:66:68:5a:62:02:5e:d5:c7:ce:db:28:
4a:7b:e3:96:a9:28:6a:07:a3:c5:06:c3:0f:60:d6:b6:fb:b4:
03:e6:ee:a6:fa:34:b9:d6:3a:c0:41:9e:66:0a:58:a4:53:5f:
ea:ba:c9:8c:21:bc:6e:9d:33:7b:31:ce:98:21:9e:da:9e:19:
be:4d:61:73:bd:de:27:12:1d:5a:75:9c:7a:24:9b:d3:d0:7a:
1d:76:b1:fb:80:a3:7a:31:dd:7c:3f:41:d0:7f:32:f5:be:59:
8e:d7:67:5f:15:94:9d:b0:d7:29:78:45:80:d8:ae:1d:73:d9:
f1:83:20:aa:34:4a:23:40:32:ef:7e:31:d9:7c:43:2c:e3:90:
e7:38:a3:28:0c:58:83:73:99:63:5b:58:53:4a:05:51:89:0c:
d6:5e:26:76:67:4e:31:39:5d:c3:73:81:f1:2b:7a:c4:c6:43:
6c:54:71:df
-----BEGIN CERTIFICATE-----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Generated at Tue Jul 25 05:26:31 2023 by rpki-client on console-fra.rpki-client.org