Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/jUlILvZEE-PQimtXCwhARYsR8Zg.roa
File: jUlILvZEE-PQimtXCwhARYsR8Zg.roa (raw, json)
Hash identifier: IWC2Dj9IYmvaL6uLBepljh3Zvi3jk8529hiGbYx8pgM=
Subject key identifier: 8D:49:48:2E:F6:44:13:E3:D0:8A:6B:57:0B:08:40:45:8B:11:F1:98
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 018B46B2D43F7810BB6047B54E03646430C7
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/jUlILvZEE-PQimtXCwhARYsR8Zg.roa
Signing time: Thu 19 Oct 2023 06:50:06 +0000
ROA not before: Thu 19 Oct 2023 06:50:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210636
IP address blocks: 45.139.254.0/23 maxlen: 24
45.94.30.0/24 maxlen: 24
45.94.28.0/24 maxlen: 24
45.94.29.0/24 maxlen: 24
45.148.26.0/24 maxlen: 24
45.88.246.0/24 maxlen: 24
45.132.192.0/24 maxlen: 24
45.88.247.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:46:b2:d4:3f:78:10:bb:60:47:b5:4e:03:64:64:30:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Oct 19 06:50:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d49482ef64413e3d08a6b570b0840458b11f198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2b:e3:d5:d2:ac:7b:64:09:18:24:59:12:fb:
66:a1:96:33:30:44:72:24:0b:52:36:4e:1d:49:a9:
4d:b9:88:cd:36:92:7b:44:69:2d:a8:b3:45:f3:b1:
e9:7b:1f:ba:68:52:33:81:f7:87:81:37:84:4e:ac:
48:e2:52:ab:ea:5f:a9:fd:03:f8:24:a0:b6:5a:60:
e6:1b:a6:02:73:7d:6a:f7:2b:73:ce:96:9f:85:4e:
56:40:a7:7c:eb:ef:35:89:b0:dc:e3:9d:36:4e:6c:
89:ee:cf:5e:a0:d1:83:d9:0e:50:b6:94:27:65:de:
32:76:e8:7b:d3:3e:4e:0d:3e:14:50:40:1e:8d:7d:
77:c7:50:8b:1e:fd:54:f0:f3:70:2a:2f:37:43:fb:
52:b6:ae:15:78:df:ed:21:3b:de:96:14:72:74:2b:
91:64:e3:0d:d1:59:a0:7e:80:e6:83:0e:ad:59:86:
1b:31:3d:fd:cb:a1:e2:c1:ff:27:9a:a1:82:ed:d6:
bb:c0:4c:57:fe:98:6e:8e:e3:fd:bc:ae:2c:7a:51:
70:4e:81:40:2d:5b:8f:4a:30:e7:ed:7f:df:17:ee:
8f:4e:09:f5:a2:63:7b:25:4a:c1:bd:f6:65:c5:58:
eb:a1:77:83:66:8a:3a:b8:54:0a:d3:0f:9a:24:1c:
f1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:49:48:2E:F6:44:13:E3:D0:8A:6B:57:0B:08:40:45:8B:11:F1:98
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/jUlILvZEE-PQimtXCwhARYsR8Zg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.246.0/23
45.94.28.0-45.94.30.255
45.132.192.0/24
45.139.254.0/23
45.148.26.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:25:1f:dc:06:a3:89:90:b8:32:64:d3:0b:ef:33:42:6c:f8:
15:08:31:85:c7:05:68:55:f5:fd:75:f7:7a:6a:66:f3:72:4b:
b7:d4:4d:9d:58:ae:1f:2c:90:6c:1f:ca:5f:9c:7d:7f:4d:0a:
22:00:6a:5c:0c:1e:f3:13:21:d1:fb:0f:0a:0f:1b:1c:31:11:
35:6d:dc:c5:56:83:1b:6f:a8:2a:97:c3:53:c9:e1:e4:f6:5f:
46:fe:c1:64:d3:52:db:c1:9c:d2:33:e7:fb:47:4a:68:f0:42:
a6:f2:42:ca:44:c1:8e:37:aa:a6:1b:fc:05:0f:83:7b:ec:6a:
32:5d:78:57:49:71:09:91:29:8c:cb:9b:b1:e6:a6:8c:f9:74:
f7:1b:f4:f7:9b:26:9d:47:87:ed:bc:18:4a:d6:17:3c:46:c5:
6f:15:83:17:95:a7:74:28:c1:1b:d8:b7:4b:b3:42:09:cc:be:
2b:d2:86:3e:21:f3:99:9e:03:58:1b:e1:46:dc:3c:13:d3:f6:
5d:c7:1c:46:9f:44:61:e6:b4:2f:a0:dd:12:ee:b6:fe:e0:1e:
42:6e:d2:b0:ef:fd:43:d7:4e:54:ff:3a:f7:92:66:af:fc:ca:
34:e5:3c:bf:fe:a4:8a:53:2b:b6:dc:94:cc:c5:fc:b1:07:72:
0f:f8:7c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 21 06:01:10 2023 by rpki-client on console-fra.rpki-client.org