Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/o0OiBgjtcX_XuKrBED0k9TIhySw.roa
File: o0OiBgjtcX_XuKrBED0k9TIhySw.roa (raw, json)
Hash identifier: 89eo6kb3+S+DZqeeF/tn/HvYMnG4BjSPy+cayAlIUxw=
Subject key identifier: A3:43:A2:06:08:ED:71:7F:D7:B8:AA:C1:10:3D:24:F5:32:21:C9:2C
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 018B8B428D3BF8D18502B5B39F0BDB631B15
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/o0OiBgjtcX_XuKrBED0k9TIhySw.roa
Signing time: Wed 01 Nov 2023 14:21:16 +0000
ROA not before: Wed 01 Nov 2023 14:21:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8038
IP address blocks: 45.95.240.0/24 maxlen: 24
45.149.104.0/24 maxlen: 24
45.130.142.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8b:42:8d:3b:f8:d1:85:02:b5:b3:9f:0b:db:63:1b:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Nov 1 14:21:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a343a20608ed717fd7b8aac1103d24f53221c92c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ff:20:0e:49:66:37:fd:23:cd:ff:98:42:b8:
28:ac:c4:1b:e0:38:ef:c6:7f:5c:96:5b:42:b4:93:
61:18:29:3e:bb:e1:9f:be:15:81:f0:7b:68:59:8e:
10:3a:41:18:bf:75:d5:ee:89:2f:be:83:95:c3:3a:
5d:da:8f:ae:9f:ec:c1:3b:4e:d7:89:1d:00:94:e2:
75:40:13:2f:c4:b2:41:f0:7e:55:39:4e:77:c2:b3:
55:dd:87:5e:c3:ea:19:c1:b4:5c:92:d9:80:b0:30:
5b:51:4f:86:d8:2a:5c:a5:fa:40:39:be:4f:81:96:
09:91:75:eb:f0:2b:be:ea:76:ab:09:27:32:da:78:
f2:4f:7c:e5:f9:5e:68:54:64:04:36:06:ed:98:23:
fb:e2:33:6e:e1:84:d2:d5:cc:9f:49:2c:1b:ce:e0:
7f:6c:f5:33:7b:e6:e4:02:5e:47:ac:6b:20:6f:db:
86:28:6d:b7:0a:77:12:03:07:ad:38:6d:07:57:8c:
75:fd:af:9f:c1:e9:38:6d:bb:83:8a:fd:1d:f0:00:
0f:09:9d:c2:d4:b5:94:91:47:6f:4e:8a:b9:03:36:
d7:e9:d2:1c:6e:30:7c:18:73:92:19:4c:ff:5e:cb:
96:d1:a8:29:d6:07:c4:3b:51:b7:bf:d5:45:39:38:
25:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:43:A2:06:08:ED:71:7F:D7:B8:AA:C1:10:3D:24:F5:32:21:C9:2C
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/o0OiBgjtcX_XuKrBED0k9TIhySw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.240.0/24
45.130.142.0/24
45.149.104.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:ca:12:18:2e:46:7a:67:79:d4:7e:6b:59:b8:b1:b1:e3:8e:
63:3e:af:59:71:f1:3b:b4:8a:4a:3f:69:85:7b:b8:d5:64:a5:
c6:72:a3:2a:72:d5:e7:c8:a5:be:e4:f4:55:50:cd:df:b4:2e:
69:a1:07:36:d0:50:8d:e6:39:52:7b:a2:51:ce:e6:bd:bd:85:
a1:f5:c5:01:93:e2:e3:3c:c5:47:b1:e1:e4:fd:d3:0e:50:f8:
1d:e4:da:8a:42:59:ed:96:65:3f:26:cc:52:e2:1c:28:64:43:
dc:6d:ff:c0:9e:cd:30:50:81:dd:88:fc:75:03:39:fe:4c:32:
ed:36:b0:99:e4:e9:e9:11:bb:0d:40:ba:55:d5:34:02:c4:bf:
07:7b:81:f7:b6:52:20:ac:3f:fd:c5:9f:e4:ab:e7:a3:2a:c0:
02:56:da:f2:d4:9d:06:e0:2a:c2:6b:1e:90:f6:04:ce:3c:38:
4f:6b:6c:53:b1:1e:cf:05:4a:b1:58:47:2f:82:5a:58:1d:ea:
a0:c9:00:b1:aa:bf:92:a8:19:c0:44:da:b5:37:9f:09:5f:f1:
3c:b7:4d:d0:b9:61:ea:92:9a:73:64:e1:47:c0:8e:08:74:b9:
35:d9:c0:28:24:e6:f8:e9:3a:92:31:cc:33:ca:fa:a0:25:0f:
64:64:ac:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 22 08:37:48 2023 by rpki-client on console-ams.rpki-client.org