Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/pBRQk6qjiy49xc2pFmS8zHi5Y5k.roa
File: pBRQk6qjiy49xc2pFmS8zHi5Y5k.roa (raw, json)
Hash identifier: 5VV4OctJ0PUQ+bFvI99mED4C5eDjcAlRvK7gqKlLcxM=
Subject key identifier: A4:14:50:93:AA:A3:8B:2E:3D:C5:CD:A9:16:64:BC:CC:78:B9:63:99
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 0189828D04EA6628D3A3F20DC3011AC7B09D
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/pBRQk6qjiy49xc2pFmS8zHi5Y5k.roa
Signing time: Sun 23 Jul 2023 11:40:27 +0000
ROA not before: Sun 23 Jul 2023 11:40:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.149.74.0/23 maxlen: 24
45.149.75.0/24 maxlen: 24
45.149.72.0/24 maxlen: 24
45.149.73.0/24 maxlen: 24
45.149.74.0/24 maxlen: 24
45.133.89.0/24 maxlen: 24
45.133.90.0/24 maxlen: 24
45.133.91.0/24 maxlen: 24
45.133.88.0/24 maxlen: 24
45.132.136.0/24 maxlen: 24
45.132.137.0/24 maxlen: 24
45.132.138.0/24 maxlen: 24
45.132.139.0/24 maxlen: 24
45.132.143.0/24 maxlen: 24
45.132.140.0/24 maxlen: 24
45.132.141.0/24 maxlen: 24
45.132.142.0/24 maxlen: 24
45.148.254.0/23 maxlen: 24
45.148.254.0/24 maxlen: 24
45.148.255.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:82:8d:04:ea:66:28:d3:a3:f2:0d:c3:01:1a:c7:b0:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jul 23 11:40:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a4145093aaa38b2e3dc5cda91664bccc78b96399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:dc:eb:ea:dc:b5:fd:c8:49:dd:1d:92:45:c5:
21:0b:2e:df:20:e3:b6:bb:58:49:77:50:46:4e:e8:
c6:92:8b:c7:bf:6f:98:27:77:26:c9:44:35:0d:5a:
15:9f:17:3f:a7:e3:3f:46:f3:d8:44:8b:e4:27:37:
f9:a5:45:6f:1c:c8:44:a5:bc:33:96:85:3b:44:0f:
48:89:39:50:45:1b:81:a6:a5:f8:10:12:fc:bc:38:
72:72:a2:00:64:21:e3:23:1f:bc:e8:e6:47:b7:d1:
14:5b:71:4e:f4:c3:5f:ad:0d:38:ed:d8:42:65:f4:
56:85:46:3b:3f:81:f3:ae:85:f1:35:3c:49:19:a6:
6d:20:bc:56:31:2e:97:89:41:03:26:9b:7a:cb:14:
af:2e:48:14:c5:8f:c9:1f:91:fc:c4:6e:50:49:ce:
88:3f:c6:b7:e9:a5:d6:ce:5c:13:90:1f:08:19:1d:
42:01:b6:6f:91:52:2b:8f:44:3a:b7:7c:b4:1f:74:
bd:63:61:84:4c:7b:e4:68:98:39:f5:a6:26:07:34:
06:97:c7:50:da:cd:4b:9d:5c:0b:ca:d4:13:08:3c:
db:c1:5d:14:a7:c4:9b:21:ec:f5:06:f6:b6:16:c5:
d5:30:43:9b:6c:79:36:4b:c0:c2:20:44:81:21:c4:
4b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:14:50:93:AA:A3:8B:2E:3D:C5:CD:A9:16:64:BC:CC:78:B9:63:99
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/pBRQk6qjiy49xc2pFmS8zHi5Y5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.136.0/21
45.133.88.0/22
45.148.254.0/23
45.149.72.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:dd:ad:2f:c7:ca:8d:77:ab:57:54:3e:3c:c8:7c:96:9f:94:
49:bf:0c:8e:0a:f2:49:b7:64:aa:12:b2:e1:26:b4:f0:8c:c6:
a3:e8:7d:e4:80:7c:33:b0:7e:b4:b9:e8:1a:b5:af:32:21:b8:
0b:ef:87:53:d7:f8:3d:23:42:70:f1:3c:24:90:4d:83:c7:31:
0b:6a:8e:e8:6d:55:1f:bb:eb:20:f1:8f:92:37:e8:1d:7c:8a:
e2:7b:1a:e4:10:c8:70:6c:02:d3:6a:6e:7b:c5:ac:8e:03:79:
ac:81:f5:d9:87:ac:9c:0a:1e:70:ee:14:29:6c:ec:4e:0a:b4:
b6:ec:b1:b6:99:c4:a3:8d:f7:dd:4a:95:16:fd:44:c5:4f:26:
99:c4:db:54:94:f9:06:c3:9a:73:8a:c7:29:01:69:c7:57:0d:
c4:0c:35:a5:ba:bb:26:c5:4d:3c:ae:8f:3f:c4:bf:1d:84:a2:
71:03:11:d3:98:30:69:9e:be:3a:ca:77:9c:68:9a:15:37:8b:
1b:07:4f:a5:be:f0:35:6c:2d:0e:05:f9:92:f2:46:de:fd:93:
cd:a3:5b:d3:ec:3b:2b:2f:30:aa:6c:0e:61:d3:a7:f9:3e:44:
c8:f6:92:87:51:45:c0:80:99:71:f7:86:c2:a4:36:fc:49:fa:
17:6c:2a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 15 05:54:06 2023 by rpki-client on console-fra.rpki-client.org