Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/vTbzLVfT0tLSNHcK5FzxxEE0afY.roa
File: vTbzLVfT0tLSNHcK5FzxxEE0afY.roa (raw, json)
Hash identifier: 07VwqZI0NUU52XPI2XD8p6y0Rg/umR8RND7ZjelE9l0=
Subject key identifier: BD:36:F3:2D:57:D3:D2:D2:D2:34:77:0A:E4:5C:F1:C4:41:34:69:F6
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 018BF60D32C3E1A929800C3105356FA4DD79
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/vTbzLVfT0tLSNHcK5FzxxEE0afY.roa
Signing time: Wed 22 Nov 2023 08:02:21 +0000
ROA not before: Wed 22 Nov 2023 08:02:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39351
IP address blocks: 45.92.231.0/24 maxlen: 24
45.149.104.0/24 maxlen: 24
45.130.118.0/24 maxlen: 24
45.132.193.0/24 maxlen: 24
2a07:e341::/32 maxlen: 32
2a07:e340::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f6:0d:32:c3:e1:a9:29:80:0c:31:05:35:6f:a4:dd:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Nov 22 08:02:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bd36f32d57d3d2d2d234770ae45cf1c4413469f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:11:8d:61:d0:3f:6a:29:c3:f6:0f:3a:a1:13:
ec:bd:2d:21:63:7c:b8:48:4f:7c:56:29:91:49:38:
58:d6:b7:b8:4a:c9:c1:88:26:86:0b:fc:65:31:9e:
5c:c9:75:59:5a:6a:ab:a8:66:03:e5:a1:b3:ad:9c:
89:a3:3a:6e:59:43:3e:2f:8a:e2:7e:19:8c:dc:c4:
d8:1c:23:d1:b7:aa:d5:f4:3a:29:fe:27:61:f9:5f:
f4:94:cf:58:04:5b:70:e2:7a:39:5c:e7:7a:ac:a3:
99:91:99:0b:9e:68:56:e8:5e:8a:7c:e1:63:32:5e:
cd:ea:8c:87:75:d4:d3:38:0c:5d:e2:7c:dd:37:0b:
23:fc:c2:7e:18:ed:d4:d8:aa:67:0f:ce:1c:97:7d:
64:96:c9:85:0a:6d:cc:e4:ba:68:c0:97:e9:c6:8d:
1a:0e:25:03:8f:aa:0e:1b:d5:8a:87:8d:79:4f:72:
94:34:33:a2:44:f3:ae:bf:4e:28:c3:ae:0b:81:b6:
e8:6f:aa:c8:ed:c9:91:1f:85:2c:2e:6a:56:29:1c:
3c:b6:65:19:82:53:aa:a3:7d:23:1e:c6:ea:fe:29:
ce:a3:e9:8b:bc:35:4e:0c:c5:93:9a:9b:c0:b6:8d:
0d:0c:45:28:c0:c3:32:70:b3:26:3a:97:1b:5a:d8:
62:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:36:F3:2D:57:D3:D2:D2:D2:34:77:0A:E4:5C:F1:C4:41:34:69:F6
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/vTbzLVfT0tLSNHcK5FzxxEE0afY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.231.0/24
45.130.118.0/24
45.132.193.0/24
45.149.104.0/24
IPv6:
2a07:e340::/31
Signature Algorithm: sha256WithRSAEncryption
4a:df:69:d9:1a:e8:d9:26:7a:11:f3:53:0a:6b:97:11:20:e8:
1f:3b:67:9e:bd:8f:af:5f:15:9f:87:cd:fe:ff:65:c6:ec:cb:
75:d0:bb:a1:5a:21:97:75:ef:1b:4c:77:0d:81:28:58:9c:22:
2f:01:2c:8c:66:e7:ec:15:d5:ca:52:a8:ff:30:f9:6a:0d:f3:
b9:47:67:b5:15:6e:f7:c5:cf:49:51:26:f3:10:a2:86:b9:95:
e3:04:be:4f:8a:49:30:62:df:40:b0:24:9e:13:7a:37:5d:bd:
5d:92:0e:4d:f6:04:2f:dc:39:60:30:15:32:8f:ea:a7:88:43:
24:b2:6a:b2:e7:84:2a:7e:5c:a5:08:44:ae:bc:ce:c1:e4:9c:
6a:e7:c3:7c:6f:d3:c1:8b:98:00:65:42:05:f1:d2:7f:ad:39:
27:d3:c8:04:7d:cb:19:09:67:cf:bd:3b:f6:3b:85:58:1a:b0:
06:10:40:88:ae:93:24:2d:7c:fd:0b:85:b0:ae:6a:da:34:de:
a8:87:12:65:04:7f:a4:fe:7e:aa:28:21:f1:5c:6c:39:a8:6f:
e2:65:85:bb:33:ec:0c:2f:2c:c3:7a:a1:dd:bb:d1:3c:0b:10:
4e:cd:ea:e0:b8:35:f9:5f:fe:2b:5a:26:be:c6:cf:7a:8b:c3:
09:59:ec:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 1 13:08:31 2023 by rpki-client on console-ams.rpki-client.org