Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/vrxZ3ZzC1i-W_3e2-WO6sgHmvJg.roa
File: vrxZ3ZzC1i-W_3e2-WO6sgHmvJg.roa (raw, json)
Hash identifier: ya0zahBYAtJm38LsbG7PET/tFoNFNEpJWgk4Yqlim44=
Subject key identifier: BE:BC:59:DD:9C:C2:D6:2F:96:FF:77:B6:F9:63:BA:B2:01:E6:BC:98
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 018682A6D69B03D56FE89C32060724E9AA2A
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/vrxZ3ZzC1i-W_3e2-WO6sgHmvJg.roa
Signing time: Fri 24 Feb 2023 09:00:17 +0000
ROA not before: Fri 24 Feb 2023 09:00:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39521
IP address blocks: 45.133.91.0/24 maxlen: 24
45.133.88.0/24 maxlen: 24
45.133.89.0/24 maxlen: 24
45.133.90.0/24 maxlen: 24
45.132.138.0/24 maxlen: 24
45.132.139.0/24 maxlen: 24
45.132.136.0/24 maxlen: 24
45.132.137.0/24 maxlen: 24
45.132.140.0/24 maxlen: 24
45.132.141.0/24 maxlen: 24
45.132.142.0/24 maxlen: 24
45.132.143.0/24 maxlen: 24
45.148.252.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:82:a6:d6:9b:03:d5:6f:e8:9c:32:06:07:24:e9:aa:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Feb 24 09:00:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bebc59dd9cc2d62f96ff77b6f963bab201e6bc98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9e:60:8a:e4:5a:e2:d5:76:b4:6e:03:df:61:
14:a7:cf:55:4c:f3:4f:87:cc:16:c2:05:8c:4e:19:
24:6f:7a:4c:e7:84:d8:af:6c:b2:0f:3a:44:23:48:
94:b5:92:77:0d:16:3a:19:d1:f2:7f:a8:48:42:e2:
4b:80:5c:8f:0e:25:4a:32:2e:49:5d:1b:df:9a:5e:
8c:f9:38:8d:67:3e:1d:d8:51:81:b5:d8:c5:3a:54:
b6:a0:3e:8d:7e:1b:96:a8:e4:67:fe:a2:85:4f:41:
cd:68:8d:b7:1a:a2:e0:31:42:0c:ec:94:4c:7e:b2:
79:d3:b7:06:8b:bc:ca:71:44:68:24:d2:3e:6f:27:
6b:fd:28:28:09:2c:3b:55:42:9f:04:c5:12:9b:6e:
90:e4:97:cc:17:c3:0b:57:c0:a8:c1:43:45:02:95:
45:85:e2:64:f7:be:86:21:17:38:2b:a2:99:a9:5c:
95:d9:33:5d:31:e3:75:d5:96:df:6c:6d:d0:f7:46:
27:fc:f3:3e:1f:cd:3a:dd:2f:fe:e4:fd:2f:e1:fb:
cc:b3:cd:4e:7c:63:d4:2e:b2:2c:86:63:41:f1:59:
9b:6e:3b:10:ab:62:f1:c8:52:18:26:5b:ce:31:30:
69:cf:12:21:2f:be:bc:b1:3f:02:c5:1b:91:18:2f:
be:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:BC:59:DD:9C:C2:D6:2F:96:FF:77:B6:F9:63:BA:B2:01:E6:BC:98
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/vrxZ3ZzC1i-W_3e2-WO6sgHmvJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.136.0/21
45.133.88.0/22
45.148.252.0/23
Signature Algorithm: sha256WithRSAEncryption
63:02:23:00:23:de:ea:bc:af:7e:7a:2e:7e:aa:fe:80:d2:d8:
7d:a7:96:1c:2b:82:dc:c1:48:01:41:a3:1f:72:73:b7:a5:f5:
29:46:7f:aa:f2:32:5a:94:b0:da:a2:76:44:98:f2:51:1e:21:
04:2f:e8:8f:f3:4a:0b:45:fc:f8:e0:b8:27:16:99:f8:83:dc:
fe:c2:6e:33:56:cf:22:40:d5:bb:cf:57:11:61:01:31:c9:46:
fb:54:b5:d4:1a:bf:ef:9e:6a:78:09:db:06:6a:dc:66:18:bc:
25:e6:8b:ac:a1:12:25:c5:00:42:3c:ad:34:b3:f8:e8:4b:fb:
ed:4a:d2:0b:d1:b0:ee:6d:3a:a2:51:b8:75:64:43:20:f4:34:
b7:17:6c:c9:08:8f:75:72:4f:a0:69:33:83:2e:3a:7c:ed:f6:
b8:b4:73:cd:f9:19:38:f6:1b:ee:52:7b:48:a3:a6:9a:01:c5:
2c:e1:a8:ca:bd:ef:2f:c8:9f:a5:24:81:53:19:59:ea:d6:2d:
5e:bf:4a:58:7c:64:9b:72:cb:9d:f5:3d:76:7c:74:d9:91:3f:
ed:87:e4:fe:18:d2:3d:0d:5f:f0:ca:41:60:00:a4:ef:36:68:
f6:a8:f0:8b:ea:07:8e:ec:7a:50:94:4f:be:11:e2:dc:3b:d2:
68:d1:ff:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:25 2023 by rpki-client on console-ams.rpki-client.org