Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/z3sYTSRyftjNQvtT7BgqR88l91w.roa
File: z3sYTSRyftjNQvtT7BgqR88l91w.roa (raw, json)
Hash identifier: x56GWVAoIwT0cfxcdrPj4LRsFsEC5BVF7k3UHreGgRQ=
Subject key identifier: CF:7B:18:4D:24:72:7E:D8:CD:42:FB:53:EC:18:2A:47:CF:25:F7:5C
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 018B239C8E4C6AEEF23FC9E503F6B340C975
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/z3sYTSRyftjNQvtT7BgqR88l91w.roa
Signing time: Thu 12 Oct 2023 11:19:04 +0000
ROA not before: Thu 12 Oct 2023 11:19:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60798
IP address blocks: 45.139.162.0/24 maxlen: 24
45.145.250.0/24 maxlen: 24
45.138.18.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:23:9c:8e:4c:6a:ee:f2:3f:c9:e5:03:f6:b3:40:c9:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Oct 12 11:19:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf7b184d24727ed8cd42fb53ec182a47cf25f75c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:09:bf:43:60:bd:26:66:73:2d:8f:2d:d2:50:
d4:ee:4c:0b:43:f3:aa:55:f5:65:57:61:2c:33:e9:
f2:fa:1e:e5:17:c8:a0:7b:64:fe:d2:e4:11:76:b4:
51:7c:e0:62:5d:99:52:a9:d1:ee:07:78:29:3b:65:
c6:33:97:61:4c:28:d8:0a:bf:da:9c:50:fd:7a:57:
18:8f:5b:c7:8b:5e:29:4a:04:2e:32:f3:80:1a:b7:
36:f4:02:55:17:25:3e:89:de:6b:48:31:84:0f:ed:
d1:53:0e:30:05:a1:f3:19:ba:10:9c:d7:fb:5b:d6:
5d:f4:2b:46:03:35:2b:7c:34:79:8f:67:40:4f:ac:
6c:f6:88:a7:03:73:f3:65:fb:3d:82:df:53:ce:55:
b0:75:e1:7f:e5:6e:69:4e:31:fe:c8:65:94:86:fd:
54:96:27:c3:49:83:29:21:d2:97:ce:01:b5:75:6a:
49:04:4e:2e:d7:09:43:e3:ff:f5:37:07:36:e6:71:
de:e7:d4:2a:56:29:f0:b3:5e:e4:30:7d:7a:03:16:
d5:8d:6b:f6:8c:d3:53:c0:7c:bb:1f:d9:af:24:f6:
48:64:77:fb:74:47:7b:96:8f:fb:da:69:21:4b:48:
f2:90:63:30:bd:a5:97:36:f0:58:91:f6:08:3c:ef:
2d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:7B:18:4D:24:72:7E:D8:CD:42:FB:53:EC:18:2A:47:CF:25:F7:5C
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/z3sYTSRyftjNQvtT7BgqR88l91w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.18.0/24
45.139.162.0/24
45.145.250.0/24
Signature Algorithm: sha256WithRSAEncryption
47:15:8e:bf:6c:20:fd:2f:10:ac:03:04:30:ff:03:c9:b9:f9:
2b:51:87:ad:44:21:6d:ab:65:9c:5f:9a:c1:18:9f:2a:63:d2:
ea:ab:11:b4:7e:eb:f0:eb:36:6b:5c:b0:6e:d2:cd:2d:15:78:
0a:ae:c1:94:ce:8d:a6:d3:ed:68:39:a1:2a:10:d5:6d:24:b1:
54:e6:f7:85:19:81:d0:e0:94:ca:19:da:8d:0b:73:2b:c0:0e:
00:a0:df:5f:cb:e6:bf:04:25:af:93:0f:b8:b4:ab:a4:63:36:
07:d5:43:e5:5e:dd:e1:e6:bb:60:e4:8d:c6:24:0a:02:b7:15:
f9:12:54:62:02:56:90:fb:2e:1f:da:e8:b6:e7:3c:89:d6:13:
e7:c5:7f:58:31:05:30:ea:3c:95:54:98:f9:0b:9e:2f:09:3e:
38:eb:f2:54:f6:36:fd:4a:2b:0c:ec:f9:ac:9f:82:a6:47:3b:
dd:77:c9:c1:57:ba:10:80:b2:52:9e:61:6d:09:26:d4:a7:1a:
26:86:6c:00:7b:ed:7d:03:f9:43:db:65:92:e8:36:a2:e6:76:
cf:58:0b:13:0c:6f:d0:e7:7c:af:ae:78:f2:ba:cd:a5:cf:9f:
3c:84:a1:db:89:8e:ba:0e:45:4c:37:61:2d:6c:33:11:c6:01:
cd:e4:96:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:01:43 2024 by rpki-client on console-ams.rpki-client.org