Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/zn88NhjNIsN2s14URLpPQDyqxV8.roa
File: zn88NhjNIsN2s14URLpPQDyqxV8.roa (raw, json)
Hash identifier: Wz7peWO0fStcxDn/et3vl5+/M4Fy0eZwwUP4CeKw8vQ=
Subject key identifier: CE:7F:3C:36:18:CD:22:C3:76:B3:5E:14:44:BA:4F:40:3C:AA:C5:5F
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 018BFAC9597EBB0F77DEA93EC9C08CAF18A1
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/zn88NhjNIsN2s14URLpPQDyqxV8.roa
Signing time: Thu 23 Nov 2023 06:06:21 +0000
ROA not before: Thu 23 Nov 2023 06:06:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206150
IP address blocks: 45.130.140.0/24 maxlen: 24
2a0f:f43::/32 maxlen: 48
2a0f:f47::/32 maxlen: 48
2a0f:f45::/32 maxlen: 48
2a0f:f41::/32 maxlen: 32
2a0f:f44::/32 maxlen: 48
2a0f:f40::/32 maxlen: 32
2a0f:f46::/32 maxlen: 48
2a07:e342::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:fa:c9:59:7e:bb:0f:77:de:a9:3e:c9:c0:8c:af:18:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Nov 23 06:06:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ce7f3c3618cd22c376b35e1444ba4f403caac55f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b9:8a:de:4f:5f:50:be:32:2d:e6:2c:5c:81:
53:8f:fe:4f:9a:aa:4e:58:53:16:3a:6c:ac:02:cd:
b2:9a:c2:1f:3f:b5:a8:51:ed:1d:67:a1:45:e6:cb:
81:c6:51:83:c9:e4:47:11:1b:d0:10:d0:b2:7c:b7:
0f:c6:3c:6b:40:ab:2b:15:0e:6a:45:9c:81:1a:1b:
b3:0a:93:38:52:d3:7a:57:46:3b:fc:d3:12:6d:ce:
e3:4c:2b:ca:25:ac:1e:b7:32:23:6d:14:f7:34:5f:
71:2f:4c:5c:7c:c9:23:18:07:ba:19:58:4b:cc:6a:
bc:6a:b2:d4:ef:ba:a8:82:92:60:3f:3d:91:d4:81:
47:ce:dc:81:c3:59:31:ed:5c:07:63:24:ae:da:77:
79:b0:72:b5:6e:fd:2a:ef:39:79:51:25:c8:80:84:
00:ac:d9:0c:21:28:f5:15:72:5f:25:92:57:d4:b6:
77:c4:62:94:fb:19:63:f5:39:5e:75:70:0b:af:45:
b7:33:31:e6:7e:5a:bb:7e:c4:ba:e0:3e:be:b0:b9:
fd:23:62:12:04:0d:f0:62:c1:cb:87:52:96:50:82:
d9:66:7e:46:15:21:a8:b8:4b:0a:9f:87:ab:2f:22:
e8:1e:66:4c:24:32:e2:79:c3:f8:b2:07:71:d5:32:
05:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:7F:3C:36:18:CD:22:C3:76:B3:5E:14:44:BA:4F:40:3C:AA:C5:5F
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/zn88NhjNIsN2s14URLpPQDyqxV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.140.0/24
IPv6:
2a07:e342::/32
2a0f:f40::/31
2a0f:f43::-2a0f:f47:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
19:13:3c:45:46:5d:f9:81:1c:e7:c1:a2:92:47:64:bd:48:8d:
c8:a7:79:22:98:ab:5a:b5:14:b2:e0:f0:ba:1a:51:64:81:b6:
68:70:af:14:13:35:e1:b5:0c:76:0e:4f:1e:bc:d8:09:bc:c9:
bf:fb:94:9a:45:38:df:11:b7:cb:27:92:1b:85:b6:90:ec:46:
15:12:b4:db:0d:39:b8:27:b5:8b:09:2e:80:c1:08:b3:b1:56:
fe:54:a8:1e:57:0c:f3:b1:97:f6:d9:b0:f4:20:69:95:ab:24:
33:26:ba:34:23:87:4c:b9:3e:c0:22:f3:6a:24:d1:57:79:38:
af:31:0b:41:80:4a:83:d0:de:5b:c4:e8:31:08:70:68:93:6d:
6d:16:25:3d:a9:39:ce:41:f2:e3:98:e0:08:1d:ed:69:bb:df:
5d:4c:5a:31:8a:d8:98:3b:4c:bb:9a:b0:b1:a4:fa:c3:6a:a4:
05:03:58:7f:ca:e4:d6:94:b3:d0:90:dd:af:6f:79:47:3e:df:
ec:2b:a7:fb:f9:b3:83:5c:cb:53:b4:0b:06:bb:86:01:e6:f6:
c4:00:f6:70:6d:44:62:fd:63:d7:78:bd:ef:b8:87:97:7f:04:
6f:15:3a:2f:68:bb:86:12:8b:a2:96:4f:a1:11:ff:dc:54:fc:
a9:2c:39:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:01:44 2024 by rpki-client on console-ams.rpki-client.org