Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/zniFzMUI2Mc-zidb9jw9zNJZbA8.roa
File: zniFzMUI2Mc-zidb9jw9zNJZbA8.roa (raw, json)
Hash identifier: tMeZ/t2VIQx5WX+2U9r0Q6SRTwXAv9p73u8cg25XYMo=
Subject key identifier: CE:78:85:CC:C5:08:D8:C7:3E:CE:27:5B:F6:3C:3D:CC:D2:59:6C:0F
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 01889F502F889AA286C1F3344802774F30D2
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/zniFzMUI2Mc-zidb9jw9zNJZbA8.roa
Signing time: Fri 09 Jun 2023 08:40:12 +0000
ROA not before: Fri 09 Jun 2023 08:40:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210636
IP address blocks: 45.139.254.0/23 maxlen: 24
45.94.30.0/24 maxlen: 24
45.94.28.0/24 maxlen: 24
45.94.29.0/24 maxlen: 24
45.148.26.0/24 maxlen: 24
93.185.163.0/24 maxlen: 24
45.88.246.0/24 maxlen: 24
45.132.192.0/24 maxlen: 24
45.88.247.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9f:50:2f:88:9a:a2:86:c1:f3:34:48:02:77:4f:30:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jun 9 08:40:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ce7885ccc508d8c73ece275bf63c3dccd2596c0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e2:9b:9c:18:fe:75:bb:00:ef:bd:93:ee:d9:
9f:94:b5:19:41:33:5d:80:63:94:6c:fc:ec:57:2a:
da:d3:f7:ba:f3:dd:37:00:51:e9:7d:95:ff:48:43:
61:05:48:4c:c5:a8:17:18:5b:f9:ee:8f:7c:10:c4:
39:ba:93:b8:f4:ed:49:45:0d:eb:6e:c0:ce:e8:7c:
59:7b:a1:98:e1:4c:e7:4e:86:d5:66:dd:84:03:68:
69:c6:d2:e6:42:dd:f4:b1:33:39:7f:98:75:fd:bc:
d6:95:2d:9d:89:90:65:34:2d:13:e0:71:80:ab:17:
8e:ce:bb:d6:f2:81:b7:c8:a3:48:c8:da:d1:e6:d8:
09:79:9f:fe:ca:af:41:f2:2b:e1:a8:a3:b0:dc:08:
64:e7:c6:ee:ff:12:33:eb:d6:80:1d:22:f0:20:c1:
f6:f9:53:4e:45:7b:19:e3:cc:32:a4:e3:b7:86:3c:
7f:3f:14:28:b8:37:d5:19:8e:8b:da:70:92:f9:f6:
b7:08:4c:dd:16:fb:e3:04:9f:97:02:1b:d6:ce:a7:
e6:ed:17:ed:b8:79:2d:f2:7d:fe:b3:a2:7f:a0:40:
d2:3c:b6:b3:52:be:93:3b:9f:59:9d:31:c7:14:de:
bf:d1:f4:6a:83:6f:13:99:d6:97:84:b8:2f:1e:a7:
cd:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:78:85:CC:C5:08:D8:C7:3E:CE:27:5B:F6:3C:3D:CC:D2:59:6C:0F
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/zniFzMUI2Mc-zidb9jw9zNJZbA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.246.0/23
45.94.28.0-45.94.30.255
45.132.192.0/24
45.139.254.0/23
45.148.26.0/24
93.185.163.0/24
Signature Algorithm: sha256WithRSAEncryption
75:79:4d:8d:3e:d4:fe:e0:7a:d6:9b:64:94:5f:4f:27:14:d3:
57:be:ee:b2:fa:5f:f9:ec:a5:95:c8:c1:c0:0b:95:51:e6:10:
47:d3:3b:87:16:6b:e8:11:9d:7c:4f:d8:0b:31:c5:1e:e1:ad:
f4:f3:97:34:06:55:16:e1:5c:16:49:51:2f:1a:2e:02:9a:28:
d4:1f:ca:f4:28:9b:2e:e7:94:b6:a4:de:91:90:9b:b8:88:5d:
22:11:41:a7:ca:aa:89:25:89:91:cd:84:eb:6d:d3:a5:32:9c:
ce:6d:dc:4e:19:2e:12:50:f2:14:86:27:4a:09:10:61:c4:11:
57:9d:da:10:11:19:0d:ac:d1:dc:dd:cd:8c:5b:c8:98:8c:3c:
6f:5d:67:04:69:39:81:43:86:09:ce:8f:e8:7a:c1:0c:bb:9b:
01:bd:3a:e1:dc:5c:d1:24:bd:1c:dd:40:0d:2f:3d:0d:ea:03:
85:81:78:8b:97:c4:70:d5:75:91:11:83:9a:4f:c3:55:95:a0:
45:29:37:bd:6f:e5:6b:fe:41:2c:3b:85:c8:af:bf:d9:a8:95:
5d:3c:b6:bc:da:e0:ee:80:8d:07:44:52:c9:a2:82:99:fe:e7:
ff:2a:3e:de:48:93:f6:82:af:8e:fd:b3:1b:a5:c3:99:c2:c5:
bc:7a:e8:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 19 07:13:55 2023 by rpki-client on console-fra.rpki-client.org