Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/vz6Ad2852FoMugHLexhb9UO2n5w.roa
File: vz6Ad2852FoMugHLexhb9UO2n5w.roa (raw, json)
Hash identifier: QXYjterSBEcndXDCdRjUzR6sHzX3kUmurcD3QQtEM+g=
Subject key identifier: BF:3E:80:77:6F:39:D8:5A:0C:BA:01:CB:7B:18:5B:F5:43:B6:9F:9C
Certificate issuer: /CN=62c5fce77dde4e2ee4fd6535100529c2f444d79a
Certificate serial: 01856BB7F6F85161D1BD842620D6538E2132
Authority key identifier: 62:C5:FC:E7:7D:DE:4E:2E:E4:FD:65:35:10:05:29:C2:F4:44:D7:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsX8533eTi7k_WU1EAUpwvRE15o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/vz6Ad2852FoMugHLexhb9UO2n5w.roa
Signing time: Sun 01 Jan 2023 05:04:56 +0000
ROA not before: Sun 01 Jan 2023 05:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 45.158.64.0/24 maxlen: 24
45.158.64.0/22 maxlen: 22
45.158.67.0/24 maxlen: 24
45.158.66.0/24 maxlen: 24
45.158.65.0/24 maxlen: 24
193.104.15.0/24 maxlen: 24
95.214.130.0/24 maxlen: 24
95.214.129.0/24 maxlen: 24
95.214.128.0/22 maxlen: 22
95.214.128.0/24 maxlen: 24
95.214.131.0/24 maxlen: 24
2a09:e180::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:b7:f6:f8:51:61:d1:bd:84:26:20:d6:53:8e:21:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62c5fce77dde4e2ee4fd6535100529c2f444d79a
Validity
Not Before: Jan 1 05:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf3e80776f39d85a0cba01cb7b185bf543b69f9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:70:65:60:86:26:15:6b:a8:ee:cd:ef:c5:89:
84:e8:77:4f:aa:82:10:d7:25:67:d2:53:b1:da:61:
13:95:a5:f3:bc:31:f0:42:ba:6c:1d:b4:09:09:aa:
c9:d8:bc:6d:f3:c4:bc:9a:dc:47:03:76:26:35:3c:
98:6a:1d:22:06:bf:20:51:60:1a:2a:4e:1e:d6:cf:
be:6f:d6:79:aa:e6:05:05:46:e3:32:8e:12:31:05:
ff:f0:9c:b5:6e:42:f4:46:6c:67:ca:b0:fc:45:1c:
ee:c1:47:3a:3e:38:92:47:e5:87:ae:07:2c:1c:18:
e1:71:92:4e:5d:25:a3:8f:07:ae:6e:4c:f5:cb:de:
80:f4:d9:ce:00:e1:9d:5b:c1:6b:86:e0:ea:a4:e5:
16:38:e8:a9:4e:55:5c:cf:99:78:61:45:f7:a2:e4:
20:66:29:d0:c2:3c:5a:d8:5b:24:1d:8c:c8:7e:8d:
1d:bf:93:1e:29:d0:38:7e:6b:af:05:b1:7b:65:34:
44:c1:ac:62:c9:84:c8:9f:7b:a7:5c:be:7a:62:ab:
af:ed:51:30:13:62:b9:d5:8d:e2:ff:70:f9:86:2f:
4e:34:d2:f8:d5:54:1f:b5:ce:c0:6e:c9:78:ce:81:
f5:57:cd:bb:bc:1c:14:59:a3:89:53:8e:7a:c0:6f:
82:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:3E:80:77:6F:39:D8:5A:0C:BA:01:CB:7B:18:5B:F5:43:B6:9F:9C
X509v3 Authority Key Identifier:
keyid:62:C5:FC:E7:7D:DE:4E:2E:E4:FD:65:35:10:05:29:C2:F4:44:D7:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsX8533eTi7k_WU1EAUpwvRE15o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/vz6Ad2852FoMugHLexhb9UO2n5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.64.0/22
95.214.128.0/22
193.104.15.0/24
IPv6:
2a09:e180::/29
Signature Algorithm: sha256WithRSAEncryption
32:5c:bb:10:15:08:d0:04:36:33:26:0a:48:d6:d2:63:cd:1e:
b5:52:e5:6e:5d:e7:87:44:39:36:d5:d2:4d:da:71:ad:af:15:
5e:f9:2b:6c:58:bb:f4:37:64:b5:bd:ed:44:0c:b3:7d:cf:80:
4a:82:e6:bc:86:dd:1e:82:31:48:b9:f7:f5:32:e9:79:dd:82:
bd:38:64:4d:7e:94:4e:59:cf:ee:8e:c1:59:e0:a8:40:fc:95:
18:f5:c5:90:dc:a5:bb:a9:07:e0:8f:88:84:ad:b6:cd:37:84:
7f:e7:7b:56:70:36:e3:79:f9:70:e1:f5:ef:ab:94:ce:d9:f4:
a2:be:66:af:62:0e:18:79:ac:f2:bd:bb:e1:de:fe:c0:fb:26:
be:cf:d5:65:f5:f1:60:02:3b:9b:2d:e5:52:c0:84:4d:2a:01:
96:77:2a:6b:67:ba:40:df:c7:7b:27:34:57:12:3b:c5:d2:6c:
ba:2c:42:4b:1d:2a:71:7d:3b:af:fd:df:df:98:6d:7b:26:24:
6e:5e:e5:62:b2:6f:34:2a:0d:af:98:04:30:36:34:b4:51:a2:
08:80:38:de:cf:37:32:43:00:3c:ee:27:a7:fe:a6:35:b5:af:
5d:e8:c0:31:9a:be:05:8d:35:78:20:5c:ec:c7:c6:4c:79:cc:
60:c9:49:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:31:42 2024 by rpki-client on console-ams.rpki-client.org