Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/N5ueSIGXdElRBgZ7CO2cD73h3WY.roa
File: N5ueSIGXdElRBgZ7CO2cD73h3WY.roa (raw, json)
Hash identifier: xBlUIa9vq3oZ374WvbWcVqrgulYfb6S2M0YAOPxUvk0=
Subject key identifier: 37:9B:9E:48:81:97:74:49:51:06:06:7B:08:ED:9C:0F:BD:E1:DD:66
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 018AEFCB697D15717398BCF46F8660662B3B
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/N5ueSIGXdElRBgZ7CO2cD73h3WY.roa
Signing time: Mon 02 Oct 2023 09:49:59 +0000
ROA not before: Mon 02 Oct 2023 09:49:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34927
IP address blocks: 45.134.88.0/24 maxlen: 24
45.134.91.0/24 maxlen: 24
45.134.89.0/24 maxlen: 24
193.148.251.0/24 maxlen: 24
193.148.250.0/24 maxlen: 24
193.148.249.0/24 maxlen: 24
193.148.248.0/24 maxlen: 24
193.37.139.0/24 maxlen: 24
2a0c:9a40:1024::/48 maxlen: 48
2a0c:9a40:1002::/48 maxlen: 48
2a0c:9a44::/48 maxlen: 48
2a0c:9a40:1000::/44 maxlen: 48
2a0c:9a40:1080::/44 maxlen: 48
2a0c:9a40:1058::/48 maxlen: 48
2a0c:9a40:1::/48 maxlen: 48
2a0c:9a40:1001::/48 maxlen: 48
2a0c:9a40:1055::/48 maxlen: 48
2a0c:9a40:1070::/48 maxlen: 48
2a0c:9a40:1050::/48 maxlen: 48
2a0c:9a40:1054::/48 maxlen: 48
2a0c:9a40:1057::/48 maxlen: 48
2a0c:9a40:1072::/48 maxlen: 48
2a0c:9a40:1070::/44 maxlen: 48
2a0c:9a40:1090::/44 maxlen: 48
2a0c:9a40:1030::/44 maxlen: 48
2a0c:9a40:2328::/48 maxlen: 48
2a0c:9a40:1051::/48 maxlen: 48
2a0c:9a40:2d00::/40 maxlen: 48
2a0c:9a40:2200::/40 maxlen: 48
2a0c:9a40:2600::/40 maxlen: 48
2a0c:9a40:2c00::/40 maxlen: 48
2a0c:9a40:2500::/40 maxlen: 48
2a0c:9a40:2b00::/40 maxlen: 48
2a0c:9a40:2700::/40 maxlen: 48
2a0c:9a40:2a00::/40 maxlen: 40
2a0c:9a40:2800::/40 maxlen: 40
2a0c:9a40:2400::/40 maxlen: 40
2a0c:9a40:2100::/40 maxlen: 40
2a0c:9a40:1080::/48 maxlen: 48
2a0c:9a40:1060::/48 maxlen: 48
2a0c:9a40:2900::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ef:cb:69:7d:15:71:73:98:bc:f4:6f:86:60:66:2b:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Oct 2 09:49:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=379b9e48819774495106067b08ed9c0fbde1dd66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d2:d0:ef:93:e0:fc:64:5e:38:1a:88:b5:fc:
98:50:ad:e0:9e:b6:1e:2c:b9:60:14:86:a9:99:d5:
17:50:b7:25:57:5a:3a:b7:91:2d:ca:db:c6:f3:b2:
f7:08:03:78:8c:93:ba:d8:e9:73:09:40:22:28:9d:
bf:9b:f4:48:0d:ec:71:13:b3:32:d8:38:1b:1b:d6:
0e:8c:63:d6:2e:5b:f3:95:c2:5e:27:c2:d5:0d:31:
85:86:81:45:3e:6e:aa:fd:f5:74:75:b0:e7:dd:02:
9c:c3:d4:69:ba:9f:1a:d6:c0:7f:f1:8b:63:54:0e:
63:1d:dd:6f:ed:ee:d8:50:bd:5a:0c:c9:a0:fa:a5:
ca:3c:dd:ed:fa:7b:24:21:f8:6e:d9:0f:2c:e3:3a:
a8:77:cc:47:3e:0e:fb:85:35:f6:b3:b6:f4:6c:e8:
1d:8d:a3:c2:7a:c1:15:9c:b7:cb:a8:a3:87:4f:35:
3a:00:c6:7c:45:2a:62:46:9e:4c:da:5e:75:d3:00:
d4:46:17:68:9d:7e:75:0e:8c:f6:f6:c6:c6:19:4a:
f6:be:57:07:38:99:11:28:ad:52:6f:15:2a:aa:41:
ea:6d:72:c5:39:48:c2:49:d5:11:a0:fb:ba:89:03:
f0:cc:3c:2e:d6:68:75:c0:25:5c:88:71:f7:43:2f:
b4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:9B:9E:48:81:97:74:49:51:06:06:7B:08:ED:9C:0F:BD:E1:DD:66
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/N5ueSIGXdElRBgZ7CO2cD73h3WY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.88.0/23
45.134.91.0/24
193.37.139.0/24
193.148.248.0/22
IPv6:
2a0c:9a40:1::/48
2a0c:9a40:1000::/44
2a0c:9a40:1024::/48
2a0c:9a40:1030::/44
2a0c:9a40:1050::/47
2a0c:9a40:1054::/47
2a0c:9a40:1057::-2a0c:9a40:1058:ffff:ffff:ffff:ffff:ffff
2a0c:9a40:1060::/48
2a0c:9a40:1070::-2a0c:9a40:109f:ffff:ffff:ffff:ffff:ffff
2a0c:9a40:2100::-2a0c:9a40:22ff:ffff:ffff:ffff:ffff:ffff
2a0c:9a40:2328::/48
2a0c:9a40:2400::-2a0c:9a40:2900:ffff:ffff:ffff:ffff:ffff
2a0c:9a40:2a00::-2a0c:9a40:2dff:ffff:ffff:ffff:ffff:ffff
2a0c:9a44::/48
Signature Algorithm: sha256WithRSAEncryption
95:11:d7:52:bb:9c:19:1a:bf:34:66:78:e5:d3:92:d1:fb:bd:
fe:b1:48:b4:0f:44:4a:57:e4:3e:be:37:6e:7e:7c:c3:04:44:
45:c7:e5:61:0d:58:40:80:e9:d4:f2:96:e0:c4:91:ce:89:a3:
0b:80:0f:1d:bf:8c:23:2b:28:8e:fc:f8:a7:76:d0:23:05:9c:
f9:e0:4d:aa:12:cc:90:4a:8b:53:a4:68:02:c9:c7:a9:ec:f4:
22:36:0d:9b:27:7b:e2:22:fa:5d:ef:b3:ca:49:55:d3:37:af:
7a:0a:5e:4d:c1:11:ff:53:47:8e:d6:76:88:d7:96:0d:d3:83:
22:cd:ae:a9:f9:c7:ec:ec:c4:9a:33:8c:ed:23:c2:90:f4:2c:
89:db:30:0e:8c:a4:cd:0d:30:ff:6f:8d:38:29:68:6c:cf:84:
bf:67:0f:f4:7b:1d:6b:92:df:10:44:e6:e3:6d:a7:42:7c:a6:
41:f1:e0:e5:e0:6f:f4:b8:a5:04:8c:d2:ca:7c:2c:d0:57:0a:
c3:28:89:1e:be:e2:da:34:d7:16:2d:92:82:6a:e5:f0:26:ec:
d1:73:54:8f:0c:ec:19:f4:8c:2c:3a:0a:1d:67:6c:58:36:43:
68:44:65:f0:16:e3:ed:0b:3a:67:9d:bf:60:4b:17:9e:5c:b9:
b7:d9:f2:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 17 11:57:40 2023 by rpki-client on console-ams.rpki-client.org