Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/aJ1L7qZEsg5581YmK0g9bldz6C4.roa
File: aJ1L7qZEsg5581YmK0g9bldz6C4.roa (raw, json)
Hash identifier: vEMxkXDqS3uSKKSKSepqYNFx6VZiJqNq65AjADd4v8c=
Subject key identifier: 68:9D:4B:EE:A6:44:B2:0E:79:F3:56:26:2B:48:3D:6E:57:73:E8:2E
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 0187671B1C974162440B540813D8B47224D8
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/aJ1L7qZEsg5581YmK0g9bldz6C4.roa
Signing time: Sun 09 Apr 2023 17:40:42 +0000
ROA not before: Sun 09 Apr 2023 17:40:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34927
IP address blocks: 45.134.88.0/24 maxlen: 24
45.134.91.0/24 maxlen: 24
45.134.89.0/24 maxlen: 24
193.148.251.0/24 maxlen: 24
193.148.250.0/24 maxlen: 24
193.148.249.0/24 maxlen: 24
193.148.248.0/24 maxlen: 24
193.37.139.0/24 maxlen: 24
2a0c:9a40:1024::/48 maxlen: 48
2a0c:9a40:1002::/48 maxlen: 48
2a0c:9a44::/48 maxlen: 48
2a0c:9a40:1000::/44 maxlen: 48
2a0c:9a40:1080::/44 maxlen: 48
2a0c:9a40:1058::/48 maxlen: 48
2a0c:9a40:1001::/48 maxlen: 48
2a0c:9a40:1::/48 maxlen: 48
2a0c:9a40:1055::/48 maxlen: 48
2a0c:9a40:1070::/48 maxlen: 48
2a0c:9a40:1050::/48 maxlen: 48
2a0c:9a40:1054::/48 maxlen: 48
2a0c:9a40:1057::/48 maxlen: 48
2a0c:9a40:1072::/48 maxlen: 48
2a0c:9a40:1070::/44 maxlen: 48
2a0c:9a40:1090::/44 maxlen: 48
2a0c:9a40:1030::/44 maxlen: 48
2a0c:9a40:1051::/48 maxlen: 48
2a0c:9a40:2700::/40 maxlen: 40
2a0c:9a40:2c00::/40 maxlen: 48
2a0c:9a40:2d00::/40 maxlen: 48
2a0c:9a40:2600::/40 maxlen: 48
2a0c:9a40:2800::/40 maxlen: 40
2a0c:9a40:2500::/40 maxlen: 40
2a0c:9a40:2200::/40 maxlen: 40
2a0c:9a40:2100::/40 maxlen: 40
2a0c:9a40:2400::/40 maxlen: 40
2a0c:9a40:2a00::/40 maxlen: 40
2a0c:9a40:1080::/48 maxlen: 48
2a0c:9a40:1060::/48 maxlen: 48
2a0c:9a40:2900::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:67:1b:1c:97:41:62:44:0b:54:08:13:d8:b4:72:24:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Apr 9 17:40:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=689d4beea644b20e79f356262b483d6e5773e82e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:52:ed:ac:46:07:e8:e3:07:45:91:3f:8b:42:
6b:a0:86:47:7e:94:a3:94:07:b5:fe:4a:fd:82:48:
d5:a4:f9:10:a4:c8:d9:e8:94:b8:cc:c3:0f:15:d9:
62:7f:c3:b3:9d:09:46:98:43:11:f4:fc:ab:14:b5:
3e:ac:db:87:80:9e:e1:9f:1f:e0:97:79:9d:ad:26:
d0:e3:bc:4b:cd:fa:c7:e6:eb:a4:b6:ca:27:13:98:
19:d4:30:c5:80:3f:e4:fc:21:10:70:15:4e:a5:f4:
cf:ac:09:41:e8:45:38:a9:e3:65:a7:99:48:82:7e:
97:7e:53:7c:a5:92:ce:0f:81:b5:e6:b1:6e:13:97:
98:98:e4:b1:d2:f1:20:0b:c9:e1:4f:bb:fd:e7:2d:
03:d9:d5:8e:b7:c0:37:da:1d:82:d7:4b:05:4e:e8:
b0:2d:cc:71:a7:48:8a:d0:70:7b:31:f1:8e:21:c1:
1a:a1:97:db:87:26:8a:e9:3b:d2:d6:e1:35:6e:b0:
76:5b:49:56:aa:91:2f:a3:30:cf:da:4f:58:8b:65:
17:e8:ee:d1:0f:f9:6d:d8:5a:bc:a3:2c:22:03:02:
b4:dc:5b:fa:af:32:eb:de:e9:1e:c4:fb:88:32:53:
19:a7:3f:c8:6e:19:26:bf:5b:44:7d:a5:5f:88:01:
65:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:9D:4B:EE:A6:44:B2:0E:79:F3:56:26:2B:48:3D:6E:57:73:E8:2E
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/aJ1L7qZEsg5581YmK0g9bldz6C4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.88.0/23
45.134.91.0/24
193.37.139.0/24
193.148.248.0/22
IPv6:
2a0c:9a40:1::/48
2a0c:9a40:1000::/44
2a0c:9a40:1024::/48
2a0c:9a40:1030::/44
2a0c:9a40:1050::/47
2a0c:9a40:1054::/47
2a0c:9a40:1057::-2a0c:9a40:1058:ffff:ffff:ffff:ffff:ffff
2a0c:9a40:1060::/48
2a0c:9a40:1070::-2a0c:9a40:109f:ffff:ffff:ffff:ffff:ffff
2a0c:9a40:2100::-2a0c:9a40:22ff:ffff:ffff:ffff:ffff:ffff
2a0c:9a40:2400::-2a0c:9a40:2900:ffff:ffff:ffff:ffff:ffff
2a0c:9a40:2a00::/40
2a0c:9a40:2c00::/39
2a0c:9a44::/48
Signature Algorithm: sha256WithRSAEncryption
75:89:a9:e9:0d:b6:95:a9:fd:fa:bd:10:f8:ba:cf:8a:e7:03:
00:ee:0b:27:09:80:97:1d:4f:62:90:bb:7d:c8:42:f3:23:8a:
19:b7:f2:0b:f7:7c:6d:c8:cb:a5:80:8c:3f:7c:fa:ec:9b:6a:
a8:50:f4:a6:6c:70:d0:19:61:9a:98:e7:a6:e8:f6:da:98:6b:
dc:6b:26:2c:2f:0e:47:38:ba:5f:f1:7d:81:32:ad:1c:96:fd:
3a:18:5e:08:b4:08:ff:d1:57:eb:27:af:41:f1:db:51:20:ad:
9a:96:fb:ff:ff:86:f5:22:c2:6c:16:b3:26:d8:39:7e:f0:97:
18:64:69:79:91:06:03:06:03:8a:80:c6:3e:40:2f:5e:5f:83:
9b:45:0b:22:9d:a5:f7:85:9f:2e:fb:e6:7c:24:8a:76:a1:a6:
de:07:b0:5f:bb:e5:8d:35:cb:5a:17:02:7a:b1:1d:20:97:06:
79:6c:80:76:0b:da:21:41:99:83:95:0e:08:52:b6:eb:56:fa:
28:97:90:2d:15:87:26:5a:76:04:2b:d9:61:46:3f:86:de:59:
31:c1:43:2f:c1:de:b7:ba:bd:ca:94:aa:ca:bd:d4:ec:f8:be:
91:46:f5:b0:3d:70:d5:5c:e9:4e:91:46:65:7a:dc:a4:42:8c:
2f:c5:23:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:34 2023 by rpki-client on console-fra.rpki-client.org