Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/5cjkAk_Y_zX7UtZ8NcRKAEwRrGs.roa
File: 5cjkAk_Y_zX7UtZ8NcRKAEwRrGs.roa (raw, json)
Hash identifier: t+zdoF2VUIl9Qr4fmYa5ohu08bpr9cBGp/zk6qez4mY=
Subject key identifier: E5:C8:E4:02:4F:D8:FF:35:FB:52:D6:7C:35:C4:4A:00:4C:11:AC:6B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0186DBEEEF07DC9A68DFF7C7A8A3BBD4C133
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/5cjkAk_Y_zX7UtZ8NcRKAEwRrGs.roa
Signing time: Mon 13 Mar 2023 17:05:14 +0000
ROA not before: Mon 13 Mar 2023 17:05:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200785
IP address blocks: 45.139.106.0/24 maxlen: 24
45.133.251.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:db:ee:ef:07:dc:9a:68:df:f7:c7:a8:a3:bb:d4:c1:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 13 17:05:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e5c8e4024fd8ff35fb52d67c35c44a004c11ac6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f7:4d:25:6d:e4:6b:68:96:cb:68:f5:82:1a:
ad:33:62:6b:5a:c3:95:6c:dd:f9:15:99:aa:d0:9c:
05:fd:d1:dd:5c:e3:24:d8:30:7b:60:6a:40:be:c8:
07:74:1c:82:9d:e8:51:86:04:13:03:a1:0d:97:c8:
cf:87:3e:2b:a6:7e:9b:12:8e:79:42:61:05:52:25:
54:bd:b9:fa:98:f9:29:45:28:b4:40:63:f8:27:e1:
3a:30:61:d2:03:ba:64:d2:24:e7:c3:cf:01:3c:c7:
8f:b2:b3:52:b1:f5:09:4d:db:b4:9e:24:ef:77:1e:
af:3d:2e:ac:40:1a:98:c2:fd:7b:32:8b:c0:a7:83:
9d:f6:ed:39:02:1a:29:58:78:a5:d9:42:60:56:e9:
d0:f8:80:a4:e0:78:be:45:5b:25:ee:52:d7:b0:6a:
37:a2:af:81:87:3c:20:d8:03:28:56:a5:3d:98:ce:
c6:bb:08:d5:ba:0b:8f:3b:28:ba:db:a2:99:8e:f8:
48:4e:db:ac:36:d4:ba:e8:5a:88:56:f6:b0:3a:90:
2a:ff:8b:53:60:36:5d:b2:ee:3f:b3:3a:e9:1e:2e:
d2:6a:0e:b5:6b:09:fb:b6:6c:d9:b3:7f:3b:0e:d5:
56:da:5b:e0:ff:4b:a3:55:5e:dd:ac:38:94:07:1e:
2f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:C8:E4:02:4F:D8:FF:35:FB:52:D6:7C:35:C4:4A:00:4C:11:AC:6B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/5cjkAk_Y_zX7UtZ8NcRKAEwRrGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.251.0/24
45.139.106.0/24
Signature Algorithm: sha256WithRSAEncryption
95:a4:16:91:97:d6:6e:80:cd:39:76:56:4c:63:7a:6e:98:9d:
48:a3:b4:c5:c0:4c:f5:97:42:f3:9b:05:ae:18:73:f6:61:84:
11:02:5f:df:ec:cc:7b:70:af:d0:fc:93:cf:ba:51:94:cd:0f:
5e:8b:74:51:2c:08:89:af:7e:a6:d4:c8:b2:e5:c5:4f:cf:97:
ee:74:7c:86:c6:2b:0f:18:5c:60:f7:91:f3:30:9d:08:ee:e3:
83:0d:ae:c6:e8:b9:39:b1:0f:0f:71:0e:fa:fd:2f:60:6c:e9:
73:77:68:ce:a8:6b:32:a0:1a:d3:67:91:a9:84:d6:cb:8d:07:
df:f0:36:a9:5d:d2:49:2b:21:24:ed:f4:c3:01:32:89:d4:16:
dd:f5:2a:34:0a:68:62:30:f4:d6:e4:74:3b:ee:2d:ca:6a:3f:
e8:73:f1:78:ec:61:a8:60:63:25:97:fc:32:e1:36:5e:30:8e:
94:d0:dc:2f:ee:0b:27:de:39:1f:d0:31:d6:92:0d:2e:b4:01:
7b:40:ca:15:1e:ff:e1:15:08:60:5e:d1:96:21:07:0d:69:bf:
10:72:4f:46:b9:71:12:a7:1e:cc:cf:40:fe:03:a7:fc:f2:9c:
cf:1d:27:bc:80:49:ab:19:80:55:ae:b1:ff:32:f1:7f:a7:43:
75:64:18:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:32 2023 by rpki-client on console-ams.rpki-client.org