Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/riMLTaBfC3uu7jpSjjqm2if95H0.roa
File: riMLTaBfC3uu7jpSjjqm2if95H0.roa (raw, json)
Hash identifier: V/paEJQSYT4L9/J7HChfxUruVZrcIyWle46oarResxA=
Subject key identifier: AE:23:0B:4D:A0:5F:0B:7B:AE:EE:3A:52:8E:3A:A6:DA:27:FD:E4:7D
Certificate issuer: /CN=1a83ce44ae4c701ea971d334dfabbc5b28e6476e
Certificate serial: 01857283738291B311D9ED16DE33E125727F
Authority key identifier: 1A:83:CE:44:AE:4C:70:1E:A9:71:D3:34:DF:AB:BC:5B:28:E6:47:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GoPORK5McB6pcdM036u8WyjmR24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/riMLTaBfC3uu7jpSjjqm2if95H0.roa
Signing time: Mon 02 Jan 2023 12:44:55 +0000
ROA not before: Mon 02 Jan 2023 12:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31122
IP address blocks: 45.134.251.0/24 maxlen: 24
45.134.249.0/24 maxlen: 24
45.140.71.0/24 maxlen: 24
45.140.69.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:83:73:82:91:b3:11:d9:ed:16:de:33:e1:25:72:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a83ce44ae4c701ea971d334dfabbc5b28e6476e
Validity
Not Before: Jan 2 12:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ae230b4da05f0b7baeee3a528e3aa6da27fde47d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d1:75:7b:83:57:6b:19:2f:a0:ba:8c:54:5f:
91:01:2c:07:d8:4c:a3:a5:7c:c3:c0:ec:bd:5e:b8:
6d:73:ea:46:f1:1b:bb:8b:94:00:41:73:23:22:a3:
ce:3b:47:88:08:65:bf:e2:67:af:4b:3c:a8:56:87:
3d:55:a3:f2:70:36:1c:30:50:72:51:9c:bb:ad:4d:
8b:a7:4b:a3:1a:67:93:9d:9d:60:9b:6a:94:0a:22:
a4:56:5b:c7:b4:42:19:26:33:c3:05:02:40:c8:37:
50:33:06:fe:a2:75:b0:2a:2c:7a:25:cd:68:c9:c5:
4b:db:bf:df:71:c5:11:72:dc:76:c3:61:0a:fe:a8:
f8:64:b8:ef:e9:c4:8b:a1:3a:ad:a5:ff:40:86:ac:
19:2d:27:e1:4d:de:0d:c1:76:87:ff:df:bf:ac:3a:
f8:53:03:ff:dc:b7:85:4b:6a:ff:95:34:6d:c0:08:
61:d0:20:a3:cd:ac:e6:16:f5:29:00:8b:cb:02:cf:
88:cc:51:09:df:03:b6:46:10:c2:e2:dc:dc:5a:d9:
ab:67:c5:ff:d4:e5:89:9b:15:16:1a:e0:07:49:3a:
ac:a9:1e:87:cb:71:77:11:de:16:44:70:6f:8c:ed:
00:b5:5e:9a:b2:a3:80:d7:90:3c:b7:2e:46:de:ad:
61:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:23:0B:4D:A0:5F:0B:7B:AE:EE:3A:52:8E:3A:A6:DA:27:FD:E4:7D
X509v3 Authority Key Identifier:
keyid:1A:83:CE:44:AE:4C:70:1E:A9:71:D3:34:DF:AB:BC:5B:28:E6:47:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GoPORK5McB6pcdM036u8WyjmR24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/riMLTaBfC3uu7jpSjjqm2if95H0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/GoPORK5McB6pcdM036u8WyjmR24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.249.0/24
45.134.251.0/24
45.140.69.0/24
45.140.71.0/24
Signature Algorithm: sha256WithRSAEncryption
48:a8:a9:2c:6b:d0:20:01:6c:2e:62:c6:0a:3e:ed:e9:48:27:
65:1f:7e:80:82:15:3a:b0:b2:85:f9:5a:c8:bc:ae:e0:4a:69:
23:40:9a:d7:93:0b:d7:c1:96:4b:5f:46:73:38:ad:9a:f7:72:
55:d4:42:02:09:3b:af:a0:30:29:c5:63:ea:ad:1f:92:0a:22:
2f:49:4e:c6:58:c6:ed:03:20:73:e1:1a:b8:d4:af:b2:48:f8:
03:1e:93:5b:8a:6a:74:25:43:04:12:e9:d7:a0:75:c9:c6:57:
df:69:87:30:b6:cd:26:d9:a4:5e:40:d6:c9:97:b5:05:ae:c1:
a8:8e:92:80:2b:9a:ae:8c:b2:95:e4:3c:92:3d:88:da:8f:ad:
9e:9c:fc:c3:8c:d8:9f:61:32:b8:d9:9f:86:8a:18:21:1a:f7:
5b:43:fb:7e:08:17:6f:bb:8e:15:76:af:6e:ea:db:f5:78:c6:
6f:ca:ff:9f:38:10:d4:0b:31:a3:84:c6:be:c4:1c:19:36:ec:
65:28:7f:c6:f5:43:3d:42:73:d9:85:a9:ba:af:46:91:2a:2c:
89:ce:83:79:70:2a:df:65:91:60:2f:75:a9:6b:64:e6:14:ff:
66:d0:9b:9f:58:7b:a4:89:f9:90:e7:90:6c:c4:83:95:b1:88:
a1:05:64:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:46 2023 by rpki-client on console-ams.rpki-client.org