Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/Hz23dBQOGPu3diCOAr4oyeZ2okk.roa
File: Hz23dBQOGPu3diCOAr4oyeZ2okk.roa (raw, json)
Hash identifier: YS8NMheGlx7t3AAY4YKkaHs3mgqa+4W/LbGHFccleGk=
Subject key identifier: 1F:3D:B7:74:14:0E:18:FB:B7:76:20:8E:02:BE:28:C9:E6:76:A2:49
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 01859DECCBADDFF344F7F6693F5062A1E65E
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/Hz23dBQOGPu3diCOAr4oyeZ2okk.roa
Signing time: Tue 10 Jan 2023 23:03:39 +0000
ROA not before: Tue 10 Jan 2023 23:03:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39521
IP address blocks: 45.140.10.0/23 maxlen: 23
45.138.2.0/23 maxlen: 23
45.148.50.0/24 maxlen: 24
45.148.50.0/23 maxlen: 23
45.141.124.0/22 maxlen: 23
194.156.176.0/22 maxlen: 23
213.185.88.0/21 maxlen: 23
45.130.54.0/23 maxlen: 23
195.62.22.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Jan 2023 11:03:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9d:ec:cb:ad:df:f3:44:f7:f6:69:3f:50:62:a1:e6:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Jan 10 23:03:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f3db774140e18fbb776208e02be28c9e676a249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ea:3a:0b:5c:59:03:1e:9f:e1:f1:fe:8a:f4:
df:13:f4:2f:69:a5:15:70:ef:8e:ec:ba:e9:3b:43:
78:84:22:4b:65:5f:34:91:cd:29:85:80:2f:03:f5:
4d:fa:c0:1a:29:de:f0:26:85:c8:b1:5f:09:c2:1c:
67:fb:34:a9:e2:1f:0a:7b:e7:73:32:72:ab:84:6f:
89:24:bd:f8:cc:42:5d:61:e9:a9:2d:a1:aa:63:55:
3d:76:4e:13:c0:70:61:18:75:0f:2a:d1:3e:e4:36:
27:57:22:4c:c8:21:f8:83:14:95:3e:6c:2a:ce:60:
8c:19:31:71:30:11:84:af:ca:b5:d3:97:94:a1:67:
fb:69:d7:8a:c1:f9:68:f4:b8:3f:68:d9:9d:ff:0d:
3c:1e:e9:3e:9f:48:ef:5f:6c:dd:92:36:bc:d5:0c:
35:33:3f:81:9f:a9:fe:c3:33:82:79:a9:5e:5c:20:
1b:1d:9d:c3:fd:df:7c:5a:c8:b8:d9:3c:a0:76:19:
9a:b2:b4:0b:22:f8:d6:2f:78:dd:21:9c:13:7a:92:
3c:83:fb:96:a3:9b:33:15:02:ff:3b:a9:82:e4:07:
c3:0a:37:aa:e4:ff:63:46:e9:fe:ce:69:5c:f8:d6:
2e:0e:1b:fd:c7:6f:de:b1:69:69:ad:c5:8d:4b:fa:
fa:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:3D:B7:74:14:0E:18:FB:B7:76:20:8E:02:BE:28:C9:E6:76:A2:49
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/Hz23dBQOGPu3diCOAr4oyeZ2okk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.54.0/23
45.138.2.0/23
45.140.10.0/23
45.141.124.0/22
45.148.50.0/23
194.156.176.0/22
195.62.22.0/23
213.185.88.0/21
Signature Algorithm: sha256WithRSAEncryption
41:4a:0a:3d:f0:56:db:29:d2:c7:d6:ae:c6:7f:bf:11:66:95:
52:09:0b:22:38:d7:bf:d2:d1:af:a3:b2:e0:2e:d0:eb:f7:7b:
4e:d6:16:fd:4b:8d:58:db:7d:43:37:04:80:30:50:bc:bc:86:
dc:a5:09:79:3d:37:46:fa:f8:87:fe:b8:69:8d:f4:f5:11:e4:
ab:5c:78:db:ba:8b:7c:a1:61:4b:fe:9c:fd:8a:79:4d:e6:39:
6e:7a:ec:7c:f5:82:9f:00:60:49:1c:60:56:69:00:f2:f0:d0:
fe:cd:15:09:33:24:30:61:e1:a7:35:a2:7d:9e:43:6c:f4:40:
fd:0d:40:a6:5c:85:a0:32:2c:ad:74:76:8e:d2:d5:0e:3e:3b:
df:8d:cc:98:e2:9e:ff:0b:57:ee:f1:db:55:e6:7a:d3:8e:10:
cc:60:71:0a:f5:e0:eb:ac:0d:c4:53:a1:c9:0b:04:18:4c:0f:
b7:f1:21:f1:62:0e:28:b0:6e:2c:6d:37:17:7a:f3:60:67:00:
85:63:cf:56:fe:32:65:97:14:db:f7:01:1f:4e:38:ae:ac:9e:
c2:82:db:81:5c:31:1e:71:0b:05:cf:e4:73:8a:89:64:74:7c:
b6:20:97:16:48:f6:d6:2a:7b:6d:58:e6:9c:6b:c4:8e:2c:f8:
01:d2:8e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:17 2024 by rpki-client on console-ams.rpki-client.org