Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/aSg8WYAkTG9dqxDo21sFzerOi-s.roa
File: aSg8WYAkTG9dqxDo21sFzerOi-s.roa (raw, json)
Hash identifier: vxo9Xv+QzOjtbWzz3om7D8TMlrHEV1jbou5wjtAvTZY=
Subject key identifier: 69:28:3C:59:80:24:4C:6F:5D:AB:10:E8:DB:5B:05:CD:EA:CE:8B:EB
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 01859C8D38F7E840CF73ABEDFB81DC398F96
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/aSg8WYAkTG9dqxDo21sFzerOi-s.roa
Signing time: Tue 10 Jan 2023 16:39:38 +0000
ROA not before: Tue 10 Jan 2023 16:39:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39521
IP address blocks: 45.140.10.0/23 maxlen: 23
45.138.2.0/23 maxlen: 23
45.148.50.0/23 maxlen: 24
45.141.124.0/22 maxlen: 23
194.156.176.0/22 maxlen: 23
213.185.88.0/21 maxlen: 23
45.130.54.0/23 maxlen: 23
195.62.22.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Jan 2023 16:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9c:8d:38:f7:e8:40:cf:73:ab:ed:fb:81:dc:39:8f:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Jan 10 16:39:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=69283c5980244c6f5dab10e8db5b05cdeace8beb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a2:85:b5:d7:49:10:00:79:91:ae:ba:5e:67:
e9:b9:56:fe:99:fd:88:63:a4:28:57:9c:f1:97:f3:
55:0e:04:24:e3:82:bc:73:1e:f0:57:84:37:05:99:
9e:ed:a1:2c:b8:97:50:67:d2:06:f6:65:06:f4:ff:
4c:c1:29:bf:b0:a4:b9:93:69:65:ff:0b:9c:02:6a:
a5:bc:65:04:fb:50:f0:d7:0f:d7:d8:21:82:fd:bd:
2b:f6:60:d3:47:b7:0e:8e:c8:2a:5e:8b:ea:18:56:
83:71:44:fe:be:39:98:4a:ca:c6:4c:fd:e3:b1:47:
c4:69:5d:d6:fc:78:ee:9a:9b:c2:84:cf:fd:c8:20:
c2:fe:d7:ff:cb:5b:f4:5a:6c:7a:f8:87:f2:be:5a:
ca:28:78:ad:75:90:e0:9c:f1:87:d6:32:9b:1a:95:
83:65:4d:ee:27:22:6f:99:c0:40:cd:34:92:6d:89:
7c:d3:58:7d:5d:a9:4a:7d:3d:a4:1a:13:b8:4f:ca:
06:36:b7:44:c2:57:d6:c6:e2:8e:ce:70:db:b9:60:
f7:c5:3f:d1:17:b6:fa:a7:7f:a4:1d:fd:0b:c6:98:
fa:cd:27:c7:6b:e5:e0:37:2d:50:af:4d:13:30:8e:
28:fc:bc:d2:bb:0c:61:d9:21:ff:e0:36:f3:2a:ea:
a8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:28:3C:59:80:24:4C:6F:5D:AB:10:E8:DB:5B:05:CD:EA:CE:8B:EB
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/aSg8WYAkTG9dqxDo21sFzerOi-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.54.0/23
45.138.2.0/23
45.140.10.0/23
45.141.124.0/22
45.148.50.0/23
194.156.176.0/22
195.62.22.0/23
213.185.88.0/21
Signature Algorithm: sha256WithRSAEncryption
0b:20:21:e5:33:7f:c9:8b:63:a9:e8:7a:a5:5e:b0:b6:06:99:
4f:98:c5:f6:09:b3:77:d1:50:13:19:e1:d3:1b:49:e0:2d:67:
44:d6:d0:e8:78:15:17:e0:9c:19:3f:84:f1:ad:34:a3:27:74:
d9:75:98:5a:71:55:5b:ad:d4:8e:54:93:64:a2:99:29:03:14:
a0:9c:99:67:3d:13:2e:d3:ac:e1:ec:1c:f9:c2:d9:bd:78:8a:
43:a2:b3:b9:b4:f8:ff:f7:bc:38:c6:36:9f:41:31:03:cd:45:
41:bd:c3:65:9f:4f:70:2c:25:e4:cd:5f:e4:a9:41:6e:df:d7:
97:e6:d0:96:81:fc:bb:06:4a:89:bb:dd:bb:f2:98:37:29:7f:
3e:ca:72:a1:09:17:f0:c8:9d:f4:6a:a3:69:0d:ee:96:ae:df:
dd:f5:ec:6b:20:18:c9:0b:77:9d:a1:e0:13:47:e4:de:40:4f:
02:bd:4a:5f:ee:af:e9:9f:2b:75:89:59:d7:4a:15:63:bf:41:
ee:f9:b2:f1:3c:23:b5:97:e7:0e:9c:df:38:40:9f:32:3d:61:
85:db:a4:87:ac:db:79:e4:7c:58:59:5b:d4:7a:84:69:8c:b2:
19:a7:44:51:a9:a7:bc:e1:8a:d2:b1:7d:a9:26:7a:1d:5f:6f:
06:b3:3e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:17 2024 by rpki-client on console-ams.rpki-client.org