Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/x3OGZ67_ORcOAYL1yltXOC_bG_w.roa
File: x3OGZ67_ORcOAYL1yltXOC_bG_w.roa (raw, json)
Hash identifier: dOKhYBYHZGv6rSjTw07eXGMcd7ARvYy8zzPhkTY2K3w=
Subject key identifier: C7:73:86:67:AE:FF:39:17:0E:01:82:F5:CA:5B:57:38:2F:DB:1B:FC
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 018963C6870A1E1190398C5C6E8DC944BE82
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/x3OGZ67_ORcOAYL1yltXOC_bG_w.roa
Signing time: Mon 17 Jul 2023 12:15:02 +0000
ROA not before: Mon 17 Jul 2023 12:15:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39521
IP address blocks: 45.140.10.0/23 maxlen: 23
45.138.2.0/23 maxlen: 23
45.148.50.0/24 maxlen: 24
45.141.124.0/22 maxlen: 23
213.185.88.0/21 maxlen: 23
45.130.54.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 18 Sep 2023 08:40:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:63:c6:87:0a:1e:11:90:39:8c:5c:6e:8d:c9:44:be:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Jul 17 12:15:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7738667aeff39170e0182f5ca5b57382fdb1bfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0a:dc:2a:cd:3d:d1:09:c9:24:09:f5:a0:c2:
bd:19:8f:5a:3e:08:7e:de:01:e8:31:2a:cf:12:55:
91:e6:5f:04:d0:b9:5d:b6:21:7b:a1:23:58:70:98:
3a:4a:a5:c3:fb:8d:7f:b8:8f:e7:9e:38:55:0f:c1:
97:df:2c:2b:01:1d:d7:fa:f9:4d:76:63:3c:12:dc:
20:30:80:c2:73:5a:b8:b3:17:a3:cd:d2:f3:81:bb:
9b:20:6b:b3:75:85:c6:96:dc:41:95:17:25:51:ab:
7c:6c:a7:58:06:aa:79:e5:d9:42:f6:4b:0c:f3:27:
8a:6e:f2:ff:26:71:8a:22:74:90:d9:71:09:81:80:
fb:2d:4e:a0:5d:a2:e2:6e:ba:d3:70:47:92:54:39:
66:35:b7:51:8c:1f:2c:6e:25:f4:b4:c8:f0:7f:f9:
4f:8a:a4:c5:28:02:d3:57:20:6e:14:44:8f:e4:91:
24:76:88:69:17:56:9e:74:c1:1a:4f:e9:01:26:9a:
be:5a:12:8f:32:7d:60:a0:e8:96:d0:54:c2:f5:f3:
d7:dd:c5:68:ec:da:e8:f3:a3:66:e4:af:bb:8d:a6:
3c:3c:02:d7:b0:b2:0e:b3:54:d3:a7:e3:c7:10:98:
62:2a:b3:64:74:f0:d4:c0:91:bb:3a:c4:ea:3f:36:
b2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:73:86:67:AE:FF:39:17:0E:01:82:F5:CA:5B:57:38:2F:DB:1B:FC
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/x3OGZ67_ORcOAYL1yltXOC_bG_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.54.0/23
45.138.2.0/23
45.140.10.0/23
45.141.124.0/22
45.148.50.0/24
213.185.88.0/21
Signature Algorithm: sha256WithRSAEncryption
62:ad:be:85:07:08:da:72:6d:a8:be:7e:3f:8c:76:ed:73:a4:
bc:c8:eb:67:60:0c:0b:cd:8b:9d:3c:30:3f:b6:da:28:3b:e4:
ca:fd:6d:c9:c4:f1:3c:68:87:cf:b8:62:b8:0a:a7:7f:34:3f:
f6:76:81:70:f3:0f:0f:f6:9d:a9:98:96:d1:bc:0d:e0:58:83:
57:e9:00:08:b6:57:80:54:92:65:d9:e8:37:19:f6:a1:25:19:
3e:ec:e2:ba:c7:47:40:58:e4:8e:2f:f5:31:6e:50:1b:b0:0c:
ca:e5:a1:3f:95:06:08:a6:23:81:5a:61:7d:2b:f9:5d:d3:2b:
1a:86:4d:c6:33:2a:f4:cb:8a:eb:ce:ca:50:42:14:ef:44:48:
15:6f:08:13:cb:0e:db:f1:01:e7:a5:9b:2f:12:3f:18:83:31:
a3:87:25:a8:fb:f6:67:80:8c:76:ad:48:53:24:e9:f5:57:ec:
d1:d5:00:2a:2b:30:9f:d0:0a:ca:9d:21:11:ef:b6:7e:93:1c:
09:ac:5e:4c:7b:5d:e6:42:61:8d:a7:62:a8:3f:e4:d9:52:5a:
74:ec:5f:fd:a1:7f:73:39:cf:d1:45:ae:5f:b7:bc:92:6c:25:
be:10:b0:89:50:ec:e6:95:ba:34:54:e1:1f:70:1c:fc:c2:34:
99:23:09:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:17 2024 by rpki-client on console-ams.rpki-client.org