Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/Awt1sC4J-jNes8g3TOpiW8uEUt8.roa
File: Awt1sC4J-jNes8g3TOpiW8uEUt8.roa (raw, json)
Hash identifier: t6GMu2N2wzXfHXFM2mbnURBKERv7JnEPBKuwjXC523o=
Subject key identifier: 03:0B:75:B0:2E:09:FA:33:5E:B3:C8:37:4C:EA:62:5B:CB:84:52:DF
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 018636FBF9D11726E723D37394EEFB5A6545
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/Awt1sC4J-jNes8g3TOpiW8uEUt8.roa
Signing time: Thu 09 Feb 2023 16:22:08 +0000
ROA not before: Thu 09 Feb 2023 16:22:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35913
IP address blocks: 178.218.145.0/24 maxlen: 24
45.90.145.0/24 maxlen: 24
45.90.146.0/24 maxlen: 24
185.186.67.0/24 maxlen: 24
185.234.74.0/24 maxlen: 24
185.234.75.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:36:fb:f9:d1:17:26:e7:23:d3:73:94:ee:fb:5a:65:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Feb 9 16:22:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=030b75b02e09fa335eb3c8374cea625bcb8452df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f3:94:49:01:b7:c0:0a:8c:25:8c:84:3c:63:
34:b0:e1:c4:52:41:6e:2b:15:fa:8a:ec:d6:bc:f0:
39:3a:9e:61:22:46:01:29:f2:eb:de:92:5c:69:d8:
3a:b9:91:8a:fa:80:c0:09:21:bd:94:0d:d1:69:e5:
94:a8:54:ac:32:c7:3c:3b:bc:73:5c:64:3e:3d:a5:
9b:0c:46:32:2a:e7:b7:d0:9a:49:4f:89:bc:07:4e:
3f:25:1f:79:4c:27:f9:d8:34:5d:2b:76:73:f9:54:
2d:fe:18:04:45:b8:ea:22:7d:29:b7:ff:4f:f8:7d:
03:d8:e7:c4:ad:a0:af:61:0b:53:72:00:c5:81:60:
47:c1:b4:9a:12:ea:73:11:f3:11:d3:3a:ce:e7:85:
f4:dc:1e:e3:a5:79:f2:94:28:c1:52:d1:47:e5:27:
13:c5:a9:2b:85:a5:7d:8d:ba:3c:d6:de:45:92:c4:
ec:5c:9c:90:41:13:4d:b6:92:1c:a3:a6:78:3a:ea:
7f:c6:2f:af:ba:82:05:21:c2:9f:07:ea:68:8e:1f:
af:75:78:ff:9b:6a:2d:b6:d1:e8:57:4e:a7:91:aa:
f1:9a:c8:a2:f0:81:63:2b:e6:83:77:90:ee:bb:4c:
50:3d:2f:bc:2d:0d:78:10:21:e6:57:de:7a:1f:e9:
ae:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:0B:75:B0:2E:09:FA:33:5E:B3:C8:37:4C:EA:62:5B:CB:84:52:DF
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/Awt1sC4J-jNes8g3TOpiW8uEUt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.145.0-45.90.146.255
178.218.145.0/24
185.186.67.0/24
185.234.74.0/23
Signature Algorithm: sha256WithRSAEncryption
9f:b8:f5:b1:4b:e6:88:08:8a:27:db:c7:c3:96:76:37:e9:17:
c6:8a:06:7a:8a:5d:2a:fb:82:04:a3:86:42:1d:cc:d8:54:c1:
cf:04:8e:0e:6e:53:4e:9f:ff:48:55:05:41:7a:91:46:67:9c:
08:88:10:e2:8d:73:cd:5b:49:f2:8a:1d:ac:a3:e9:5e:f7:6c:
ce:a8:3b:8b:47:a1:5b:de:06:90:65:80:f9:88:60:63:81:c2:
84:f6:72:80:f3:22:8d:04:20:54:11:c2:6a:16:e3:74:81:49:
f6:c9:ba:07:01:5d:10:12:6b:c3:d7:4e:98:f0:9f:c0:d5:47:
9f:08:9a:3d:13:61:3e:57:b0:45:3c:68:ef:36:c2:c3:92:f7:
87:bc:5f:35:4b:e0:97:c9:39:a6:55:4d:b5:37:40:46:c6:c8:
bf:71:41:21:11:3e:7a:44:e2:fa:7c:b7:e4:71:84:6a:a4:bc:
ba:41:f7:98:9e:81:d1:78:2d:2a:74:06:cd:e7:5e:49:89:21:
76:e5:b5:a6:0c:e1:4f:37:17:7b:24:1b:75:10:97:9c:5a:5f:
df:89:84:2e:a3:6f:38:4b:25:1e:5b:7b:06:79:3b:dc:4c:3b:
22:0e:f0:c7:30:d3:94:c2:6e:13:d1:1c:3e:60:f2:eb:a9:75:
67:f9:8a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:26 2023 by rpki-client on console-ams.rpki-client.org