Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/cwZuMFGlUv_OkGc2BgFTjZQbLi8.roa
File: cwZuMFGlUv_OkGc2BgFTjZQbLi8.roa (raw, json)
Hash identifier: IBxyIZxnAlKr/3c5M4K0V03VwfR5jU0ePyPWXkfsP7M=
Subject key identifier: 73:06:6E:30:51:A5:52:FF:CE:90:67:36:06:01:53:8D:94:1B:2E:2F
Certificate issuer: /CN=4426d9b3a78543b6964335ee1941ca2971c5694e
Certificate serial: 01856C0A2E4524FF63E710633DEE161CDBFA
Authority key identifier: 44:26:D9:B3:A7:85:43:B6:96:43:35:EE:19:41:CA:29:71:C5:69:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/cwZuMFGlUv_OkGc2BgFTjZQbLi8.roa
Signing time: Sun 01 Jan 2023 06:34:44 +0000
ROA not before: Sun 01 Jan 2023 06:34:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9051
IP address blocks: 45.155.132.0/22 maxlen: 22
45.155.133.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:0a:2e:45:24:ff:63:e7:10:63:3d:ee:16:1c:db:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4426d9b3a78543b6964335ee1941ca2971c5694e
Validity
Not Before: Jan 1 06:34:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73066e3051a552ffce9067360601538d941b2e2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f9:7d:95:49:f4:fc:41:f2:07:92:6e:b5:76:
c9:96:48:12:a1:7c:63:49:a6:78:6e:d1:7a:7a:1d:
63:7d:37:b1:ac:24:11:76:8d:1b:b3:ba:f9:92:ee:
18:ad:19:0f:2c:8b:0f:d3:86:4f:15:73:06:d9:09:
3a:3e:71:ba:23:82:a0:87:03:e2:d2:89:ba:47:43:
fb:4d:2c:22:53:27:86:80:81:4b:43:f8:73:ec:be:
c7:07:57:f3:b0:e0:70:d1:90:0c:6e:23:71:e9:84:
67:93:bd:f4:c9:22:3a:4c:99:e1:6c:71:71:81:c3:
75:81:76:aa:ce:32:f9:7f:5d:2b:08:ce:32:0f:99:
24:8f:36:48:3c:3e:14:9b:51:f5:07:27:ba:dd:d7:
13:7c:40:9c:0b:87:f5:2f:b9:2d:43:00:29:95:92:
07:c8:aa:b1:e2:aa:82:d2:9e:fb:c7:2c:50:ab:bf:
51:5f:5e:9c:3c:5f:8a:c4:b5:7d:ed:db:dd:67:fd:
e2:75:78:a8:d4:9a:d3:d9:34:0c:7d:8f:48:6e:2b:
a0:95:de:69:41:78:ac:00:88:f5:ae:4f:d0:ae:91:
ff:68:28:cd:8e:f8:91:9d:75:2b:8d:a0:91:60:ba:
78:73:02:d2:52:c6:09:89:31:ce:95:bc:c2:c3:2a:
67:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:06:6E:30:51:A5:52:FF:CE:90:67:36:06:01:53:8D:94:1B:2E:2F
X509v3 Authority Key Identifier:
keyid:44:26:D9:B3:A7:85:43:B6:96:43:35:EE:19:41:CA:29:71:C5:69:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/cwZuMFGlUv_OkGc2BgFTjZQbLi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.132.0/22
Signature Algorithm: sha256WithRSAEncryption
94:23:75:0c:3d:3f:e9:72:fa:8e:e6:45:f4:7e:89:62:13:2c:
78:7e:c2:9a:1b:4d:d0:60:95:32:aa:de:5a:c9:ba:63:83:ea:
5e:95:c2:ad:e9:91:ad:51:c3:32:2f:62:be:df:b1:18:33:c5:
ad:4a:a3:93:b0:4d:93:20:87:19:0d:8b:23:7e:8c:60:b8:70:
64:cf:4d:b0:21:de:81:db:f8:b3:1b:0c:82:fc:53:45:b0:37:
9e:10:c8:1b:aa:89:38:ee:e1:75:e6:e5:aa:49:38:d1:26:e6:
44:fb:9a:9d:c2:f7:bd:26:8a:10:2d:10:48:6b:43:96:83:9f:
c4:44:71:31:06:1c:0f:dd:37:c7:b0:d7:f7:51:88:42:7b:e5:
d8:dd:66:95:05:3b:1c:d3:78:d2:dc:33:61:75:44:7a:24:9b:
5a:e7:3a:1b:da:3a:cd:62:3c:6d:35:b9:9e:38:61:fa:f2:32:
fe:83:fc:37:92:14:50:f8:9f:d2:85:96:84:f0:ec:b1:29:5b:
9a:52:2f:fe:99:a8:b6:86:96:8a:3f:e9:eb:9e:2b:88:5e:62:
a3:8a:58:57:55:0e:26:ee:64:15:ab:7d:25:6c:32:8e:75:96:
aa:cc:05:99:09:06:8b:e7:d6:d5:29:67:bf:50:79:07:d3:4e:
c3:20:5b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:39:21 2024 by rpki-client on console-fra.rpki-client.org