Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/nP_Y3MBl4NKC-vfv1Wh2zV0o3fI.roa
File: nP_Y3MBl4NKC-vfv1Wh2zV0o3fI.roa (raw, json)
Hash identifier: sJx/CPx4DChYcSQfuGQOekqxn/yu2nHj5KiY5o3ekZs=
Subject key identifier: 9C:FF:D8:DC:C0:65:E0:D2:82:FA:F7:EF:D5:68:76:CD:5D:28:DD:F2
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 01856BC0F4065D9D4788269BDDA7926E3806
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/nP_Y3MBl4NKC-vfv1Wh2zV0o3fI.roa
Signing time: Sun 01 Jan 2023 05:14:45 +0000
ROA not before: Sun 01 Jan 2023 05:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61390
IP address blocks: 45.14.244.0/22 maxlen: 24
45.144.232.0/22 maxlen: 24
45.130.70.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:c0:f4:06:5d:9d:47:88:26:9b:dd:a7:92:6e:38:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Jan 1 05:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9cffd8dcc065e0d282faf7efd56876cd5d28ddf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:20:c4:48:73:dd:7f:a4:05:7e:5d:67:0b:6c:
b1:58:38:81:b1:30:0b:c1:62:d5:d2:c0:91:af:96:
40:f1:56:f7:b0:3b:f4:31:c9:18:10:42:22:95:80:
b3:1e:34:1a:c9:4d:5d:43:bb:cb:85:46:2f:09:17:
35:30:4c:50:b2:db:82:69:a1:e8:b3:68:61:0e:27:
73:51:4c:4e:74:ed:47:b0:91:11:90:88:91:02:09:
6e:cb:cf:7f:c9:89:09:b7:6e:40:21:b6:da:da:82:
0a:14:6a:14:38:da:d0:2e:fa:c7:d9:e9:fe:29:aa:
46:27:ec:e6:af:15:17:f9:91:46:ce:da:9b:3b:59:
8a:1f:cf:27:ac:e7:48:0e:1c:07:2e:81:8f:c5:2a:
99:a3:32:ea:b7:bf:0b:f3:aa:08:1c:b5:05:4f:26:
4f:ed:6e:b1:97:34:59:98:37:56:86:48:9d:c3:94:
fd:dd:77:d7:de:23:c8:a7:ba:fc:fe:1a:8d:6b:f8:
83:84:19:ae:34:35:f0:ba:aa:08:f7:e0:d4:79:ea:
a7:51:2f:58:b9:c5:84:fe:38:45:ae:57:19:78:c4:
12:6d:90:75:95:d0:03:b4:7b:cb:16:0e:6c:88:c4:
da:aa:d8:0f:38:56:44:bb:a4:95:74:01:7b:5d:87:
33:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:FF:D8:DC:C0:65:E0:D2:82:FA:F7:EF:D5:68:76:CD:5D:28:DD:F2
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/nP_Y3MBl4NKC-vfv1Wh2zV0o3fI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.244.0/22
45.130.70.0/23
45.144.232.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:7b:fb:5b:fa:9b:56:f9:98:28:4f:06:81:23:c7:01:4c:ae:
59:9c:10:73:c9:48:e6:98:73:4a:0f:c6:3c:01:89:9d:a4:8c:
c3:4b:10:17:a9:55:6c:d6:dd:e4:be:ec:db:a6:2a:e7:61:93:
9c:12:80:c1:8d:8b:12:b8:be:58:b8:31:fe:fd:c7:90:2b:f3:
09:82:d9:23:43:6d:a6:7f:ec:a4:f3:e0:72:44:d6:1b:b6:4b:
96:03:54:21:a3:7f:c4:5f:5f:60:27:5f:86:a2:6c:4c:10:ee:
c5:f0:11:cd:4d:7f:53:6e:90:73:bd:be:93:74:ac:38:05:05:
40:1a:dd:fd:91:a5:28:49:9c:f9:9a:ef:3d:3e:fe:f8:e5:03:
53:59:8e:9d:96:4f:c1:41:d9:ee:e9:ea:d1:0e:f0:07:8f:ca:
10:d3:f3:8e:69:60:80:49:e9:58:26:38:5f:eb:46:98:5e:33:
46:b6:63:ed:a8:bb:79:b1:d0:0c:80:86:ed:93:33:2d:37:3a:
5e:dc:9d:05:0f:f6:f9:8c:52:42:63:4e:7a:40:97:31:13:da:
9e:5d:3e:5e:01:d0:68:e4:9c:df:d2:3d:41:05:2a:ee:6b:df:
a4:ac:52:d1:4e:5e:cb:57:8c:ff:b5:c9:d8:e4:9c:c3:11:a4:
71:7f:48:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 28 13:16:14 2023 by rpki-client on console-fra.rpki-client.org