Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/s-SJFZY1l6uyYfj8CfivHm6x6pI.roa
File: s-SJFZY1l6uyYfj8CfivHm6x6pI.roa (raw, json)
Hash identifier: uCiiwhCSW49FMKlIvucXjIajBsNy8jDlcO+7Afjq2ZY=
Subject key identifier: B3:E4:89:15:96:35:97:AB:B2:61:F8:FC:09:F8:AF:1E:6E:B1:EA:92
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 018708ECC43E9243B166467DB2284722B741
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/s-SJFZY1l6uyYfj8CfivHm6x6pI.roa
Signing time: Wed 22 Mar 2023 10:45:46 +0000
ROA not before: Wed 22 Mar 2023 10:45:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 45.150.64.0/24 maxlen: 32
45.150.67.0/24 maxlen: 32
45.140.147.0/24 maxlen: 32
45.150.65.0/24 maxlen: 32
45.140.146.0/24 maxlen: 32
185.234.247.0/24 maxlen: 32
45.144.29.0/24 maxlen: 32
45.144.28.0/24 maxlen: 32
45.144.31.0/24 maxlen: 32
45.144.30.0/24 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:08:ec:c4:3e:92:43:b1:66:46:7d:b2:28:47:22:b7:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Mar 22 10:45:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b3e48915963597abb261f8fc09f8af1e6eb1ea92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ed:35:ca:0f:6b:27:57:9b:bb:36:e6:02:1b:
9e:3d:29:66:e4:5b:1a:78:24:41:98:da:01:70:2a:
6d:38:07:be:fa:04:b2:4c:7d:33:45:e5:4b:d7:95:
e1:b0:26:d6:47:26:f8:b3:7b:21:79:05:eb:c3:1c:
dd:6d:72:21:5e:5a:e3:be:60:1b:4a:03:5b:26:0b:
0a:0e:bd:45:ca:8c:f1:2b:e7:42:0a:59:70:d2:4c:
45:a2:71:7d:32:ca:73:8c:62:e6:37:7d:c0:23:10:
08:23:fd:48:a9:c9:f5:85:f8:c4:16:7d:96:d6:f3:
7f:b7:7d:88:fb:cc:9a:4a:d4:10:20:20:65:63:e1:
f3:53:d0:c2:16:62:3d:5a:12:d7:b9:27:b5:37:66:
7d:e3:23:ab:e7:51:75:5d:09:aa:d0:9f:b9:ac:f8:
18:ee:cd:e5:6d:5b:fe:30:1e:95:a5:da:52:43:65:
37:e7:ca:97:cd:d5:36:6c:b1:1a:4b:7c:ba:27:86:
be:73:c3:e0:f7:64:f5:65:4d:98:8e:a7:26:c5:8f:
d1:d8:ac:25:af:a1:0b:92:d3:60:24:bb:7d:8f:94:
ad:87:38:e0:27:69:71:5d:b8:0d:53:35:66:99:35:
d3:19:9c:91:fb:b4:66:32:04:d3:19:8c:e3:2c:88:
a9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E4:89:15:96:35:97:AB:B2:61:F8:FC:09:F8:AF:1E:6E:B1:EA:92
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/s-SJFZY1l6uyYfj8CfivHm6x6pI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.146.0/23
45.144.28.0/22
45.150.64.0/23
45.150.67.0/24
185.234.247.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:c0:7a:05:9f:86:cc:81:2d:14:f0:53:f4:53:3f:60:99:c0:
cd:25:cd:c5:4b:ae:b4:ce:b0:0b:c1:73:82:5a:6f:25:9b:59:
27:72:b5:3b:df:58:60:40:37:ee:32:6b:78:81:4c:9e:a7:56:
42:01:d5:62:35:25:35:25:3a:dc:5e:a6:ca:77:86:18:de:7b:
d2:8b:16:51:44:de:26:f5:2a:4f:44:a0:3f:8c:7d:ab:fc:7b:
4a:90:31:41:12:74:f7:0e:73:de:09:f7:59:f6:ca:1c:ff:8e:
83:da:f2:82:61:7b:a2:51:d4:08:82:7a:36:e5:0b:04:e4:b3:
45:5e:91:8b:31:f5:f9:78:32:bf:7d:31:00:cf:75:13:60:a0:
17:2b:cd:94:75:e3:01:dc:88:3b:aa:78:59:88:a0:55:c8:8e:
dc:db:66:8b:73:85:6c:5a:38:8f:33:b6:b6:9b:fc:11:b6:07:
56:45:17:1d:55:47:24:88:d1:67:1f:de:3f:e8:61:ef:50:74:
3d:3f:41:22:46:78:1b:6d:1d:7e:90:3d:88:61:14:2a:ac:e0:
09:1d:86:de:b6:7e:3a:87:64:f9:07:b1:93:75:66:5c:9c:b9:
d2:72:4b:31:a5:b5:74:9d:8d:f6:bb:aa:cf:05:33:19:41:64:
f6:e7:b5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:23 2023 by rpki-client on console-fra.rpki-client.org