Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/s_LLnnKp_C8hZIgE62UnXIZKbF4.roa
File: s_LLnnKp_C8hZIgE62UnXIZKbF4.roa (raw, json)
Hash identifier: B5OdFzHsRM9qABAzp718NcV/1ltdQCoKfD3zfxEzJHo=
Subject key identifier: B3:F2:CB:9E:72:A9:FC:2F:21:64:88:04:EB:65:27:5C:86:4A:6C:5E
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 018AA9241AAC2CD0F713C3DC2DF64712CBAE
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/s_LLnnKp_C8hZIgE62UnXIZKbF4.roa
Signing time: Mon 18 Sep 2023 16:33:50 +0000
ROA not before: Mon 18 Sep 2023 16:33:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 45.91.52.0/22 maxlen: 32
45.155.52.0/22 maxlen: 32
195.16.74.0/24 maxlen: 24
45.150.64.0/24 maxlen: 32
45.150.67.0/24 maxlen: 32
45.150.65.0/24 maxlen: 32
45.140.166.0/24 maxlen: 32
5.181.20.0/24 maxlen: 32
45.140.167.0/24 maxlen: 32
5.181.22.0/24 maxlen: 32
5.181.21.0/24 maxlen: 32
185.234.247.0/24 maxlen: 32
5.181.23.0/24 maxlen: 32
45.144.29.0/24 maxlen: 32
45.144.28.0/24 maxlen: 32
45.144.31.0/24 maxlen: 32
45.144.30.0/24 maxlen: 32
45.140.147.0/24 maxlen: 32
45.140.146.0/24 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a9:24:1a:ac:2c:d0:f7:13:c3:dc:2d:f6:47:12:cb:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Sep 18 16:33:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b3f2cb9e72a9fc2f21648804eb65275c864a6c5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:29:97:ae:4e:59:4e:77:e9:a0:24:83:56:2a:
3d:69:27:4c:4c:3f:84:89:b4:c3:3f:67:d1:f1:97:
3a:e5:eb:2f:76:a9:3f:1e:e8:be:ea:74:ec:d8:9b:
32:98:e7:6b:5c:27:7b:3c:3a:fa:79:05:81:4c:bc:
09:1b:e5:75:0c:1e:53:8c:ba:30:15:6d:9d:d2:58:
eb:4f:a6:92:88:f0:94:f9:ec:b5:3d:de:dd:03:28:
6d:8e:3a:42:00:a4:39:ce:60:79:c0:45:5b:03:60:
d3:98:43:d4:b7:9b:e8:0f:ca:cd:79:42:e1:e8:4d:
50:d8:7d:03:0c:5c:e6:d9:4d:2e:86:5d:58:a8:1a:
e3:73:2a:03:49:12:25:e5:69:dc:f8:5d:42:4c:58:
e7:db:39:61:8c:ec:7e:b8:00:b8:5a:94:17:8d:f7:
d2:3b:0b:ac:79:d4:89:84:07:09:59:72:b2:60:d3:
b4:b3:dd:93:03:c4:40:70:d3:d0:d5:c1:0d:d7:70:
fa:e0:dd:a7:4a:f7:6f:f3:a5:ac:30:50:85:24:54:
02:36:bb:88:9c:fa:39:fe:60:6a:28:90:cf:b3:76:
fb:4c:e9:ce:9f:d8:d9:dd:8d:41:09:d0:63:88:8c:
17:da:13:f4:d5:05:e7:8a:f1:ac:8f:5e:86:52:1e:
6e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F2:CB:9E:72:A9:FC:2F:21:64:88:04:EB:65:27:5C:86:4A:6C:5E
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/s_LLnnKp_C8hZIgE62UnXIZKbF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.20.0/22
45.91.52.0/22
45.140.146.0/23
45.140.166.0/23
45.144.28.0/22
45.150.64.0/23
45.150.67.0/24
45.155.52.0/22
185.234.247.0/24
195.16.74.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:03:fc:58:4f:d7:95:f1:c9:c3:a4:85:54:d4:60:1c:c3:e5:
ae:1e:fb:bc:75:de:2c:96:ef:df:8d:1c:7d:f9:1e:26:36:75:
2e:ee:f7:48:41:1b:1d:7b:b4:58:ad:a4:26:20:0f:7a:36:cb:
e1:e7:5a:40:d7:30:79:26:69:8b:4c:56:a3:fa:65:19:e5:d1:
6c:e3:c2:10:30:d0:8b:82:4b:d0:c7:b9:9f:cf:85:06:58:f7:
b3:c3:1e:fb:f8:3f:7d:ef:c0:22:37:67:c3:13:8d:39:45:1b:
2c:a7:c6:3d:a8:b7:7e:6f:96:bb:fb:76:f3:57:dc:af:a2:e9:
1e:b6:f4:a7:56:87:fc:8d:e8:9b:4b:ff:a8:36:dc:4e:cb:30:
1b:80:95:ad:5e:4b:8d:3b:1a:57:ed:53:f8:90:da:86:f5:f2:
fe:7c:19:74:6c:9a:0c:26:fb:f0:f6:61:4e:a6:53:78:b6:61:
ff:94:96:56:45:34:f8:90:37:d6:02:3a:df:0d:87:70:bc:30:
f5:e5:cd:55:36:d3:f7:a2:61:da:45:b0:3c:f0:0b:7c:51:4f:
76:31:60:ce:d7:6b:3f:7d:14:fb:98:4a:97:71:c4:08:b3:45:
66:99:18:46:d5:51:83:b5:1b:97:05:5d:4c:78:b4:ff:2c:37:
91:42:25:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 21 00:36:56 2023 by rpki-client on console-fra.rpki-client.org