Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/2NO1JcwhnfS9O9FC6lJcpkC65g0.roa
File: 2NO1JcwhnfS9O9FC6lJcpkC65g0.roa (raw, json)
Hash identifier: lda6IUNYlZ+tfVZr9JtJFwnhW+hzLgw/Z2TiW2bq9dk=
Subject key identifier: D8:D3:B5:25:CC:21:9D:F4:BD:3B:D1:42:EA:52:5C:A6:40:BA:E6:0D
Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial: 018805C977301445B2BB40C056B17BF7FE7F
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/2NO1JcwhnfS9O9FC6lJcpkC65g0.roa
Signing time: Wed 10 May 2023 13:11:09 +0000
ROA not before: Wed 10 May 2023 13:11:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5511
IP address blocks: 91.228.231.0/24 maxlen: 24
45.135.10.0/24 maxlen: 24
45.135.8.0/24 maxlen: 24
91.228.251.0/24 maxlen: 24
45.136.218.0/24 maxlen: 24
45.136.216.0/24 maxlen: 24
91.229.25.0/24 maxlen: 24
45.138.78.0/24 maxlen: 24
45.139.34.0/24 maxlen: 24
45.139.32.0/24 maxlen: 24
45.138.76.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:05:c9:77:30:14:45:b2:bb:40:c0:56:b1:7b:f7:fe:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Validity
Not Before: May 10 13:11:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d8d3b525cc219df4bd3bd142ea525ca640bae60d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a7:c9:b4:2b:e5:b9:b8:a8:a6:16:8a:39:fc:
0a:16:92:17:20:50:17:0d:76:bd:a9:b2:6e:a8:11:
f4:8a:f9:48:95:76:ee:85:8f:7f:d2:14:68:87:5a:
ef:e6:db:3d:fa:0e:ee:b5:9f:48:3f:c6:97:75:42:
1a:41:26:0d:5f:ce:fd:44:9d:82:dd:48:45:50:1a:
f6:1c:62:19:db:60:4a:dc:4c:56:76:5f:5e:b7:53:
69:8d:dd:a1:62:38:6f:36:11:4c:df:89:e0:71:56:
f1:18:72:3f:e0:31:00:42:a6:ee:f7:bf:7e:e2:8b:
24:cf:35:43:ec:87:09:3f:be:5a:41:b4:8f:f8:0c:
24:07:24:aa:70:5a:d9:4a:e5:b3:89:3d:03:5f:05:
46:2c:4b:ea:73:12:dd:a9:19:bd:57:d0:af:a3:58:
48:2f:cb:29:fc:69:7f:11:8e:32:5d:54:8f:ea:3b:
d9:02:af:b0:a0:12:56:98:28:ff:e2:0c:21:c5:17:
f0:ca:3e:c2:45:38:27:6e:e7:d1:45:18:98:2b:5f:
20:c4:3f:8b:45:a7:90:9c:da:eb:e6:d2:9b:4b:54:
0f:24:41:d4:68:32:13:7e:86:82:1f:ef:7f:be:e9:
47:bd:ae:53:89:f4:0a:e8:26:05:98:c8:81:3a:bf:
74:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D3:B5:25:CC:21:9D:F4:BD:3B:D1:42:EA:52:5C:A6:40:BA:E6:0D
X509v3 Authority Key Identifier:
keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/2NO1JcwhnfS9O9FC6lJcpkC65g0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.8.0/24
45.135.10.0/24
45.136.216.0/24
45.136.218.0/24
45.138.76.0/24
45.138.78.0/24
45.139.32.0/24
45.139.34.0/24
91.228.231.0/24
91.228.251.0/24
91.229.25.0/24
Signature Algorithm: sha256WithRSAEncryption
05:2d:c9:88:c0:54:80:02:33:70:f2:94:27:b6:8b:63:56:47:
f9:e4:db:b8:1a:28:68:2a:78:41:99:46:27:12:b9:f5:43:bd:
7d:c4:5d:3b:1b:12:ff:e3:26:ba:56:67:c0:50:fb:ff:ea:84:
40:65:cb:db:f7:8a:98:5f:98:cd:92:7c:20:f1:72:f7:57:b3:
c9:f5:83:47:67:e0:2a:2b:4c:5d:b9:64:01:29:ba:ba:c9:f0:
86:86:88:68:93:ab:7a:32:86:d1:4e:62:f6:a4:90:90:7e:62:
e9:66:9f:20:8d:4c:da:70:95:0a:b5:b3:2d:e6:32:14:05:56:
75:b1:fa:c3:f2:9f:e0:2a:8f:af:10:25:62:3d:b5:e0:89:16:
2a:ee:6d:a0:76:a8:9a:73:1c:1b:91:48:ed:38:02:47:8f:11:
87:fa:b7:a7:9c:91:83:cd:03:9f:c4:e6:d2:9b:08:35:e8:ee:
b1:d4:01:0b:c4:48:44:b1:e0:b2:23:3b:54:d9:29:03:04:e0:
16:1d:9e:ee:1f:af:29:30:20:be:b5:f3:ad:32:17:c0:6f:c8:
2c:b5:d7:58:2e:62:8d:49:27:2d:ac:0d:c2:a1:f7:cf:c9:c7:
f2:22:64:cb:6d:08:72:27:b7:ec:68:ef:2d:60:64:b6:26:a9:
8f:0c:75:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 11 10:27:41 2023 by rpki-client on console-fra.rpki-client.org