Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/4VTVr_aL8ajayHjtuJ6u0RUMQpE.roa
File: 4VTVr_aL8ajayHjtuJ6u0RUMQpE.roa (raw, json)
Hash identifier: PQUf+SMTIBGGXAN1vVG/LPkoV+x7iJ/nGvif0L9Rjwo=
Subject key identifier: E1:54:D5:AF:F6:8B:F1:A8:DA:C8:78:ED:B8:9E:AE:D1:15:0C:42:91
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 018A18091DD78D1451A816117DCF3B61CE2B
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/4VTVr_aL8ajayHjtuJ6u0RUMQpE.roa
Signing time: Mon 21 Aug 2023 12:19:25 +0000
ROA not before: Mon 21 Aug 2023 12:19:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12679
IP address blocks: 45.151.98.0/24 maxlen: 24
94.137.78.0/24 maxlen: 24
94.137.72.0/24 maxlen: 24
94.137.91.0/24 maxlen: 24
94.137.90.0/24 maxlen: 24
94.137.89.0/24 maxlen: 24
94.137.93.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:18:09:1d:d7:8d:14:51:a8:16:11:7d:cf:3b:61:ce:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: Aug 21 12:19:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e154d5aff68bf1a8dac878edb89eaed1150c4291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b2:1b:7d:c1:31:0c:50:95:a6:4f:3d:6e:20:
a5:20:b3:cc:71:3a:a3:15:2a:8c:58:b7:9e:0e:8c:
9f:4c:56:47:ef:48:38:fd:02:71:43:8b:8b:1b:f5:
57:52:97:87:51:18:0b:af:1d:1d:03:dc:0f:7a:1f:
57:4d:9d:05:00:0d:4e:ec:66:75:a4:d4:4e:18:aa:
d9:8e:da:48:99:e0:66:02:35:97:be:0f:1e:fa:f0:
af:b6:f1:d7:50:60:71:74:29:8b:76:22:40:69:00:
d1:e9:1a:29:d3:7b:41:8e:bf:47:e8:ee:98:2b:8b:
98:a0:17:de:a2:fd:60:f9:92:cf:5c:1f:87:12:ac:
08:84:54:49:3d:64:b5:9d:4a:8b:fe:6b:0e:66:92:
d0:e0:1f:23:f2:ac:ef:e2:be:96:06:91:5e:36:36:
d5:05:52:15:34:5c:4c:6c:89:e5:50:db:47:ec:7f:
85:b9:f2:7d:0f:5d:32:41:13:44:e7:bf:35:f2:d9:
83:b1:82:b9:b6:86:e7:4d:b0:66:ac:73:bd:f9:1e:
fe:cc:9e:08:7e:fb:19:88:8a:37:29:66:44:44:db:
f5:95:dd:69:4b:22:ec:d4:da:1a:48:b2:38:68:76:
b1:5c:d5:5f:47:ec:50:7d:ec:9b:0d:07:b5:cf:1a:
94:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:54:D5:AF:F6:8B:F1:A8:DA:C8:78:ED:B8:9E:AE:D1:15:0C:42:91
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/4VTVr_aL8ajayHjtuJ6u0RUMQpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.98.0/24
94.137.72.0/24
94.137.78.0/24
94.137.89.0-94.137.91.255
94.137.93.0/24
Signature Algorithm: sha256WithRSAEncryption
58:f0:b5:a4:2f:f4:8c:90:74:3c:66:5e:64:3d:51:e7:54:cd:
64:fc:22:57:85:8c:7f:4d:e5:19:12:41:3a:93:5f:fd:db:3b:
d1:42:51:0f:3b:4c:e1:e4:37:ab:7f:14:3f:14:d5:77:36:e5:
f3:99:dc:9a:34:d0:d7:4a:3b:65:a9:f1:53:4c:c3:66:c2:3f:
9c:7a:e4:00:50:bd:9c:0a:b1:10:a3:a4:9b:8e:72:25:f4:16:
67:0b:b3:08:34:7d:9b:44:2e:8e:db:10:fc:cd:f5:b6:b3:c6:
e9:5b:a6:74:9c:71:5e:d5:1a:db:fd:d3:c9:2b:09:c7:af:b4:
f7:2e:2f:9b:1d:7d:8b:88:59:f3:e0:61:ae:37:1e:17:7e:98:
a4:ce:f3:6e:90:2f:ff:8f:93:ba:ac:e8:af:66:0f:32:2f:3e:
72:f9:14:9a:42:58:4c:ac:40:02:35:23:0c:7f:f9:45:6e:21:
95:34:28:b1:95:b2:3f:47:5b:a8:10:7b:fa:bc:19:2b:a8:27:
e9:d5:64:3c:95:c7:5a:a8:66:00:8d:78:f2:4b:08:56:d8:4f:
e0:2c:d3:7d:4b:96:b7:08:00:45:61:c3:2e:1a:82:a0:bf:7f:
4f:99:13:d6:10:0b:f8:47:af:63:2b:ad:fd:76:aa:2b:f5:4b:
fe:9f:02:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 25 10:03:58 2023 by rpki-client on console-ams.rpki-client.org