Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/nFuePwKfYGPRJUEHeuQUNJ0FP-8.roa
File: nFuePwKfYGPRJUEHeuQUNJ0FP-8.roa (raw, json)
Hash identifier: i9/eJbSRbiAhrmzxUlqbyzWcPuUp/bv/xZrahmU7lbk=
Subject key identifier: 9C:5B:9E:3F:02:9F:60:63:D1:25:41:07:7A:E4:14:34:9D:05:3F:EF
Certificate issuer: /CN=d3698be902c06feab5f5aaf729e0bbc37bbc341c
Certificate serial: 0185720C48E41F7696AFE5F4741BF1C100E6
Authority key identifier: D3:69:8B:E9:02:C0:6F:EA:B5:F5:AA:F7:29:E0:BB:C3:7B:BC:34:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02mL6QLAb-q19ar3KeC7w3u8NBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/nFuePwKfYGPRJUEHeuQUNJ0FP-8.roa
Signing time: Mon 02 Jan 2023 10:34:45 +0000
ROA not before: Mon 02 Jan 2023 10:34:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205986
IP address blocks: 45.155.183.0/24 maxlen: 24
45.155.180.0/24 maxlen: 24
45.155.181.0/24 maxlen: 24
45.155.182.0/24 maxlen: 24
45.155.180.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:0c:48:e4:1f:76:96:af:e5:f4:74:1b:f1:c1:00:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3698be902c06feab5f5aaf729e0bbc37bbc341c
Validity
Not Before: Jan 2 10:34:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c5b9e3f029f6063d12541077ae414349d053fef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:1c:e2:96:8c:1b:a3:a6:b7:d4:9e:84:34:ab:
db:ed:f7:36:14:3a:81:57:c0:3d:e0:a0:cc:0a:3e:
49:e8:2f:b9:7d:66:d2:32:3d:27:75:95:e6:67:86:
44:6e:27:26:62:0d:d3:cd:6b:24:19:89:20:be:22:
b5:51:a0:21:3a:89:23:8f:78:55:5f:75:28:47:01:
f6:60:71:ef:cf:22:31:00:f2:5f:d5:d1:5e:ce:65:
54:fa:eb:0f:f3:79:f6:f9:18:f5:7b:d2:c4:61:8a:
73:c4:8d:81:b6:de:42:e0:a5:0b:16:e2:26:f8:f1:
72:32:c6:8e:1d:d0:57:79:ce:06:d0:71:a3:f8:a9:
8b:c6:dc:d2:5d:ab:13:02:90:78:da:d4:29:47:49:
0e:53:0a:42:75:29:58:19:39:a1:0e:fa:03:07:de:
9e:d5:b3:b4:4f:59:c9:45:57:d8:f1:d0:e4:5e:0f:
62:e5:a2:03:94:73:01:09:fe:da:5b:a7:05:b9:82:
b7:69:10:af:47:e4:2f:68:19:db:ea:a2:63:8d:af:
f7:b5:e9:c2:92:64:cb:d7:bc:59:8e:5a:03:64:27:
8e:72:a7:45:85:9a:3c:ff:48:2a:4b:f4:8f:fb:c5:
7e:9b:28:ab:6b:2c:94:30:08:d8:97:5f:bc:fb:7a:
aa:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:5B:9E:3F:02:9F:60:63:D1:25:41:07:7A:E4:14:34:9D:05:3F:EF
X509v3 Authority Key Identifier:
keyid:D3:69:8B:E9:02:C0:6F:EA:B5:F5:AA:F7:29:E0:BB:C3:7B:BC:34:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02mL6QLAb-q19ar3KeC7w3u8NBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/nFuePwKfYGPRJUEHeuQUNJ0FP-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.180.0/22
Signature Algorithm: sha256WithRSAEncryption
98:14:55:24:8f:c8:dc:47:11:7f:cb:c8:c8:7f:89:4f:55:5f:
8c:77:d1:09:9c:c9:4e:c3:66:0d:25:c3:19:dc:a9:39:ef:26:
25:f9:fd:7b:d2:1d:d1:84:53:c0:ae:21:9d:5f:ab:6e:1e:e9:
0a:c9:65:e9:44:54:8d:f9:0a:c0:bb:24:d1:e6:37:be:c8:7f:
87:30:e4:c4:09:19:e9:c0:e1:3f:f7:94:a9:2c:75:f7:24:78:
5c:b8:54:47:fd:c5:cd:7f:9a:8e:b1:83:28:c2:74:ca:0c:d4:
9e:19:50:15:32:c2:7d:d5:30:91:bb:f3:71:40:16:a0:60:c8:
7c:19:b7:f0:39:27:b3:a9:cc:b7:bd:9c:81:43:2b:ec:b5:c1:
d0:27:6c:10:f0:e2:45:5b:e5:c3:b8:be:9c:11:54:fa:4a:9f:
20:bd:08:3f:96:7a:5b:06:dd:63:9a:c6:2a:7f:30:58:f8:1f:
c9:ed:95:b8:8e:0b:e5:c2:3e:63:0c:15:be:77:5f:d3:03:a7:
da:04:26:d8:cf:f6:d7:25:d8:b7:4e:6d:7d:f6:33:8c:49:bf:
1e:0f:92:54:47:f0:50:e0:58:3c:76:2b:d2:18:12:64:47:0e:
ff:f2:7b:b1:25:ed:82:22:90:fa:93:2a:b0:9d:61:63:ea:90:
05:e6:30:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:40:29 2024 by rpki-client on console-ams.rpki-client.org