Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/nQwwlZzo-_C98e8ms0fC6L-gezA.roa
File: nQwwlZzo-_C98e8ms0fC6L-gezA.roa (raw, json)
Hash identifier: Bo5CciWrSlSzvH/H5LTCCHGMPQL1fKjRXSuv0KEvBT0=
Subject key identifier: 9D:0C:30:95:9C:E8:FB:F0:BD:F1:EF:26:B3:47:C2:E8:BF:A0:7B:30
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 018572BA6C20FCE037B3F4C62005BAE81A3B
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/nQwwlZzo-_C98e8ms0fC6L-gezA.roa
Signing time: Mon 02 Jan 2023 13:44:58 +0000
ROA not before: Mon 02 Jan 2023 13:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 217.113.24.0/21 maxlen: 24
217.113.18.0/23 maxlen: 23
45.133.104.0/22 maxlen: 22
5.134.84.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:6c:20:fc:e0:37:b3:f4:c6:20:05:ba:e8:1a:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Jan 2 13:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9d0c30959ce8fbf0bdf1ef26b347c2e8bfa07b30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2c:92:0d:40:55:48:1a:80:90:ab:2f:ff:a0:
f3:b0:88:5c:4f:48:f3:f2:02:1f:38:a8:ea:48:65:
b2:08:f4:0d:fb:6e:9e:67:69:42:c7:72:75:7d:64:
de:e1:6a:8d:3d:83:46:b9:a6:9d:e5:c0:39:ec:f1:
75:57:08:5b:03:c8:a0:69:f1:5a:b8:58:d4:84:ea:
ae:fe:87:3f:30:1b:33:f6:14:3f:03:4b:39:a5:84:
6f:45:4b:27:33:94:e7:2c:6e:ff:e0:65:29:9e:ba:
99:6e:e3:4b:89:eb:98:91:0a:f6:68:9e:17:57:87:
71:f3:7e:72:a5:3f:75:2d:0d:1c:65:67:86:98:2c:
59:5d:dc:3d:76:86:d4:b0:16:84:39:bc:db:a2:88:
ff:2d:6b:3a:55:40:45:7b:f6:07:d1:a2:c3:3d:0b:
95:68:d7:8f:a1:43:68:ed:2a:2e:53:12:0e:12:b5:
81:81:29:09:c2:eb:d2:f1:97:df:40:a9:73:d2:af:
56:68:db:73:40:98:bd:e4:16:b2:68:11:ef:f8:0e:
c9:13:f1:28:da:45:cf:9b:16:07:7e:af:5a:7b:0a:
6f:e4:b7:50:ec:0c:35:cc:b3:7d:04:7a:6c:44:57:
eb:5d:65:85:de:c1:c4:72:4d:81:87:69:94:02:ac:
73:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:0C:30:95:9C:E8:FB:F0:BD:F1:EF:26:B3:47:C2:E8:BF:A0:7B:30
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/nQwwlZzo-_C98e8ms0fC6L-gezA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.134.84.0/22
45.133.104.0/22
217.113.18.0/23
217.113.24.0/21
Signature Algorithm: sha256WithRSAEncryption
43:0a:da:c6:85:59:9f:cb:2e:88:40:c2:13:f3:f6:63:fc:cf:
dd:10:b5:c5:df:e7:f3:36:52:bc:4b:98:c8:cf:e8:42:b8:9c:
29:e6:e4:5a:26:ff:2f:d7:b3:b3:24:cb:71:4c:d0:1b:94:40:
cd:19:66:73:ef:7f:7f:22:d5:8c:f2:06:78:36:dc:0b:f1:79:
b8:3c:8d:31:61:9e:a9:9c:55:b1:c9:8f:d6:de:0e:0e:e9:ea:
15:e2:03:41:b5:e1:90:09:96:28:dc:de:ec:53:66:d6:f4:5d:
ee:85:e0:a3:ee:67:1a:d2:00:35:80:7a:02:2d:e2:0b:ce:bc:
0a:05:cb:59:f8:70:7e:f5:38:13:24:dd:64:3d:96:1b:f7:a7:
b7:1d:ac:d2:31:53:33:88:6c:8f:ca:b3:bb:a6:dd:f5:e1:51:
90:5e:30:66:61:7f:87:6a:85:9d:0a:a1:28:cc:ae:ae:f1:c4:
70:f5:85:eb:d2:53:b4:4d:28:9e:13:17:15:9d:a2:b4:92:d0:
00:03:c0:b6:15:98:71:54:0e:18:4e:d9:20:9a:7b:9f:19:db:
15:7f:04:1c:e8:d0:b0:a6:ce:c0:64:71:86:b2:c3:da:01:8b:
50:16:6b:83:56:f9:74:85:79:a2:f3:31:3f:18:2b:34:6c:31:
92:2a:1d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:24 2023 by rpki-client on console-ams.rpki-client.org