Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/CCt4WTRSZJiUFOeVGnnlysxv_1g.roa
File: CCt4WTRSZJiUFOeVGnnlysxv_1g.roa (raw, json)
Hash identifier: SL2Oi0HaytPGEX0g6N6qW0ptN9/l/9MiwT8A2JLliEA=
Subject key identifier: 08:2B:78:59:34:52:64:98:94:14:E7:95:1A:79:E5:CA:CC:6F:FF:58
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 018705ED41C98E8A1FD946B073DB05240061
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/CCt4WTRSZJiUFOeVGnnlysxv_1g.roa
Signing time: Tue 21 Mar 2023 20:47:27 +0000
ROA not before: Tue 21 Mar 2023 20:47:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52000
IP address blocks: 45.87.152.0/24 maxlen: 24
194.116.173.0/24 maxlen: 24
141.98.170.0/24 maxlen: 24
141.98.168.0/24 maxlen: 24
45.8.146.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:05:ed:41:c9:8e:8a:1f:d9:46:b0:73:db:05:24:00:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Mar 21 20:47:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=082b7859345264989414e7951a79e5cacc6fff58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:44:b0:ee:8a:3d:e4:2a:de:03:c5:25:47:93:
16:b4:aa:48:b9:79:a2:48:58:7b:1e:f9:a4:81:71:
5d:30:6b:2d:c6:0f:58:c3:44:20:c3:4a:ba:a5:c2:
98:d2:f6:97:f9:97:99:73:ce:6b:14:c1:c3:3f:d5:
93:b7:11:65:69:68:a9:5d:2e:79:d2:aa:48:87:4a:
a6:ae:21:e9:9c:00:ef:52:fd:a7:a0:b7:5f:f6:20:
82:a3:ce:12:da:01:ea:5d:86:57:57:47:eb:a6:36:
b2:65:bd:ca:6b:c2:81:d9:1a:aa:69:b2:02:95:2c:
e4:39:45:5a:02:c7:e3:68:78:6e:0d:e4:a4:c4:82:
4c:99:f0:a8:3d:83:be:a2:95:9a:1c:d8:2a:2d:9d:
df:15:1d:69:b5:95:b6:84:74:05:83:d3:10:55:35:
9d:59:1b:97:95:2d:96:52:ae:25:a4:1b:c5:6e:1c:
80:6c:b3:0c:a9:e7:2e:3c:45:5b:71:60:b8:cc:bc:
bb:9e:b3:cd:07:d8:2e:a2:8a:c4:2a:0e:80:ef:5c:
40:87:1a:74:5e:89:10:1f:ce:18:a6:b2:d8:20:42:
22:4c:22:d6:45:5d:e4:49:ef:a1:26:2d:db:1b:cd:
41:6a:33:4f:4d:5c:2e:c9:50:c7:09:3f:9b:bf:b6:
b8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:2B:78:59:34:52:64:98:94:14:E7:95:1A:79:E5:CA:CC:6F:FF:58
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/CCt4WTRSZJiUFOeVGnnlysxv_1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.146.0/24
45.87.152.0/24
141.98.168.0/24
141.98.170.0/24
194.116.173.0/24
Signature Algorithm: sha256WithRSAEncryption
63:88:cb:8c:92:69:91:5f:04:41:ae:52:7f:b5:ea:66:7d:43:
51:ab:eb:a7:3e:b7:4e:bd:aa:64:4b:e2:79:64:ac:30:92:66:
cb:91:40:fb:90:f2:f0:d6:e4:97:c0:d3:ea:46:44:6e:c5:65:
8c:ca:bd:ff:4b:f4:80:57:3b:41:6e:88:56:85:de:fa:1c:37:
94:16:44:af:35:98:d1:b3:ba:4b:52:c1:a4:fe:e6:39:f3:64:
e0:7a:e0:84:dd:7f:c4:64:41:af:b3:42:e6:03:6c:f7:07:b5:
20:80:29:dd:51:36:08:54:1c:4c:66:08:79:cf:7c:59:4d:55:
f0:56:56:97:7a:29:57:b1:5b:31:bc:5a:f6:6d:da:3d:9e:82:
36:9e:86:c6:a1:af:44:44:7e:f3:4f:2d:2a:b1:2d:73:e3:7b:
09:eb:11:be:1d:34:a9:18:79:7d:b5:b3:2a:1d:30:77:69:e8:
ca:7b:7b:d4:70:9c:ac:b7:91:c3:b8:ed:6b:f3:95:a5:d5:5a:
a1:43:0d:2b:b7:ae:47:19:c3:fd:c5:f7:89:11:a1:a1:29:da:
51:44:27:5b:1e:04:28:9a:95:90:e6:d1:13:9f:c4:44:5b:75:
3e:23:d2:74:99:bf:8f:2f:be:69:46:81:8a:1f:06:7d:bd:dd:
4e:d2:f8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:24 2023 by rpki-client on console-ams.rpki-client.org