Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/z4J472RjmSipAoV9geLgnjSIiAM.roa
File: z4J472RjmSipAoV9geLgnjSIiAM.roa (raw, json)
Hash identifier: f90jOK6pnfVUKSekFy/DIOzQLTgqyGnguSh6nJi6VbM=
Subject key identifier: CF:82:78:EF:64:63:99:28:A9:02:85:7D:81:E2:E0:9E:34:88:88:03
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 0185720360D3248F51153C1161B620F9E884
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/z4J472RjmSipAoV9geLgnjSIiAM.roa
Signing time: Mon 02 Jan 2023 10:25:01 +0000
ROA not before: Mon 02 Jan 2023 10:25:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44222
IP address blocks: 5.182.39.0/24 maxlen: 24
45.159.251.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:03:60:d3:24:8f:51:15:3c:11:61:b6:20:f9:e8:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Jan 2 10:25:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf8278ef64639928a902857d81e2e09e34888803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e7:79:19:ad:30:66:ed:e9:39:70:a9:6f:ba:
ad:02:da:c1:d5:de:52:e8:c9:38:dd:4a:af:a1:ba:
d6:01:f0:e7:13:98:84:90:83:89:bd:df:e2:4c:49:
c8:bc:6a:71:33:50:84:04:5c:25:45:0b:3f:8c:a7:
8e:b7:60:f9:b8:37:36:b3:af:84:3f:b4:84:06:d7:
60:7a:6d:ff:50:7d:78:3a:a2:09:23:a7:3c:84:26:
6b:05:19:e4:05:98:a2:96:e6:b6:94:aa:1a:6a:76:
c3:0f:b5:10:ec:71:8e:e0:73:71:50:37:b1:b7:d0:
b0:07:f2:1f:ba:f8:a8:4c:8d:b1:83:d3:de:cd:3b:
ac:df:13:ab:48:18:c3:d4:8a:d9:a0:23:a9:d8:92:
7e:dc:42:75:a5:9e:94:96:d1:e2:ba:26:27:8e:00:
78:2b:6e:13:3e:ce:52:25:1b:d7:ff:47:cb:ce:eb:
ed:2c:4a:76:56:c7:8b:cf:1e:22:4d:b3:48:c7:d1:
2f:32:c0:a5:a0:e4:f1:45:f1:13:be:59:74:05:6c:
ce:98:fd:d4:5a:37:57:59:8a:f8:14:ea:00:38:70:
c9:88:14:ac:a9:85:48:fc:9d:b9:15:c6:70:b2:4a:
2d:63:54:c4:d9:13:ae:a1:94:4d:7a:5b:ea:a9:9f:
39:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:82:78:EF:64:63:99:28:A9:02:85:7D:81:E2:E0:9E:34:88:88:03
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/z4J472RjmSipAoV9geLgnjSIiAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.39.0/24
45.159.251.0/24
Signature Algorithm: sha256WithRSAEncryption
e9:08:d8:9a:91:46:de:e3:90:e6:84:f0:b1:33:00:bc:18:87:
a0:a5:88:05:d5:c6:d6:67:6e:49:84:8f:4f:a6:f5:f8:2b:a2:
86:20:29:83:88:9f:09:fd:bf:83:a1:79:84:13:58:8a:9d:d2:
72:9c:e4:3e:27:a9:08:b1:4a:ce:2d:ee:df:13:bd:51:bc:3a:
fc:0e:31:b0:4a:58:c7:5e:68:a2:f1:a8:b7:25:e8:ce:8e:da:
32:bf:68:7d:ee:21:c0:e1:f4:98:8e:9f:d7:33:f4:90:5e:c5:
71:2e:0e:e1:33:8b:f5:59:2a:b3:96:04:67:00:a2:7c:93:69:
fe:15:62:a4:d7:b4:5e:96:dc:1d:41:e1:68:a1:66:31:97:2a:
44:38:16:78:5f:8d:ab:0d:47:f1:3a:6c:12:bb:aa:9e:88:a8:
2c:76:11:61:16:e0:cf:97:d0:55:04:62:72:a6:38:71:4d:5e:
a1:9a:b2:94:d3:72:23:7a:17:bb:7f:b1:ad:74:f1:4f:ae:c8:
51:08:88:e1:b5:5a:e7:b6:d9:bb:2d:bc:d0:10:05:01:af:3a:
da:ef:2e:f3:3e:24:6b:96:4a:1d:16:0f:16:d6:06:e1:a0:7c:
c0:d3:e0:10:59:1b:aa:c0:1d:6e:cf:81:e9:04:70:b3:a5:9c:
d2:fd:cb:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:24 2023 by rpki-client on console-ams.rpki-client.org