Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/aJq67W3xhaCNtrKuIk8qJtUQA8E.roa
File: aJq67W3xhaCNtrKuIk8qJtUQA8E.roa (raw, json)
Hash identifier: ip97s+/b6zHIRTAK785q09OPg/zKyXH7ew0WlcACCAQ=
Subject key identifier: 68:9A:BA:ED:6D:F1:85:A0:8D:B6:B2:AE:22:4F:2A:26:D5:10:03:C1
Certificate issuer: /CN=f1b8bbb1e186a599d4cc058cabf4df0e252f31fa
Certificate serial: 018852CBC026890D02C6BE9B9EF52F7BBC24
Authority key identifier: F1:B8:BB:B1:E1:86:A5:99:D4:CC:05:8C:AB:F4:DF:0E:25:2F:31:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bi7seGGpZnUzAWMq_TfDiUvMfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/aJq67W3xhaCNtrKuIk8qJtUQA8E.roa
Signing time: Thu 25 May 2023 12:04:24 +0000
ROA not before: Thu 25 May 2023 12:04:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56971
IP address blocks: 193.43.72.0/24 maxlen: 32
45.152.112.0/24 maxlen: 32
45.152.113.0/24 maxlen: 32
45.152.114.0/24 maxlen: 32
45.152.115.0/24 maxlen: 32
45.159.208.0/24 maxlen: 32
45.159.209.0/24 maxlen: 32
45.159.210.0/24 maxlen: 32
45.159.211.0/24 maxlen: 32
45.11.92.0/24 maxlen: 32
45.11.93.0/24 maxlen: 32
45.11.94.0/24 maxlen: 32
193.43.94.0/24 maxlen: 32
193.23.55.0/24 maxlen: 32
193.242.145.0/24 maxlen: 32
45.145.4.0/24 maxlen: 32
45.145.6.0/24 maxlen: 32
45.145.7.0/24 maxlen: 32
193.187.172.0/24 maxlen: 32
193.187.173.0/24 maxlen: 32
193.187.174.0/24 maxlen: 32
193.187.175.0/24 maxlen: 32
45.154.1.0/24 maxlen: 32
45.154.2.0/24 maxlen: 32
45.154.3.0/24 maxlen: 32
45.152.84.0/24 maxlen: 32
45.152.86.0/24 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:52:cb:c0:26:89:0d:02:c6:be:9b:9e:f5:2f:7b:bc:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1b8bbb1e186a599d4cc058cabf4df0e252f31fa
Validity
Not Before: May 25 12:04:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=689abaed6df185a08db6b2ae224f2a26d51003c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bf:76:8c:76:81:32:7a:35:d6:54:b8:7f:da:
87:5b:c8:ab:94:db:c5:f3:20:ed:f2:23:b5:3e:55:
54:aa:4f:cb:fc:e5:c3:f7:2c:14:0e:c0:43:8d:b8:
e6:ac:64:28:c3:44:d4:cb:43:dc:d6:37:f1:ff:13:
91:b6:de:f3:1a:c5:c9:60:17:52:d2:95:ce:ef:f9:
dd:97:73:60:20:47:80:ae:6c:3a:c8:a0:6b:ef:4b:
75:82:65:29:5e:5e:35:d2:ef:06:d2:88:03:2d:c7:
91:e8:e9:5a:4f:57:4d:b5:1c:e0:8d:6f:ee:5c:28:
d6:d1:54:fd:2f:a8:8a:2a:59:dd:a3:ab:6d:8e:66:
10:47:59:7f:25:d6:ef:39:cf:ad:7d:f6:ee:19:04:
24:02:5a:11:11:53:26:3e:c6:18:19:20:ec:ca:ab:
71:bb:bc:86:04:1b:ab:aa:39:8e:51:f4:d5:03:8a:
8a:2e:60:7e:46:f3:c9:e7:7d:e8:95:21:46:5a:39:
7c:a4:3f:ac:52:9d:06:50:1c:a0:7e:a9:18:50:3c:
13:84:a3:28:b1:5e:1e:f4:11:22:09:2f:46:de:42:
b3:49:3c:d8:6b:71:97:39:5c:a7:14:95:97:9b:34:
38:d5:50:e2:f0:4e:fb:cd:1e:8c:84:28:67:b5:68:
8e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:9A:BA:ED:6D:F1:85:A0:8D:B6:B2:AE:22:4F:2A:26:D5:10:03:C1
X509v3 Authority Key Identifier:
keyid:F1:B8:BB:B1:E1:86:A5:99:D4:CC:05:8C:AB:F4:DF:0E:25:2F:31:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bi7seGGpZnUzAWMq_TfDiUvMfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/aJq67W3xhaCNtrKuIk8qJtUQA8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.92.0-45.11.94.255
45.145.4.0/24
45.145.6.0/23
45.152.84.0/24
45.152.86.0/24
45.152.112.0/22
45.154.1.0-45.154.3.255
45.159.208.0/22
193.23.55.0/24
193.43.72.0/24
193.43.94.0/24
193.187.172.0/22
193.242.145.0/24
Signature Algorithm: sha256WithRSAEncryption
57:81:13:3d:28:f7:e1:c3:fb:ab:33:76:54:00:0a:cf:f6:73:
84:0d:5b:86:9f:d2:a8:c6:69:41:1e:ae:26:f3:5f:48:63:a9:
56:cb:1d:64:d5:59:d7:e4:4f:4a:b6:54:d5:9d:ea:ce:bd:ed:
0e:2f:f8:73:3b:a7:c9:e1:68:9d:a9:1c:7c:ca:87:a3:9f:4a:
0e:39:19:17:ca:68:43:a3:e5:c3:c2:da:72:ca:cb:de:94:57:
ef:f2:a8:ce:cf:e7:2b:73:ef:76:5b:f5:10:e6:a1:f6:f4:ba:
5c:66:eb:10:50:92:10:6c:2c:6a:de:8d:fc:33:af:02:55:93:
21:b4:05:34:64:54:ea:e4:10:ce:6f:c1:69:43:fc:0a:b8:ad:
eb:bb:9d:27:fa:98:37:e7:2b:1d:84:46:c4:31:e6:55:eb:f2:
bd:4c:28:43:66:19:b0:ad:63:7b:a9:5c:4c:11:5e:a1:b2:4f:
f4:0e:6a:1c:4a:dd:31:84:a7:1e:81:df:a2:79:d0:bd:3c:05:
97:63:05:ad:f1:3a:25:ca:58:6b:9c:42:66:2b:92:71:e9:2d:
d7:b2:f4:f4:cb:33:d5:b2:5e:48:08:31:94:ad:60:18:cc:10:
ae:ab:9f:12:a8:91:cb:1a:b8:17:a3:3f:1e:eb:8d:a1:39:d0:
78:24:9e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:50:39 2024 by rpki-client on console-fra.rpki-client.org