Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ZUlNWpLfZAHzG_oL5sv1yS1LZRU.roa
File: ZUlNWpLfZAHzG_oL5sv1yS1LZRU.roa (raw, json)
Hash identifier: FuAP1HsD+UIYuUKMdD5Tys2GR+2TgbKp6Ffs3eEkOrw=
Subject key identifier: 65:49:4D:5A:92:DF:64:01:F3:1B:FA:0B:E6:CB:F5:C9:2D:4B:65:15
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185DE40ACC2F0EA17444B83EFF51E469C48
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ZUlNWpLfZAHzG_oL5sv1yS1LZRU.roa
Signing time: Mon 23 Jan 2023 10:50:58 +0000
ROA not before: Mon 23 Jan 2023 10:50:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203790
IP address blocks: 45.148.118.0/24 maxlen: 24
45.148.116.0/24 maxlen: 24
45.148.119.0/24 maxlen: 24
194.50.111.0/24 maxlen: 24
2a0e:97c0:460::/44 maxlen: 48
2a10:cc40:1d0::/44 maxlen: 48
2a10:cc41:110::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:de:40:ac:c2:f0:ea:17:44:4b:83:ef:f5:1e:46:9c:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 23 10:50:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65494d5a92df6401f31bfa0be6cbf5c92d4b6515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7b:ef:78:43:42:9b:4c:1f:7d:cc:c9:be:62:
6b:71:74:1d:7c:f8:84:f0:d6:cf:f1:5d:2b:ba:33:
ae:77:3d:ff:65:df:0f:b8:c4:a8:7f:65:c1:70:40:
4c:54:ad:a4:6a:37:57:d5:8f:4d:81:46:47:7c:f9:
2b:d0:d1:ee:c8:2c:f8:7d:76:f3:d1:4e:0c:32:c4:
29:ba:71:de:69:ac:0e:0a:d6:d7:74:fb:57:d9:ea:
fe:f6:3c:7c:cd:56:42:c6:64:ef:7e:2e:44:4a:f1:
ff:ff:d1:6d:4e:85:38:da:f4:9f:90:db:58:7a:26:
6e:4f:c2:40:4b:d0:cf:a7:2c:cf:de:6e:f9:18:a4:
7d:cc:ee:56:fa:2f:4d:70:a9:13:04:ef:f0:5a:79:
2a:79:d1:d8:52:42:ae:20:50:f0:56:2b:5d:f6:60:
34:74:92:64:67:ad:a6:9d:01:d4:9b:ae:0f:b4:66:
09:e7:31:17:2d:34:33:2c:e8:41:5f:23:d2:eb:28:
d4:05:4e:01:7f:f6:78:cb:c2:f8:54:ac:de:37:ab:
60:ff:f3:70:8a:38:e9:e2:eb:d1:00:00:77:17:f4:
5f:e6:09:a3:84:12:3d:9f:74:5e:0c:a4:0b:94:2b:
96:cd:bc:aa:bf:88:d8:aa:85:e3:f1:98:88:84:03:
af:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:49:4D:5A:92:DF:64:01:F3:1B:FA:0B:E6:CB:F5:C9:2D:4B:65:15
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ZUlNWpLfZAHzG_oL5sv1yS1LZRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.116.0/24
45.148.118.0/23
194.50.111.0/24
IPv6:
2a0e:97c0:460::/44
2a10:cc40:1d0::/44
2a10:cc41:110::/44
Signature Algorithm: sha256WithRSAEncryption
2f:47:52:57:0e:ad:36:bb:f4:53:69:78:ad:a1:de:50:a1:d1:
cc:9e:99:c3:a2:b7:5b:a2:53:8e:0f:a3:34:65:8d:9f:e6:14:
f3:cd:55:38:cb:4a:28:0a:d6:e5:59:a3:91:f0:2f:83:30:92:
55:72:99:d8:3a:de:01:a0:78:e0:a5:aa:df:50:56:28:14:08:
3b:b0:4b:fb:f3:7e:15:77:d4:29:c9:f2:4f:ae:94:d0:fd:ab:
e5:79:8b:fd:e9:32:37:9e:79:ee:97:e3:a7:33:7a:87:d3:e8:
dd:d1:47:fc:b5:52:96:3d:6d:ab:ee:a4:4a:91:82:d7:fe:6e:
b4:99:e5:ed:ed:3f:94:b3:c2:57:68:35:17:6f:2a:98:09:a6:
0b:f2:0a:19:1f:4f:e1:73:ad:b3:4f:5c:e5:d4:d0:5d:ef:7e:
a7:11:cd:7e:f6:22:a3:ee:37:54:5c:ee:3a:4b:d1:2e:69:19:
a8:43:3e:48:50:6d:06:4f:90:13:2b:19:05:56:05:d5:ae:81:
ae:4b:a2:0f:15:75:97:bf:b7:ad:77:d3:47:6f:39:8c:00:30:
80:32:ee:9c:e9:36:64:e3:b8:bb:0a:42:4f:68:3d:b9:0c:0c:
3e:90:10:1b:12:f7:0b:c6:34:87:f7:fe:ab:78:15:dd:f9:a1:
6c:48:37:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:17 2023 by rpki-client on console-fra.rpki-client.org