Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/uHnilUF9CBNrststNJD9jZ30QLY.roa
File: uHnilUF9CBNrststNJD9jZ30QLY.roa (raw, json)
Hash identifier: hD7WIpqUncRzk7dDwZMaSiuwg3rcUzEpydEH+XWWm8s=
Subject key identifier: B8:79:E2:95:41:7D:08:13:6B:B2:DB:2D:34:90:FD:8D:9D:F4:40:B6
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01869CB4A637B4E10A29C58ACE95A4207DCF
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/uHnilUF9CBNrststNJD9jZ30QLY.roa
Signing time: Wed 01 Mar 2023 10:25:30 +0000
ROA not before: Wed 01 Mar 2023 10:25:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203790
IP address blocks: 45.148.116.0/24 maxlen: 24
45.148.119.0/24 maxlen: 24
194.50.111.0/24 maxlen: 24
2a0e:97c0:460::/44 maxlen: 48
2a0e:b107:12a0::/44 maxlen: 48
2a10:cc40:1d0::/44 maxlen: 48
2a0e:b101::/32 maxlen: 48
2a10:cc41:110::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9c:b4:a6:37:b4:e1:0a:29:c5:8a:ce:95:a4:20:7d:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Mar 1 10:25:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b879e295417d08136bb2db2d3490fd8d9df440b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:65:f0:04:d0:7f:d3:10:a6:73:48:d6:c3:5e:
fb:e8:b1:f4:1d:2b:dd:7b:52:65:b0:1c:bc:c3:8f:
f6:47:e4:2e:ad:28:0a:45:6a:a3:5a:f6:f1:b7:c5:
04:46:6c:69:f8:c5:4a:76:ed:3c:8e:ad:9b:5c:af:
c0:0c:6b:22:e4:52:28:1a:46:87:1d:02:2f:31:7e:
3e:24:d6:0d:0d:25:3d:c9:45:97:8f:d0:ec:65:eb:
c4:f1:66:a9:d2:40:a6:0a:d2:b7:1e:a9:b2:66:84:
57:f5:ed:52:81:9b:c9:f6:9a:3b:98:d4:ae:fe:c7:
20:bb:c8:f5:dc:d0:53:d1:b6:73:6c:ad:9b:70:9d:
db:bf:97:09:58:9c:54:c5:24:73:5d:49:e4:a4:2d:
49:e0:1e:5a:67:c9:e1:84:54:df:56:99:54:99:79:
91:fc:d7:fc:2d:00:d0:9c:38:49:1e:f2:14:a3:6f:
44:4e:d6:a4:17:61:12:4d:82:c8:27:85:f9:54:f5:
fb:a8:4b:86:23:64:51:87:fe:7b:4e:bb:ec:33:0d:
80:c8:a3:01:2e:80:9b:e6:e7:c4:0f:ec:50:84:00:
db:37:71:5c:ae:ed:30:aa:be:85:3c:c6:3c:fc:de:
0f:bd:b6:06:1f:8c:55:38:cf:16:b4:ed:80:d6:87:
34:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:79:E2:95:41:7D:08:13:6B:B2:DB:2D:34:90:FD:8D:9D:F4:40:B6
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/uHnilUF9CBNrststNJD9jZ30QLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.116.0/24
45.148.119.0/24
194.50.111.0/24
IPv6:
2a0e:97c0:460::/44
2a0e:b101::/32
2a0e:b107:12a0::/44
2a10:cc40:1d0::/44
2a10:cc41:110::/44
Signature Algorithm: sha256WithRSAEncryption
2d:bc:84:25:4a:0e:b2:fb:7d:de:97:34:b5:76:2f:4d:2f:bf:
4d:60:3c:50:0e:d2:50:61:73:f9:47:10:47:d4:de:73:23:f3:
2b:c9:11:98:e2:0e:10:88:ae:ca:28:22:d0:ac:aa:94:2b:f2:
25:86:f1:36:66:d8:96:9c:f7:81:9c:22:16:ad:c2:f2:52:28:
db:23:1f:8d:56:5f:7e:95:06:fe:9d:80:ac:f7:14:7e:dd:a5:
d6:7c:b9:2c:c5:38:5a:da:f4:f6:89:27:63:bd:83:93:a9:35:
63:ce:fd:83:c0:04:09:ed:d0:4e:95:68:4c:af:39:ca:21:64:
11:4e:c7:2f:e6:c5:e3:34:19:8f:be:c3:3c:aa:d1:71:9f:4d:
b8:39:9f:df:02:cc:f1:c6:5f:d9:88:29:e8:a7:30:f6:e7:53:
c9:2f:4c:84:9e:e6:6c:1e:76:d7:22:16:64:32:24:3a:cd:c4:
27:ee:b8:2f:95:c0:15:41:fa:9b:07:6a:82:13:6f:0e:69:64:
7d:87:68:eb:d8:d7:1d:d3:0d:20:51:36:83:ea:fd:d0:f9:aa:
21:de:73:db:0b:c2:44:d1:bd:36:a1:a1:76:47:8f:e6:5b:91:
5e:71:7d:b7:ca:c0:3f:30:3a:93:d9:29:30:9b:e7:65:ff:12:
cb:ac:3c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:04 2023 by rpki-client on console-ams.rpki-client.org