Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/vtvPqSABwdkog9GgjBDE8pzoLUA.roa
File: vtvPqSABwdkog9GgjBDE8pzoLUA.roa (raw, json)
Hash identifier: q+8SsIKchi6p0o88aAxfKz3CZ5UdJKvpmZASsyM4wUM=
Subject key identifier: BE:DB:CF:A9:20:01:C1:D9:28:83:D1:A0:8C:10:C4:F2:9C:E8:2D:40
Certificate issuer: /CN=d546e24430dba89bdce22c6bf32818cbde6bbca0
Certificate serial: 018570028849DCD02E5729491FC11552DB72
Authority key identifier: D5:46:E2:44:30:DB:A8:9B:DC:E2:2C:6B:F3:28:18:CB:DE:6B:BC:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1UbiRDDbqJvc4ixr8ygYy95rvKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/vtvPqSABwdkog9GgjBDE8pzoLUA.roa
Signing time: Mon 02 Jan 2023 01:04:52 +0000
ROA not before: Mon 02 Jan 2023 01:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208859
IP address blocks: 45.81.144.0/24 maxlen: 24
45.81.144.0/22 maxlen: 22
45.81.145.0/24 maxlen: 24
45.81.146.0/24 maxlen: 24
45.81.147.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:88:49:dc:d0:2e:57:29:49:1f:c1:15:52:db:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d546e24430dba89bdce22c6bf32818cbde6bbca0
Validity
Not Before: Jan 2 01:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bedbcfa92001c1d92883d1a08c10c4f29ce82d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3f:70:70:a4:03:75:bb:f7:b1:41:df:9f:40:
e5:4f:fb:99:e3:8d:c6:fc:09:c5:6d:69:27:e6:0f:
db:32:90:87:82:88:61:31:99:d7:ba:b0:c1:ba:db:
0f:7f:b1:9b:4b:07:67:df:27:9d:76:47:3c:b5:74:
49:a1:6a:67:b1:75:3d:0b:11:9a:dc:77:ba:17:7e:
01:8a:e7:85:df:79:37:c8:3b:81:57:1c:10:3d:28:
0d:a6:d3:12:9b:b3:88:ea:fc:97:1c:90:58:12:5f:
89:a0:87:63:42:9a:b1:c1:ff:77:38:e2:a9:93:3f:
74:b6:0d:85:b1:a8:d9:b2:b2:63:ec:65:40:fa:ea:
b0:86:f3:72:58:ae:75:52:f6:53:af:51:6e:cc:b7:
46:5f:4e:54:60:3c:9d:96:df:e6:a6:b3:76:b9:cc:
1a:05:62:a4:a7:98:41:2c:cc:e0:b9:08:20:ba:34:
3b:61:95:1d:ef:4a:6d:49:18:05:bf:08:42:0c:1c:
a6:b2:e5:8d:1b:04:cc:03:94:de:87:bf:3b:58:74:
84:26:5d:2b:a9:c7:17:ad:d6:d2:85:3b:56:6d:b3:
6a:63:a3:4c:a4:d1:94:3d:b6:2f:41:a0:19:54:d6:
a3:b7:33:2b:cf:ef:c1:32:79:75:53:10:f5:b1:a8:
69:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:DB:CF:A9:20:01:C1:D9:28:83:D1:A0:8C:10:C4:F2:9C:E8:2D:40
X509v3 Authority Key Identifier:
keyid:D5:46:E2:44:30:DB:A8:9B:DC:E2:2C:6B:F3:28:18:CB:DE:6B:BC:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UbiRDDbqJvc4ixr8ygYy95rvKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/vtvPqSABwdkog9GgjBDE8pzoLUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.144.0/22
Signature Algorithm: sha256WithRSAEncryption
42:92:01:08:fe:16:82:f8:89:25:a2:19:52:62:73:cb:6a:a1:
da:cb:bc:3e:e6:c7:7a:9a:31:36:18:e4:27:1f:5d:56:de:00:
62:58:b7:c4:61:29:77:43:0a:d6:44:0b:a0:75:eb:42:ab:54:
7c:6e:59:5a:0c:52:63:e0:81:4e:39:a4:3e:76:05:7d:b9:6d:
61:77:3e:f7:b9:b9:27:16:14:10:b7:95:a4:df:3b:cb:a3:30:
90:a8:2a:0e:61:31:ca:a3:7d:7e:87:2a:2b:19:9f:9a:12:86:
d5:9b:de:c5:aa:a5:b4:da:0a:ae:d0:72:f1:2b:81:2a:a8:54:
c3:1e:f6:bc:40:cc:aa:de:1f:8d:5e:10:67:43:79:10:f0:82:
f8:97:c4:bf:f0:1c:50:df:3e:62:48:fa:34:ec:8f:64:93:18:
f0:d1:96:3e:10:cb:94:b7:83:cd:c1:38:28:fc:64:f5:3f:4b:
64:d0:9b:35:0e:66:b6:45:c4:8b:97:84:85:b9:d5:48:00:06:
f2:50:6c:3d:c1:7e:05:d6:10:a3:1e:c4:1c:03:65:72:17:08:
d3:0a:c3:36:b2:0b:8e:42:9c:64:16:06:92:61:33:46:34:96:
5c:77:da:b2:c4:b2:94:29:0f:b1:8a:ba:b3:78:3c:c5:53:8d:
80:03:94:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:35:02 2024 by rpki-client on console-ams.rpki-client.org