Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/R33jk0DZNVCk3YRl9ZyPEuRql8A.roa
File: R33jk0DZNVCk3YRl9ZyPEuRql8A.roa (raw, json)
Hash identifier: Db0bwuCgllf36IvlcLbot0iAAT8pgkrAReJEbajwwHo=
Subject key identifier: 47:7D:E3:93:40:D9:35:50:A4:DD:84:65:F5:9C:8F:12:E4:6A:97:C0
Certificate issuer: /CN=10d49b73cada01ee851812ec440b7a1ec98648b3
Certificate serial: 018571BA1DEA21EA4B35A97F071BAD6C28AF
Authority key identifier: 10:D4:9B:73:CA:DA:01:EE:85:18:12:EC:44:0B:7A:1E:C9:86:48:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ENSbc8raAe6FGBLsRAt6HsmGSLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/R33jk0DZNVCk3YRl9ZyPEuRql8A.roa
Signing time: Mon 02 Jan 2023 09:05:00 +0000
ROA not before: Mon 02 Jan 2023 09:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208495
IP address blocks: 45.132.132.0/22 maxlen: 22
45.132.132.0/24 maxlen: 24
45.132.134.0/24 maxlen: 24
45.132.133.0/24 maxlen: 24
45.132.135.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:ba:1d:ea:21:ea:4b:35:a9:7f:07:1b:ad:6c:28:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10d49b73cada01ee851812ec440b7a1ec98648b3
Validity
Not Before: Jan 2 09:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=477de39340d93550a4dd8465f59c8f12e46a97c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d4:19:ed:0f:6f:da:36:f1:85:7f:48:09:f4:
8e:0b:a5:7e:ca:0f:f5:66:a1:db:5d:47:56:08:2e:
49:1a:49:53:9f:e8:86:68:bd:c1:50:22:48:bf:a7:
f9:b8:1c:c7:b9:d2:b0:e2:42:01:80:32:89:dc:3f:
49:e3:ec:d2:53:5e:b8:ec:06:4b:2c:c7:de:dc:f4:
51:24:10:65:c3:c5:7c:d0:4a:4a:50:1d:60:d7:65:
f1:c1:0e:6d:8f:d1:73:34:67:76:d4:d8:8a:c6:20:
34:b4:89:12:d5:dc:d7:5e:cf:a7:48:85:54:fb:3d:
e7:65:10:ed:9b:be:ce:79:34:45:13:1d:e6:e5:60:
15:02:8a:9b:81:97:24:36:61:38:57:ea:de:db:03:
b2:b0:35:c0:36:a2:7d:92:5e:4f:0c:f1:f7:d1:2c:
37:60:37:f5:da:8b:78:f7:89:ef:a7:69:31:5b:54:
3a:ec:b0:3b:52:7f:2c:52:45:a2:64:92:75:61:81:
61:86:a4:07:7c:00:b9:2a:e7:45:43:89:e0:04:05:
06:69:02:07:bb:a2:9c:6f:8e:c5:f3:03:73:ed:63:
0b:51:16:43:5f:ba:44:9c:a7:f7:aa:7d:d8:98:57:
78:3b:30:fe:8a:0f:8a:2c:49:e9:84:5d:a5:b1:de:
2c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:7D:E3:93:40:D9:35:50:A4:DD:84:65:F5:9C:8F:12:E4:6A:97:C0
X509v3 Authority Key Identifier:
keyid:10:D4:9B:73:CA:DA:01:EE:85:18:12:EC:44:0B:7A:1E:C9:86:48:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ENSbc8raAe6FGBLsRAt6HsmGSLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/R33jk0DZNVCk3YRl9ZyPEuRql8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.132.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:47:44:40:7e:4b:55:b4:b0:cb:5d:6e:24:b9:be:b5:d6:86:
b2:d1:8d:8c:5a:f9:b9:5a:46:82:65:84:0c:5b:3a:1d:a9:82:
f7:2b:fe:98:43:d2:b5:dc:3f:d1:df:0a:41:2e:9e:c5:0b:f6:
4e:ab:1a:2a:cb:3b:48:6a:67:0c:10:d5:92:d4:81:90:f9:09:
85:f2:01:e0:c5:53:e6:74:03:bc:59:ce:90:ad:a4:f1:da:8e:
ba:25:46:2a:6e:97:43:02:8d:9b:91:47:30:b7:ac:f6:d8:8b:
41:54:64:13:83:cc:05:47:96:2d:e1:dc:86:93:96:6a:e6:b4:
b3:c7:06:d0:b9:fa:35:6f:03:e4:e8:59:9d:d1:3e:3b:63:bd:
68:a0:de:ac:6c:50:81:e6:78:86:c3:30:87:7c:24:01:e2:a2:
98:6f:2a:02:7d:50:2e:99:ab:88:38:a5:25:ef:69:d8:ba:73:
73:15:74:ab:3e:01:63:d9:61:db:a9:5c:40:50:b6:1c:36:1f:
7d:71:be:e5:6d:3e:b9:8d:f7:5d:8e:57:ef:fa:13:be:6a:d0:
e4:9e:da:0d:e1:4a:55:15:ed:db:cd:d8:08:7e:68:58:e2:e4:
c3:c2:47:c0:b4:c2:89:5a:b7:f8:e9:8c:4a:6c:92:5b:0b:46:
36:44:fd:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:36 2024 by rpki-client on console-fra.rpki-client.org