Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/4GRVSravb5I-inrKPBKf6yPEqyg.roa
File: 4GRVSravb5I-inrKPBKf6yPEqyg.roa (raw, json)
Hash identifier: iuf/6jbeMYzEKLpaJD8x16O/Tb5Fh1mel8yxfOjWlJM=
Subject key identifier: E0:64:55:4A:B6:AF:6F:92:3E:8A:7A:CA:3C:12:9F:EB:23:C4:AB:28
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018C2581551265EE8FDFBF276200C275C465
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/4GRVSravb5I-inrKPBKf6yPEqyg.roa
Signing time: Fri 01 Dec 2023 13:11:22 +0000
ROA not before: Fri 01 Dec 2023 13:11:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142019
IP address blocks: 45.146.241.0/24 maxlen: 24
46.249.104.0/24 maxlen: 24
46.249.105.0/24 maxlen: 24
46.249.106.0/24 maxlen: 24
46.249.111.0/24 maxlen: 24
46.249.107.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:25:81:55:12:65:ee:8f:df:bf:27:62:00:c2:75:c4:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Dec 1 13:11:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e064554ab6af6f923e8a7aca3c129feb23c4ab28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2d:b6:cd:2f:b8:9e:2e:d9:71:46:bc:6f:29:
f5:6a:f8:2a:d9:ba:02:83:e7:a6:eb:0b:97:fa:aa:
49:ee:86:cb:2c:1a:9b:36:6e:7f:fe:26:31:6f:70:
d9:fa:5c:df:1f:a6:e0:a3:ec:b2:45:b9:cc:5a:af:
83:c3:8b:a8:34:be:21:69:c3:ff:74:eb:10:b6:42:
7f:70:ca:9f:80:a1:0c:ca:f8:fd:d3:47:9a:10:2b:
cd:b8:47:78:62:d7:6c:e5:3a:53:79:62:85:ff:de:
23:20:b7:a4:bd:1b:da:9c:f5:24:9c:7c:5f:0f:6a:
38:93:0b:fb:da:3d:15:72:48:63:9e:8e:b5:8c:f0:
0c:52:65:8f:cd:3e:ab:8d:be:bb:33:4e:32:60:d9:
f4:2a:eb:6f:23:8f:da:d2:41:32:21:89:54:27:b5:
b3:ec:9e:08:fa:eb:f6:53:36:ca:7e:e3:fd:51:c4:
0d:d2:e8:c3:a0:e8:58:77:f5:b2:4b:fc:32:2b:89:
57:4f:07:26:5e:84:9c:31:60:19:ac:1c:06:d7:23:
32:9a:af:43:dd:de:a6:31:f6:b8:fd:42:da:46:59:
5c:19:b5:07:b5:aa:38:b1:2c:95:7c:2e:3e:18:d6:
5f:5c:d6:6d:2c:59:c4:b1:0e:71:3f:67:fd:50:71:
8c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:64:55:4A:B6:AF:6F:92:3E:8A:7A:CA:3C:12:9F:EB:23:C4:AB:28
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/4GRVSravb5I-inrKPBKf6yPEqyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.241.0/24
46.249.104.0/22
46.249.111.0/24
Signature Algorithm: sha256WithRSAEncryption
76:01:2f:a7:47:6c:58:3f:cb:57:5e:95:51:07:91:e1:90:02:
55:7c:b0:61:c3:a1:50:3b:a9:31:8f:5c:fd:4f:57:e9:bb:eb:
78:90:07:b7:ed:75:41:48:a8:1c:0f:08:77:9a:3a:30:20:a8:
97:fb:8f:c7:4c:06:97:31:c1:07:78:58:dc:6e:b9:43:81:31:
c5:22:af:7b:a1:7a:b0:1f:ab:6c:6f:38:c6:de:62:c3:b8:e9:
fa:7c:51:9f:6f:18:1c:76:69:3a:14:9d:19:8a:59:9f:9f:30:
08:f9:b6:17:9d:8b:30:5c:c8:a8:77:24:3c:cc:ad:96:eb:bd:
53:e2:ce:2f:2d:ca:50:b7:4a:30:69:a2:95:ed:3e:ac:e8:1b:
82:aa:e0:65:e3:d4:4c:43:98:ab:9f:47:95:39:aa:a4:08:0d:
e2:70:73:2c:4f:63:eb:d6:f4:a6:19:1b:39:d5:4c:b0:ca:3a:
2c:ea:ee:bf:ad:0d:94:ab:d7:6f:47:3e:e0:73:ea:ec:dd:bc:
78:c1:bb:eb:e4:36:1d:a1:04:1c:08:52:23:b7:e9:a9:c4:73:
ad:36:a3:d9:e2:04:01:b3:0c:1d:3a:fe:d2:5d:95:02:77:52:
7f:15:12:3c:2f:39:a4:64:7d:7d:9f:b3:5f:d0:a5:ea:69:78:
bc:dc:7a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:34:47 2024 by rpki-client on console-fra.rpki-client.org