Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/Th19YEPwzQV8DmZK8ldKJlCCxns.roa
File: Th19YEPwzQV8DmZK8ldKJlCCxns.roa (raw, json)
Hash identifier: gFydH/iyi4XAZ0GGqkVOYErYeDttD2TaM+B2vy0fVDE=
Subject key identifier: 4E:1D:7D:60:43:F0:CD:05:7C:0E:66:4A:F2:57:4A:26:50:82:C6:7B
Certificate issuer: /CN=2f5cab8a09a9fde23c9635f8e164aef09e17948c
Certificate serial: 0189654A8D050E0524391A45F8C0C4BC33A3
Authority key identifier: 2F:5C:AB:8A:09:A9:FD:E2:3C:96:35:F8:E1:64:AE:F0:9E:17:94:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1yrigmp_eI8ljX44WSu8J4XlIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/Th19YEPwzQV8DmZK8ldKJlCCxns.roa
Signing time: Mon 17 Jul 2023 19:18:51 +0000
ROA not before: Mon 17 Jul 2023 19:18:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34665
IP address blocks: 91.188.221.0/24 maxlen: 24
92.119.162.0/24 maxlen: 24
45.138.156.0/24 maxlen: 24
45.138.159.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:65:4a:8d:05:0e:05:24:39:1a:45:f8:c0:c4:bc:33:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f5cab8a09a9fde23c9635f8e164aef09e17948c
Validity
Not Before: Jul 17 19:18:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e1d7d6043f0cd057c0e664af2574a265082c67b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:4f:45:2a:50:99:b6:f7:a2:53:38:a5:08:3b:
e9:8d:80:67:3b:90:41:e3:73:cf:78:a3:e1:62:08:
2e:6e:fe:2f:fb:8e:4a:56:e7:84:66:aa:0f:58:dd:
34:c2:61:5d:5c:23:b6:de:0c:ea:65:33:a8:51:dc:
fe:bc:de:be:99:eb:51:82:9a:1a:8e:78:83:53:31:
bf:e7:09:eb:40:42:88:4e:e4:0a:a4:00:06:72:a0:
5f:b4:f6:4b:da:a5:22:ac:ee:8c:88:ea:6c:c0:b7:
fd:80:c4:d7:af:b4:8d:a9:9b:14:c4:f7:34:3b:c2:
1a:e4:a7:38:68:ac:11:5d:47:d0:bb:1d:30:2a:66:
f9:10:d7:05:5f:fe:4f:73:b8:87:ff:0f:ef:f4:8a:
c1:b4:76:b8:d9:27:9a:e6:fd:7d:4d:72:14:ef:b0:
74:ca:be:df:1e:61:9d:ae:f1:94:c7:f4:84:98:8a:
cc:3f:5d:1c:4d:0c:63:f4:ce:93:87:e2:67:4c:ed:
e8:da:1e:64:5f:99:c0:3c:86:76:cb:69:74:eb:82:
c3:7a:8b:44:b2:d0:a9:43:be:da:a4:0a:40:42:24:
81:7d:93:39:8e:a3:75:5b:b1:76:77:b6:7d:f1:57:
b5:6c:7d:76:1f:d7:46:e4:e6:f8:58:a1:49:7e:89:
14:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:1D:7D:60:43:F0:CD:05:7C:0E:66:4A:F2:57:4A:26:50:82:C6:7B
X509v3 Authority Key Identifier:
keyid:2F:5C:AB:8A:09:A9:FD:E2:3C:96:35:F8:E1:64:AE:F0:9E:17:94:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1yrigmp_eI8ljX44WSu8J4XlIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/Th19YEPwzQV8DmZK8ldKJlCCxns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/L1yrigmp_eI8ljX44WSu8J4XlIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.156.0/24
45.138.159.0/24
91.188.221.0/24
92.119.162.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:b4:69:b6:f3:86:8d:15:5e:b1:a8:a8:fd:b3:d8:ec:63:7b:
26:33:dd:a6:f8:40:ad:bc:44:0d:b8:0b:46:cd:4d:bc:fc:20:
b8:94:49:bb:7d:c7:d3:ce:fc:38:97:b9:b9:d8:cd:4b:70:a1:
50:ef:b3:a8:b9:35:f8:bc:db:f1:2a:1e:57:ab:75:66:a8:24:
85:e9:d7:33:42:5b:ea:78:8d:4f:1d:6f:75:95:85:70:fd:1b:
bc:07:ff:51:42:50:2d:06:00:7f:e4:83:47:ca:d3:ac:f3:fc:
e1:36:15:cb:82:6f:4c:e7:cf:5c:d2:6d:c1:af:f6:3b:40:5a:
28:21:02:d5:df:d5:97:92:16:90:05:21:8e:3c:45:cb:ea:3e:
ac:5f:e0:f7:c5:8d:a2:d9:39:60:92:21:78:63:5a:71:51:af:
6f:15:57:79:3c:f9:2a:0a:d2:ca:e1:31:5f:83:85:a4:54:7d:
ac:d2:97:d8:4d:9f:42:07:d2:26:58:9b:2e:bd:4c:10:4c:9f:
8f:60:8b:3c:1c:63:d3:db:ac:d3:bd:3d:46:3f:c4:4c:0a:64:
9c:a2:70:11:91:23:58:67:b7:07:6f:07:0d:fc:d7:0c:2f:33:
93:30:b4:b1:c6:28:3b:64:30:66:28:06:3f:f6:91:4f:07:18:
4c:90:60:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:21:26 2024 by rpki-client on console-ams.rpki-client.org