Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/vOEiP1DOr7GS3hbWHKmGO-prybk.roa
File: vOEiP1DOr7GS3hbWHKmGO-prybk.roa (raw, json)
Hash identifier: ZyYkjAlFvSvP7KUxxPkHTke5BpLH7IBe46jdsQfFC8c=
Subject key identifier: BC:E1:22:3F:50:CE:AF:B1:92:DE:16:D6:1C:A9:86:3B:EA:6B:C9:B9
Certificate issuer: /CN=c8d5e37178d8524c72660a1d796165999e586622
Certificate serial: 018570F0B42B12A36602C62A67A3D18C07F8
Authority key identifier: C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/vOEiP1DOr7GS3hbWHKmGO-prybk.roa
Signing time: Mon 02 Jan 2023 05:25:00 +0000
ROA not before: Mon 02 Jan 2023 05:25:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 45.151.204.0/22 maxlen: 24
45.67.44.0/22 maxlen: 22
91.239.24.0/24 maxlen: 24
45.12.44.0/22 maxlen: 24
45.95.140.0/22 maxlen: 24
45.86.192.0/22 maxlen: 22
2.57.180.0/22 maxlen: 24
45.15.52.0/22 maxlen: 22
2.59.116.0/24 maxlen: 24
91.238.217.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:b4:2b:12:a3:66:02:c6:2a:67:a3:d1:8c:07:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d5e37178d8524c72660a1d796165999e586622
Validity
Not Before: Jan 2 05:25:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bce1223f50ceafb192de16d61ca9863bea6bc9b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f5:d3:7c:c5:2f:94:2d:4f:e3:47:d2:df:8e:
91:21:e3:b9:00:30:bb:bc:ff:b9:a9:c2:f8:8c:6b:
cb:55:b9:76:26:8c:03:83:e4:18:9f:7c:42:9e:fd:
f3:41:69:19:c6:f9:8c:69:05:ab:fd:19:7c:1f:0a:
26:30:62:20:48:6f:d0:02:44:7d:d4:8d:cb:dc:ba:
1b:fe:62:30:3e:d6:46:ce:0e:06:c8:b6:78:df:7f:
30:c9:23:76:47:9d:7b:68:c9:14:89:31:ac:8b:3c:
bd:1c:ec:01:0c:2f:54:d3:6d:ea:b0:0f:c8:a0:3d:
69:38:11:02:0e:cb:25:6c:b8:3c:7f:df:87:9f:00:
1f:8f:29:4f:45:8b:6b:73:8a:9b:fe:df:a2:df:18:
14:72:6f:cc:51:25:c8:5c:24:d0:cc:21:ad:1d:8e:
d1:73:a1:2b:12:24:a1:8e:4c:08:19:28:7f:a0:a8:
f1:b0:1d:a5:d7:6c:6c:63:47:e0:7d:52:5e:60:ce:
00:59:30:36:b8:71:9c:ff:dd:f2:66:d8:33:a4:e8:
9e:e2:86:31:c2:c6:9c:a4:c3:f7:53:bb:2e:96:f0:
c9:3b:5b:ef:8a:14:08:90:44:2f:b6:0a:61:0b:5d:
25:55:e0:bf:86:4c:25:ef:ef:09:bd:ea:89:a3:83:
ca:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E1:22:3F:50:CE:AF:B1:92:DE:16:D6:1C:A9:86:3B:EA:6B:C9:B9
X509v3 Authority Key Identifier:
keyid:C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/vOEiP1DOr7GS3hbWHKmGO-prybk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.180.0/22
2.59.116.0/24
45.12.44.0/22
45.15.52.0/22
45.67.44.0/22
45.86.192.0/22
45.95.140.0/22
45.151.204.0/22
91.238.217.0/24
91.239.24.0/24
Signature Algorithm: sha256WithRSAEncryption
60:98:47:30:36:43:cb:43:b0:d7:60:c3:2a:06:fb:53:95:18:
76:7c:aa:a8:d4:76:f6:0f:0a:05:08:96:9b:75:50:c0:b6:cd:
10:c6:de:85:a9:69:dd:ad:81:5b:05:01:f3:91:b5:7d:4b:7a:
d4:a3:64:c6:7e:9f:a6:13:1f:57:fb:3d:68:65:9f:4c:fb:72:
d4:21:a7:7d:dc:b5:bd:9b:e1:07:1d:93:28:9f:64:75:eb:6a:
a1:ed:d2:23:e2:92:75:cc:2b:65:a5:30:3d:57:b0:e0:df:20:
9c:9a:50:55:0c:80:93:0b:57:e1:e8:2d:f3:2e:2c:d7:9a:88:
53:f0:5f:62:5f:11:fb:49:c0:df:75:25:2d:9b:9a:3f:4c:d0:
1a:3d:22:fe:88:2a:47:14:22:70:a2:f9:e3:6d:a1:da:f0:49:
b1:32:86:ad:68:a4:6c:e2:7a:5e:59:ff:74:c3:60:3c:7a:d6:
31:1b:7a:75:5b:5e:90:c5:58:4e:0b:8b:9d:59:f6:2f:a2:71:
31:89:64:b9:5d:f3:d0:0c:aa:6a:c9:5f:46:ab:05:0d:69:e8:
00:d4:03:a5:9d:7a:63:2a:7b:82:d0:eb:c4:c5:a1:48:e3:8c:
92:b2:77:38:e0:eb:38:7b:1c:c9:f7:7d:35:2c:cf:3f:4a:f5:
be:83:35:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 9 12:10:30 2023 by rpki-client on console-fra.rpki-client.org