Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/98a661-44f5-4a05-acaa-e67582f23097/1/u5F7H9NKSQsdXGWliSNbYZhok0c.roa
File: u5F7H9NKSQsdXGWliSNbYZhok0c.roa (raw, json)
Hash identifier: A2JRyUZNOCg3Mh7s3a4W+l7vyywCk7Lqojh6NhMUocs=
Subject key identifier: BB:91:7B:1F:D3:4A:49:0B:1D:5C:65:A5:89:23:5B:61:98:68:93:47
Certificate issuer: /CN=0e831fd70c6bd37a2a75d7a0eac031c92da8e185
Certificate serial: 018583B258ED9A2AF4A233527C56CE4B6021
Authority key identifier: 0E:83:1F:D7:0C:6B:D3:7A:2A:75:D7:A0:EA:C0:31:C9:2D:A8:E1:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DoMf1wxr03oqddeg6sAxyS2o4YU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/98a661-44f5-4a05-acaa-e67582f23097/1/u5F7H9NKSQsdXGWliSNbYZhok0c.roa
Signing time: Thu 05 Jan 2023 20:49:41 +0000
ROA not before: Thu 05 Jan 2023 20:49:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212091
IP address blocks: 45.147.85.0/24 maxlen: 24
45.147.86.0/24 maxlen: 24
185.230.103.0/24 maxlen: 24
45.130.46.0/24 maxlen: 24
45.130.47.0/24 maxlen: 24
2a10:b583::/32 maxlen: 32
2a10:b581::/32 maxlen: 32
2a10:b582::/32 maxlen: 32
2a10:b580::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:83:b2:58:ed:9a:2a:f4:a2:33:52:7c:56:ce:4b:60:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e831fd70c6bd37a2a75d7a0eac031c92da8e185
Validity
Not Before: Jan 5 20:49:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bb917b1fd34a490b1d5c65a589235b6198689347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:4c:92:34:99:cc:79:50:af:30:00:8d:8d:b3:
6f:b3:f2:16:79:dd:9d:3f:ee:75:35:36:a8:58:c2:
d7:6e:9b:72:ff:66:8b:ea:50:06:1b:13:84:84:e0:
00:fc:aa:f5:55:ba:04:b0:67:db:9d:5a:3f:4a:a1:
a5:49:7d:80:f0:ac:dc:06:59:80:d5:b8:2c:da:fd:
5a:7d:43:6f:0b:cf:de:85:47:ad:54:f6:34:c1:c3:
cc:d1:12:6a:59:56:ca:01:52:e3:7f:84:08:ed:06:
35:e9:ec:f2:61:62:3d:08:32:d9:32:3c:6f:f2:23:
22:41:80:4c:51:b6:69:54:d5:42:10:7c:09:c6:b4:
d8:15:27:95:ce:bf:20:ef:9f:51:e8:6b:f3:65:a2:
72:1b:ab:33:6a:44:85:54:dd:a6:c1:6c:c8:aa:4a:
1c:cb:2a:30:b3:bd:ba:f3:74:4c:42:77:ac:0d:35:
74:d4:11:6b:35:69:13:bc:ff:92:9e:53:b9:22:8e:
21:43:7c:33:87:87:35:20:7b:c1:22:e6:4d:85:61:
20:ab:89:c8:2c:b1:49:18:76:1b:5b:1b:05:d3:7a:
dc:85:b3:5f:05:66:d1:8e:07:28:cd:3c:28:9f:08:
58:5b:7d:e7:e8:93:c0:bc:93:35:f6:33:b6:4d:2f:
81:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:91:7B:1F:D3:4A:49:0B:1D:5C:65:A5:89:23:5B:61:98:68:93:47
X509v3 Authority Key Identifier:
keyid:0E:83:1F:D7:0C:6B:D3:7A:2A:75:D7:A0:EA:C0:31:C9:2D:A8:E1:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DoMf1wxr03oqddeg6sAxyS2o4YU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/98a661-44f5-4a05-acaa-e67582f23097/1/u5F7H9NKSQsdXGWliSNbYZhok0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/98a661-44f5-4a05-acaa-e67582f23097/1/DoMf1wxr03oqddeg6sAxyS2o4YU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.46.0/23
45.147.85.0-45.147.86.255
185.230.103.0/24
IPv6:
2a10:b580::/30
Signature Algorithm: sha256WithRSAEncryption
67:13:1d:b5:77:6e:3b:c1:ac:69:e0:fb:93:63:ba:41:e9:1c:
5d:f2:73:0c:67:be:e9:d5:76:c5:c3:6d:49:56:bc:3a:da:0f:
eb:89:08:82:fe:5a:b2:53:db:d2:d5:6e:38:62:d2:17:3a:c5:
dc:21:f8:b8:f0:a5:13:43:e4:1e:68:4a:a1:16:14:c0:08:73:
4f:91:72:87:6c:fd:8b:82:20:73:ad:a9:06:d8:46:03:38:d2:
d6:25:a5:60:75:28:7e:31:36:b2:3b:5e:4e:1a:83:85:fa:da:
10:a7:55:28:c1:10:72:e3:d0:48:99:b9:77:f5:ec:99:b8:39:
59:b0:1b:98:2a:03:f2:67:2a:f1:f6:83:7d:33:6a:10:40:ce:
9e:e3:17:7a:fb:6f:91:d5:eb:66:64:0b:51:f0:38:15:65:01:
41:5a:40:2b:c4:74:1e:4a:cc:a1:6a:7d:44:0a:26:b6:1a:a6:
fe:34:e6:ad:2c:68:b0:0a:36:de:a0:ff:e9:53:d3:b5:03:a0:
df:bd:4b:af:bb:40:f0:54:83:c9:d0:d3:c6:78:c5:e1:ab:4e:
10:32:ab:6a:2c:9c:9f:87:f2:09:6b:f7:e0:88:e1:c4:05:04:
b3:63:20:bd:79:fc:20:70:53:58:cd:e4:17:3f:08:b6:2c:fa:
1b:93:b0:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:34:59 2024 by rpki-client on console-fra.rpki-client.org