Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/ATBxAdsg0EyRxE7rCfkhj8eBjiQ.roa
File: ATBxAdsg0EyRxE7rCfkhj8eBjiQ.roa (raw, json)
Hash identifier: LiMI+7VwvUiDLoEmkUJUuWj0BqnYjZR6WvUcZmEX8/M=
Subject key identifier: 01:30:71:01:DB:20:D0:4C:91:C4:4E:EB:09:F9:21:8F:C7:81:8E:24
Certificate issuer: /CN=1372e0c2b83dd5109013c7f1c0bb9716d3618dd2
Certificate serial: 0188AE6E1E479F66764A0CB7511A35299AE1
Authority key identifier: 13:72:E0:C2:B8:3D:D5:10:90:13:C7:F1:C0:BB:97:16:D3:61:8D:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3Lgwrg91RCQE8fxwLuXFtNhjdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/ATBxAdsg0EyRxE7rCfkhj8eBjiQ.roa
Signing time: Mon 12 Jun 2023 07:07:12 +0000
ROA not before: Mon 12 Jun 2023 07:07:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 45.146.120.0/24 maxlen: 24
45.146.121.0/24 maxlen: 24
45.85.1.0/24 maxlen: 24
45.85.3.0/24 maxlen: 24
45.90.143.0/24 maxlen: 24
45.90.141.0/24 maxlen: 24
5.252.197.0/24 maxlen: 24
2.56.151.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ae:6e:1e:47:9f:66:76:4a:0c:b7:51:1a:35:29:9a:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1372e0c2b83dd5109013c7f1c0bb9716d3618dd2
Validity
Not Before: Jun 12 07:07:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=01307101db20d04c91c44eeb09f9218fc7818e24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6f:40:4e:c3:e2:86:83:9d:b7:59:c6:05:ad:
e1:1f:14:2f:a5:02:86:f4:b7:30:4c:45:56:7e:ac:
be:8f:7f:cc:be:19:e1:65:fe:82:ec:6b:a4:34:a8:
56:e4:5b:97:9e:7e:0a:ee:b3:05:e6:4c:1c:d7:56:
03:8b:56:fd:e3:82:2b:ca:2b:9d:b2:51:2f:bb:5b:
8f:63:99:f8:28:25:b2:15:81:28:d5:20:43:9f:68:
38:82:4b:de:aa:4e:6e:e8:37:58:13:cb:8d:d1:dd:
96:ff:bf:90:8a:40:c4:fa:53:f6:0d:58:48:3d:95:
c7:ad:3f:2d:02:5b:bc:7f:ca:1a:ac:b6:ff:23:21:
36:6e:a1:6c:67:af:8a:a6:be:7c:fe:72:9d:d9:77:
29:39:d5:ce:c5:bb:e6:93:b1:ac:40:7c:99:6d:12:
ed:e4:81:6a:04:7a:9a:8a:26:7e:08:58:72:9e:22:
dd:8c:23:9a:0a:ad:06:36:a2:1b:40:f8:1e:7d:0b:
59:99:27:fe:f1:af:e1:ef:e1:05:8b:73:1e:bc:d0:
24:28:12:f5:e5:16:72:e1:21:34:21:ca:97:3d:a2:
6b:3a:81:e4:e8:83:3f:17:29:c6:dd:8c:2c:45:2b:
6a:c0:9e:26:3a:31:d0:b4:e6:6f:65:70:75:6f:cd:
40:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:30:71:01:DB:20:D0:4C:91:C4:4E:EB:09:F9:21:8F:C7:81:8E:24
X509v3 Authority Key Identifier:
keyid:13:72:E0:C2:B8:3D:D5:10:90:13:C7:F1:C0:BB:97:16:D3:61:8D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3Lgwrg91RCQE8fxwLuXFtNhjdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/ATBxAdsg0EyRxE7rCfkhj8eBjiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.151.0/24
5.252.197.0/24
45.85.1.0/24
45.85.3.0/24
45.90.141.0/24
45.90.143.0/24
45.146.120.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:4c:2e:be:4d:02:92:a3:eb:0e:cf:75:8f:85:50:fa:80:c3:
3d:6e:3d:bf:33:9d:aa:59:3f:38:db:29:9c:f4:d7:76:41:56:
88:02:e9:12:47:56:57:31:ae:31:59:c4:5e:ff:d5:2c:a3:0a:
53:da:e8:a5:5f:6d:e8:a0:21:1d:d2:77:56:8d:3e:98:e7:37:
14:7a:ac:2a:ae:a8:57:05:5c:46:99:27:f1:f8:f7:ce:a0:2d:
d0:08:f4:c9:c0:de:54:94:88:d5:cc:5b:6f:33:05:e4:b7:02:
bc:07:45:e2:84:f9:a7:02:44:f4:3e:4e:41:15:7b:5b:f3:d8:
24:8f:bf:ab:e1:16:e3:f0:7a:e2:41:e5:60:86:f8:f3:f7:29:
10:8b:4b:94:0c:e7:53:99:80:12:71:f8:44:30:67:d6:9c:0c:
ec:2a:7c:21:94:db:30:2f:e0:b4:35:c2:46:7a:8c:69:e1:23:
ae:94:12:1f:65:43:f7:dd:7b:af:56:77:54:a6:19:f5:f9:e5:
6f:1e:7c:e2:7e:a2:7d:dc:1e:27:61:7f:04:71:3a:95:d7:09:
81:81:5b:86:8b:51:4b:16:63:7e:e6:c9:e3:91:de:ca:df:7d:
55:be:f1:14:cf:c9:f5:5d:69:27:de:92:32:60:0d:a9:4d:82:
bd:c8:84:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:28 2023 by rpki-client on console-ams.rpki-client.org