Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/nPBaznlSdDrb-KFfo_UNCYanzV0.roa
File: nPBaznlSdDrb-KFfo_UNCYanzV0.roa (raw, json)
Hash identifier: u/MNysZ/VcTG2+Ux3ytBdjC5BmDVV49jmj3jAB8+/LQ=
Subject key identifier: 9C:F0:5A:CE:79:52:74:3A:DB:F8:A1:5F:A3:F5:0D:09:86:A7:CD:5D
Certificate issuer: /CN=1372e0c2b83dd5109013c7f1c0bb9716d3618dd2
Certificate serial: 018823634ACBBCA86DDD1278B016F9D2692E
Authority key identifier: 13:72:E0:C2:B8:3D:D5:10:90:13:C7:F1:C0:BB:97:16:D3:61:8D:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3Lgwrg91RCQE8fxwLuXFtNhjdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/nPBaznlSdDrb-KFfo_UNCYanzV0.roa
Signing time: Tue 16 May 2023 07:08:09 +0000
ROA not before: Tue 16 May 2023 07:08:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199967
IP address blocks: 92.118.44.0/24 maxlen: 24
92.118.47.0/24 maxlen: 24
45.85.3.0/24 maxlen: 24
45.85.1.0/24 maxlen: 24
45.146.121.0/24 maxlen: 24
45.146.120.0/24 maxlen: 24
45.90.141.0/24 maxlen: 24
45.90.143.0/24 maxlen: 24
5.252.197.0/24 maxlen: 24
2.56.151.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:23:63:4a:cb:bc:a8:6d:dd:12:78:b0:16:f9:d2:69:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1372e0c2b83dd5109013c7f1c0bb9716d3618dd2
Validity
Not Before: May 16 07:08:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9cf05ace7952743adbf8a15fa3f50d0986a7cd5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:60:db:e9:68:cc:d3:b0:7f:c6:33:b8:01:84:
b7:4a:e7:2f:09:62:8d:6b:fd:79:18:5e:4b:37:4f:
22:cd:a0:16:f7:0a:e4:d9:ec:e0:78:9f:79:a2:f8:
50:ba:a1:81:c0:43:49:12:51:c6:21:0a:96:5c:91:
2c:79:d2:e3:f0:ed:9b:5c:e5:c2:cf:2a:30:f1:12:
a9:0e:bc:8d:e2:68:8e:48:7a:b1:84:2c:e5:bb:ce:
18:c7:b6:dd:26:a8:8e:c7:34:ba:e6:9c:f6:3a:58:
b4:15:8f:15:b0:d6:62:49:55:e2:c2:31:84:1d:ef:
e5:7d:08:d5:2e:57:a6:a0:9a:5c:0f:56:b4:c3:16:
a6:cb:60:72:3a:91:84:65:e4:dd:6d:48:2e:03:81:
fb:3f:dd:fd:b8:a2:55:c6:07:b2:d1:eb:58:04:10:
e4:48:29:ee:d6:72:c5:b0:2b:d4:05:90:91:b6:14:
e0:29:1e:fa:6e:d5:9c:73:52:77:1f:f8:33:84:42:
e7:c3:80:cc:99:84:ba:15:b6:fd:8e:1f:b5:21:5b:
62:e0:35:13:0d:db:16:a4:ed:a4:b6:61:95:ea:ed:
4e:d2:e7:27:08:af:ac:25:bc:d9:37:c4:1a:80:4f:
c6:bc:12:d8:a3:0e:56:91:f3:b6:24:54:07:df:14:
73:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:F0:5A:CE:79:52:74:3A:DB:F8:A1:5F:A3:F5:0D:09:86:A7:CD:5D
X509v3 Authority Key Identifier:
keyid:13:72:E0:C2:B8:3D:D5:10:90:13:C7:F1:C0:BB:97:16:D3:61:8D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3Lgwrg91RCQE8fxwLuXFtNhjdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/nPBaznlSdDrb-KFfo_UNCYanzV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.151.0/24
5.252.197.0/24
45.85.1.0/24
45.85.3.0/24
45.90.141.0/24
45.90.143.0/24
45.146.120.0/23
92.118.44.0/24
92.118.47.0/24
Signature Algorithm: sha256WithRSAEncryption
92:38:42:e7:fd:2e:8f:24:5a:39:37:fb:77:0c:f2:f0:1c:4f:
28:d5:29:40:97:08:94:9f:92:be:df:ad:6e:ee:15:36:0f:67:
da:1d:94:1d:74:37:f8:80:36:19:3b:8f:da:b7:7b:29:98:bf:
64:cc:b5:fa:24:4f:dc:7b:9b:cb:57:96:fd:e3:19:64:70:f2:
c0:27:5c:b3:66:2b:41:76:e8:9d:10:22:31:d5:d9:02:72:1a:
e5:46:8f:c0:28:9c:6d:ee:4b:74:fc:ad:bd:8e:d2:fb:93:da:
6c:93:3e:4d:9c:18:0a:64:dd:70:26:56:0a:7a:c2:97:8a:a3:
28:11:b3:63:e1:86:12:a6:cd:48:b6:77:29:b9:ff:e3:e5:d1:
23:ab:06:06:7c:ea:f1:eb:42:6c:8c:2e:4e:13:31:5b:6e:af:
89:08:52:e1:67:00:ca:78:d5:0d:5c:75:3e:14:5b:1f:f0:14:
cb:93:ec:7e:12:3f:c9:2d:cc:79:2e:0a:f3:b7:e3:42:6b:2a:
5d:c8:65:c1:64:8a:0c:43:f1:90:c0:a2:4a:e8:29:7a:6b:a0:
67:b8:0e:e3:f3:6c:fb:58:7f:92:73:13:a8:9c:8d:8e:c0:47:
b7:f1:44:31:b9:c6:a4:d8:76:a8:f2:03:43:b9:7c:7a:9d:52:
3f:05:f4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:28 2023 by rpki-client on console-ams.rpki-client.org