Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/VIDsrxQlu9ianSjlkWS1xhXqlvA.roa
File: VIDsrxQlu9ianSjlkWS1xhXqlvA.roa (raw, json)
Hash identifier: AjPrVS1BLBe06s1aSQGxfVKWNYMsP1XDBsFEyuiwhAU=
Subject key identifier: 54:80:EC:AF:14:25:BB:D8:9A:9D:28:E5:91:64:B5:C6:15:EA:96:F0
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 018A5AC3A0478FB20898B68A0F4C8CF8FEC7
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/VIDsrxQlu9ianSjlkWS1xhXqlvA.roa
Signing time: Sun 03 Sep 2023 11:18:04 +0000
ROA not before: Sun 03 Sep 2023 11:18:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197730
IP address blocks: 45.136.185.0/24 maxlen: 24
45.136.186.0/24 maxlen: 24
45.136.187.0/24 maxlen: 24
45.130.181.0/24 maxlen: 24
45.130.183.0/24 maxlen: 24
45.130.182.0/24 maxlen: 24
45.130.180.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:5a:c3:a0:47:8f:b2:08:98:b6:8a:0f:4c:8c:f8:fe:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Sep 3 11:18:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5480ecaf1425bbd89a9d28e59164b5c615ea96f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:23:e8:e9:db:7b:40:38:1e:24:75:e4:dc:2a:
7f:11:c0:cd:2f:ac:7a:2b:d8:8e:70:1e:92:a4:90:
5b:94:57:55:9d:5c:12:57:67:86:79:e4:8d:35:5d:
a6:b0:54:0f:a4:d8:eb:3e:3e:ae:66:a9:64:d9:07:
cc:b7:eb:20:2e:19:63:d9:2e:4f:31:35:0a:a4:d1:
cc:ed:c1:44:36:d5:0c:1c:25:ba:6b:73:12:9d:54:
aa:fa:b3:4b:31:af:ee:d5:9b:86:79:fc:cb:1d:5b:
4e:a4:70:cf:65:b1:ba:f9:7a:20:c2:17:3e:c1:0a:
ea:7b:ff:7d:05:32:93:7d:92:21:6b:39:65:46:25:
48:3e:3f:57:b7:ed:c0:cb:c1:c5:ec:4d:a1:a0:14:
e8:59:97:e3:a5:48:17:0b:42:e8:70:2a:07:f4:57:
68:6f:6b:1f:62:67:65:ea:59:99:10:27:41:50:ae:
ba:3a:bf:fc:61:f1:15:d3:b9:93:d7:06:a8:cd:a5:
08:32:9f:10:5e:05:41:e9:6f:c9:32:b3:8f:04:71:
af:8e:e9:a0:48:ae:e5:b7:5d:17:54:16:42:3e:a9:
5f:22:c3:58:fc:a3:5c:94:6a:3f:65:8b:98:80:53:
0c:88:6c:2a:f3:22:4d:29:39:df:56:df:e6:7c:90:
d1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:80:EC:AF:14:25:BB:D8:9A:9D:28:E5:91:64:B5:C6:15:EA:96:F0
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/VIDsrxQlu9ianSjlkWS1xhXqlvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.180.0/22
45.136.185.0-45.136.187.255
Signature Algorithm: sha256WithRSAEncryption
33:3d:ad:7a:23:be:50:14:b2:a4:24:0a:c3:57:51:49:c2:69:
9e:d3:46:59:82:18:91:fb:f8:42:14:1d:38:48:85:51:5d:c1:
03:e0:63:f0:13:9e:01:c9:d2:30:8e:9f:5b:0c:b4:b3:2c:70:
bb:03:91:44:06:9a:e4:61:7c:a7:ec:29:c3:85:46:71:28:c4:
04:7e:45:bf:b5:61:42:ef:00:86:86:b4:3e:7e:9e:d8:c6:0a:
6a:93:ab:35:dc:59:97:6b:16:7a:f1:f7:19:cb:d7:c2:c1:eb:
45:88:45:8c:e6:98:26:f1:dc:a6:d4:6f:37:15:6d:8d:b6:28:
08:7c:34:d7:d2:34:04:02:66:ec:0a:84:6b:96:29:7f:43:69:
b3:dd:48:5f:bf:1b:96:78:fd:14:58:98:52:4f:8a:58:44:03:
e0:18:48:13:88:fd:5d:46:80:04:13:d5:47:92:c5:3b:94:88:
4a:6c:76:e3:0b:93:be:32:e8:66:9f:e8:65:c8:82:a5:51:42:
29:80:fc:55:63:63:87:b1:bc:d7:3b:2b:de:8f:3b:ad:45:eb:
42:63:23:89:30:15:f6:22:e8:fa:06:9b:9f:ab:fa:b6:14:ff:
be:14:59:72:bd:e9:6f:82:d4:a3:6b:10:2d:e0:c0:3b:26:42:
d7:b1:c5:58
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Sep 18 11:24:46 2023 by rpki-client on console-fra.rpki-client.org