Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/aweRAMCvJZY6u471Bnld4py1Sjc.roa
File: aweRAMCvJZY6u471Bnld4py1Sjc.roa (raw, json)
Hash identifier: V5sx1J1Fs2SuvkmknjXq7Kzc8R0vHawrEuqjNImmAFM=
Subject key identifier: 6B:07:91:00:C0:AF:25:96:3A:BB:8E:F5:06:79:5D:E2:9C:B5:4A:37
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 018AA7E1D75D724C324F968D6FE07B429A3E
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/aweRAMCvJZY6u471Bnld4py1Sjc.roa
Signing time: Mon 18 Sep 2023 10:41:50 +0000
ROA not before: Mon 18 Sep 2023 10:41:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197730
IP address blocks: 45.136.184.0/22 maxlen: 24
45.136.185.0/24 maxlen: 24
45.136.186.0/24 maxlen: 24
45.136.187.0/24 maxlen: 24
45.130.181.0/24 maxlen: 24
45.130.183.0/24 maxlen: 24
45.130.182.0/24 maxlen: 24
45.130.180.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a7:e1:d7:5d:72:4c:32:4f:96:8d:6f:e0:7b:42:9a:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Sep 18 10:41:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b079100c0af25963abb8ef506795de29cb54a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:6f:34:20:3d:ae:5b:e6:46:dd:12:8a:f8:ae:
e6:f0:6d:55:13:9c:a4:eb:c0:b1:b4:e8:b5:a8:ad:
02:88:82:d4:72:2f:b0:a7:a8:9f:07:84:b3:a2:03:
0f:27:f0:e0:2b:52:09:24:c1:7e:82:3f:c5:91:9f:
d0:0c:13:a7:ff:87:bd:85:a5:a1:2a:b5:35:2d:37:
84:67:ce:f2:a9:a4:be:fc:b5:5d:25:19:23:7a:e1:
d1:67:9a:35:de:e8:3e:54:00:f5:46:4c:35:f7:3e:
16:47:00:a4:af:8f:01:0e:8a:c0:ce:ef:15:9e:4f:
a1:0f:46:78:fb:31:fc:e2:e4:a2:a5:e7:ca:5d:5e:
73:65:44:a5:c0:99:41:d9:af:e9:93:0b:3f:a1:8a:
b9:6b:a7:25:e3:d7:cc:85:7d:72:da:3c:ae:45:82:
31:92:5b:e1:bb:64:24:a9:00:cc:e6:38:2a:55:29:
44:51:f6:7d:38:32:8c:6d:cf:1c:5b:95:b3:ba:60:
9b:38:7a:d4:0c:ce:76:f6:42:f6:78:79:ce:dc:9f:
a6:69:94:c9:33:31:64:4b:ae:4a:41:6b:74:37:fd:
68:26:57:c3:e0:d7:68:0e:78:bc:d2:01:c6:ce:03:
08:7b:9e:49:1b:9b:2a:0e:a3:d8:9f:3c:5d:a9:53:
e7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:07:91:00:C0:AF:25:96:3A:BB:8E:F5:06:79:5D:E2:9C:B5:4A:37
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/aweRAMCvJZY6u471Bnld4py1Sjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.180.0/22
45.136.184.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:24:fa:be:39:16:27:71:7d:b7:28:19:58:a8:77:05:e1:58:
45:c0:dc:19:0f:ef:94:15:dd:cb:02:76:01:9a:7f:34:15:6f:
12:b4:78:c8:8b:21:e7:f0:be:ff:2e:71:37:b8:92:10:24:c3:
ef:a0:51:a5:53:6f:70:c2:27:86:c1:32:26:e3:fa:83:b2:76:
e2:52:0d:68:65:c1:ea:a3:08:4f:7f:eb:69:f7:f2:af:49:c0:
e2:ab:88:7c:50:ee:2e:33:e1:9f:6b:6b:4c:7b:79:69:52:23:
8a:bf:24:83:64:1e:e7:58:9e:90:c5:73:96:f0:64:22:46:dd:
e2:94:be:51:03:7f:fb:aa:af:ab:4e:f1:c5:5f:84:7d:05:55:
db:f3:36:8a:d2:69:00:bb:1e:2d:ba:0a:43:ef:c6:d1:af:3b:
dd:f8:b7:42:81:98:63:79:6a:11:d8:60:52:63:b7:ac:90:49:
a8:12:ba:11:c9:40:90:2f:06:c2:09:9c:6d:ec:6a:c8:cd:5c:
81:e1:34:33:5c:b0:f8:21:a0:0f:a4:ed:93:9b:b0:1c:57:18:
cb:50:37:ce:0c:a1:ce:e9:72:17:a3:de:99:b7:31:9c:f0:45:
4b:71:75:6f:66:71:20:25:a6:d1:91:83:de:9d:2a:05:9c:09:
2d:3d:56:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 17 16:42:52 2023 by rpki-client on console-fra.rpki-client.org