Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/18OzxwkWYLuuwnSrY7Sz6QA7wis.roa
File: 18OzxwkWYLuuwnSrY7Sz6QA7wis.roa (raw, json)
Hash identifier: QiI+tcIU28b7vKzk7iNu5welAjdfk7fdNOJIEpCXz0o=
Subject key identifier: D7:C3:B3:C7:09:16:60:BB:AE:C2:74:AB:63:B4:B3:E9:00:3B:C2:2B
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 0187DBF02C6AE7B9025C8EF51C54DE9DECA4
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/18OzxwkWYLuuwnSrY7Sz6QA7wis.roa
Signing time: Tue 02 May 2023 10:09:22 +0000
ROA not before: Tue 02 May 2023 10:09:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.149.74.0/23 maxlen: 24
45.149.75.0/24 maxlen: 24
45.149.74.0/24 maxlen: 24
45.133.89.0/24 maxlen: 24
45.133.90.0/24 maxlen: 24
45.133.91.0/24 maxlen: 24
45.133.88.0/24 maxlen: 24
193.37.249.0/24 maxlen: 24
176.110.110.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:db:f0:2c:6a:e7:b9:02:5c:8e:f5:1c:54:de:9d:ec:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: May 2 10:09:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d7c3b3c7091660bbaec274ab63b4b3e9003bc22b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6a:d1:67:ea:99:51:27:6e:70:d2:eb:89:a5:
2b:f7:84:12:9f:17:f9:bf:15:34:d4:3a:56:81:93:
57:0e:b1:55:3c:89:a9:ae:d3:13:c1:81:b5:76:b3:
db:70:41:bc:77:48:4c:30:ff:6c:25:30:3e:10:18:
6f:05:e7:4d:9f:fe:4c:dd:85:8b:71:f7:3b:4e:8d:
75:6a:87:db:27:f3:1d:c1:a0:6a:ce:5d:28:8f:0d:
4c:ef:4a:82:7f:97:af:de:80:63:cf:5f:0b:dd:6b:
03:97:32:38:69:63:ab:0e:33:9a:05:55:ac:70:5d:
4d:ef:e9:54:d2:0d:97:8d:9a:61:27:d6:be:62:7e:
9a:9b:2d:3e:94:3d:8b:ea:11:29:97:b1:9c:2d:2c:
2a:30:e8:c2:0d:08:ea:5b:25:a6:cc:15:4a:1a:26:
c7:3f:3b:27:3d:7a:07:8a:83:b8:d3:e0:d6:e3:33:
28:00:aa:4e:5d:21:cc:62:04:66:6e:55:dd:10:62:
e7:35:7c:5c:27:ea:74:64:9e:0b:86:f6:fc:53:88:
8d:ad:54:cf:61:d3:e8:97:f8:0b:f9:f0:a0:61:5f:
ed:58:3f:eb:8d:15:0f:a4:8f:86:4a:9d:7d:ea:e1:
ed:91:29:64:94:ff:41:20:42:bf:6f:a6:e4:b4:2e:
3b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C3:B3:C7:09:16:60:BB:AE:C2:74:AB:63:B4:B3:E9:00:3B:C2:2B
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/18OzxwkWYLuuwnSrY7Sz6QA7wis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.88.0/22
45.149.74.0/23
176.110.110.0/24
193.37.249.0/24
Signature Algorithm: sha256WithRSAEncryption
94:c1:5d:24:d5:01:94:22:c2:04:e4:ad:11:a1:0a:03:2d:be:
16:37:56:50:67:1e:79:06:96:c3:1f:1d:26:0c:b8:24:8c:15:
5f:8f:f0:e8:e1:56:08:4a:71:5a:29:66:0f:f4:76:fe:a0:c2:
4f:40:80:02:85:62:cb:c9:0d:91:a6:80:5f:19:2f:3c:03:92:
29:3a:71:cc:7b:38:16:cd:a0:fe:34:94:11:b4:f2:e9:89:a1:
b9:31:cb:43:46:9b:77:4a:b1:09:f4:d7:9d:6b:42:b8:e8:69:
d3:5a:1b:ca:e4:88:1d:79:2a:9b:f6:01:ee:c9:59:e1:3f:c2:
47:a9:53:f4:a0:77:a7:80:da:e9:26:64:23:89:36:9b:74:f9:
1a:ae:e6:dd:b7:b2:ef:a7:d1:0e:c5:f3:33:9b:cd:15:d4:b4:
76:7f:a5:e8:2d:34:f5:fa:a6:b2:c7:ad:01:2f:59:81:3b:50:
99:4c:45:09:08:c5:bb:4f:1c:62:71:1b:0e:cb:00:f9:10:15:
f5:7f:c6:3c:a1:05:c8:0f:37:1b:d0:3e:d2:ba:2a:e4:b2:c6:
87:b1:60:b1:f9:d0:3a:a1:76:1d:f7:8c:cb:f8:ea:19:90:1c:
3a:6e:3b:17:cb:cf:f5:05:55:b7:ba:f5:c9:04:f8:7c:5e:a4:
8c:0c:c7:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:32 2023 by rpki-client on console-fra.rpki-client.org