Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/7ePud7bf7ehRXEjyn0yTO-b6Alw.roa
File: 7ePud7bf7ehRXEjyn0yTO-b6Alw.roa (raw, json)
Hash identifier: dFc6dKp97adpePUk+/Tk5s04arhxSpJGshRLAv5OF5U=
Subject key identifier: ED:E3:EE:77:B6:DF:ED:E8:51:5C:48:F2:9F:4C:93:3B:E6:FA:02:5C
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 018851C329D350D07DFEDBE2316644D9CB5C
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/7ePud7bf7ehRXEjyn0yTO-b6Alw.roa
Signing time: Thu 25 May 2023 07:15:24 +0000
ROA not before: Thu 25 May 2023 07:15:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210636
IP address blocks: 45.139.254.0/23 maxlen: 24
45.94.30.0/24 maxlen: 24
45.94.28.0/23 maxlen: 24
45.148.26.0/24 maxlen: 24
93.185.163.0/24 maxlen: 24
45.88.246.0/24 maxlen: 24
45.132.192.0/24 maxlen: 24
45.88.247.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:51:c3:29:d3:50:d0:7d:fe:db:e2:31:66:44:d9:cb:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: May 25 07:15:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ede3ee77b6dfede8515c48f29f4c933be6fa025c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:87:59:09:26:44:9e:fb:e6:d7:75:68:d0:7e:
05:4c:97:3f:1e:51:e4:cd:b2:07:3f:30:21:ed:b9:
8a:44:5e:75:2e:7a:19:1a:0c:c8:cd:cf:5d:48:eb:
48:4c:f5:c0:cf:e9:90:07:d7:84:5f:10:81:e1:df:
f4:aa:b9:77:78:83:4a:a1:e9:a5:20:eb:2a:67:40:
9e:8b:94:0a:dc:5e:e2:c1:e1:3c:23:2d:43:6b:e9:
cd:a4:6c:98:28:8c:d1:61:26:28:a0:60:1d:58:a5:
b9:79:95:bd:27:4a:82:d4:b9:63:33:dc:b1:59:5f:
05:7a:17:ba:7b:f8:f3:b3:30:41:a8:72:13:a5:14:
16:07:31:7d:fa:b9:61:88:49:05:a8:a6:7d:c3:2b:
75:d3:01:7b:04:ac:f3:b0:80:fc:87:7e:73:ae:e0:
24:55:c1:4d:48:c6:ba:9a:47:c9:74:d1:5f:d2:cc:
80:81:3b:f0:fd:84:53:01:77:ad:b5:42:2e:9e:c4:
8d:3b:e0:af:d3:63:a2:92:25:10:fd:7d:44:ff:d0:
c9:96:3c:96:40:ad:d2:f7:57:26:90:64:cd:55:ee:
c2:87:25:3b:53:e7:11:41:db:09:c5:ee:af:96:2e:
76:e2:ab:53:40:c1:15:28:1e:69:a3:6f:0e:e2:36:
b3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:E3:EE:77:B6:DF:ED:E8:51:5C:48:F2:9F:4C:93:3B:E6:FA:02:5C
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/7ePud7bf7ehRXEjyn0yTO-b6Alw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.246.0/23
45.94.28.0-45.94.30.255
45.132.192.0/24
45.139.254.0/23
45.148.26.0/24
93.185.163.0/24
Signature Algorithm: sha256WithRSAEncryption
82:3e:d0:1a:cd:b1:cf:50:f7:1b:f2:fc:66:8e:07:34:9f:a8:
e8:cd:2d:ad:65:67:70:f6:c8:ec:97:29:8c:f8:30:ed:9b:51:
a3:5b:62:a3:bb:b4:49:04:ed:df:da:8a:ff:94:47:4b:ba:1f:
41:79:f9:2c:d3:d5:df:bf:75:e4:62:ed:d7:76:10:20:b7:6f:
fd:c3:c0:a2:22:4f:9b:63:fd:a1:74:cc:ce:a6:e1:8d:0a:f1:
ce:88:64:37:bf:b0:ac:28:36:4d:8d:a6:99:61:00:d2:7f:7b:
6d:e5:a5:77:0b:c9:bd:18:61:28:a9:f1:43:d3:4d:bd:7e:44:
f3:27:f0:98:e6:cc:c6:07:cc:23:e3:19:fd:2e:ae:03:09:4e:
6b:01:95:b8:0c:04:37:81:8c:ef:7a:76:34:b4:e2:da:d1:75:
24:b8:f2:74:5d:4f:f8:f0:57:2f:a1:1b:59:cd:13:ec:6f:12:
bc:9c:3b:67:8c:6b:e4:50:61:b4:66:df:d0:fe:1b:5a:43:d0:
dd:84:e0:41:4f:85:be:d0:fc:24:a2:06:89:d6:2d:cf:d5:51:
f4:e0:c1:6d:ab:61:2a:3b:70:dd:f9:b7:cf:f9:86:ff:93:6a:
08:37:ee:4a:6c:8e:0c:75:d6:65:73:a4:ec:f9:12:c1:73:3a:
c3:a9:7b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:24 2023 by rpki-client on console-ams.rpki-client.org