Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/GWF4GmYBl11BIRhkCkabc2KcXuM.roa
File: GWF4GmYBl11BIRhkCkabc2KcXuM.roa (raw, json)
Hash identifier: b834QL/8InDNamaSfAR4XLMRIpROW/rfWXOHxq70a54=
Subject key identifier: 19:61:78:1A:66:01:97:5D:41:21:18:64:0A:46:9B:73:62:9C:5E:E3
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 01856F7981C975B6B354EC011FB13D2DE1B3
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/GWF4GmYBl11BIRhkCkabc2KcXuM.roa
Signing time: Sun 01 Jan 2023 22:35:12 +0000
ROA not before: Sun 01 Jan 2023 22:35:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48806
IP address blocks: 45.148.25.0/24 maxlen: 24
45.149.1.0/24 maxlen: 24
45.157.112.0/24 maxlen: 24
45.154.137.0/24 maxlen: 24
45.150.93.0/24 maxlen: 24
89.251.0.0/24 maxlen: 24
89.251.2.0/24 maxlen: 24
45.146.53.0/24 maxlen: 24
185.227.33.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:81:c9:75:b6:b3:54:ec:01:1f:b1:3d:2d:e1:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 1 22:35:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1961781a6601975d412118640a469b73629c5ee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:22:57:6c:ca:19:80:95:cd:1e:23:fd:f6:61:
b9:99:85:82:12:cf:f5:19:a0:32:16:3b:b7:ec:36:
0d:d9:8c:eb:5d:b6:f9:53:5f:b2:df:be:1e:49:d4:
96:11:1b:5b:fc:44:a2:9c:2d:ca:55:0c:39:7c:38:
0c:87:6c:08:49:22:12:2d:28:f8:c1:26:81:fa:63:
a9:a9:8d:70:69:a0:e4:f5:1b:f3:e6:54:30:05:54:
6f:76:b1:00:62:71:7e:03:04:88:54:ed:78:92:aa:
61:2a:02:88:bf:e4:7d:27:45:94:b8:fb:c7:d5:d4:
dc:0d:e9:3b:54:eb:92:f8:b7:27:9b:9b:07:d7:9c:
84:71:2c:5c:07:d5:00:24:a1:07:c4:90:0c:35:86:
80:23:df:0a:1b:9a:7b:53:e1:ce:13:8f:7f:ab:91:
f7:f6:5a:1c:8f:8f:4a:74:8c:d7:3c:f0:5a:69:b9:
9d:f9:51:9a:0c:68:7f:cf:0d:8d:5a:d4:a0:b5:5e:
60:01:5d:fd:84:35:67:e3:87:b3:86:3c:7d:be:d3:
26:35:a3:98:2a:0d:28:84:a7:67:57:3c:8e:b7:89:
14:75:20:51:d5:dc:54:46:bb:98:1f:85:f5:84:f4:
f0:3f:1b:6f:13:37:61:00:ac:9f:01:7a:b6:f9:21:
04:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:61:78:1A:66:01:97:5D:41:21:18:64:0A:46:9B:73:62:9C:5E:E3
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/GWF4GmYBl11BIRhkCkabc2KcXuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.53.0/24
45.148.25.0/24
45.149.1.0/24
45.150.93.0/24
45.154.137.0/24
45.157.112.0/24
89.251.0.0/24
89.251.2.0/24
185.227.33.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:19:40:6b:28:c7:b5:eb:dc:e5:6e:75:e1:0e:0c:03:2e:41:
81:a2:d2:bd:8d:bd:7d:61:3a:6d:a0:3b:30:d8:a2:53:7f:67:
5b:05:54:d3:95:8a:ba:25:10:66:3c:38:07:66:f8:0b:87:5f:
c2:9e:44:c7:c4:e1:d2:8a:70:43:25:ea:8f:99:59:c9:fc:9d:
5d:c5:9b:40:13:9f:40:fe:39:46:76:45:ea:0e:68:e1:c0:73:
61:9b:db:59:c8:53:55:55:6b:0c:1c:a4:7c:17:50:b7:51:48:
a4:01:40:0d:0f:0c:52:3a:91:b0:9d:03:48:72:9f:6b:83:0f:
cd:95:4e:76:df:26:d1:1b:73:57:2f:b4:b2:25:bb:04:16:2e:
32:9f:29:c5:db:b5:ce:71:5c:f9:8a:3d:66:bc:4f:fc:a1:3c:
b4:e1:df:33:95:93:5c:e7:01:03:b5:2b:ce:72:c3:d8:9c:07:
6c:4c:55:20:bc:a5:6b:5f:0a:84:7b:1f:f2:8c:c6:b4:02:79:
8f:46:50:58:de:39:e7:aa:c3:4e:9e:ab:40:46:3d:57:7e:fd:
79:94:ab:8d:80:07:96:b0:66:f2:9e:69:3f:ac:13:c1:c3:a2:
c4:2e:f8:40:6c:ea:cf:68:cd:d8:16:45:fa:d6:64:96:71:dd:
e4:5c:44:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:51:57 2024 by rpki-client on console-fra.rpki-client.org