Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/YXx3CcIQ_DpnEA7kLFL2XTFvIBM.roa
File: YXx3CcIQ_DpnEA7kLFL2XTFvIBM.roa (raw, json)
Hash identifier: bz8Y8hkbJMbenfPqtkFC7/d0yf9BwX6Du9VyS3KXDBg=
Subject key identifier: 61:7C:77:09:C2:10:FC:3A:67:10:0E:E4:2C:52:F6:5D:31:6F:20:13
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 0185822D44E2B2D7C6D41CC997AA2715D308
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/YXx3CcIQ_DpnEA7kLFL2XTFvIBM.roa
Signing time: Thu 05 Jan 2023 13:44:42 +0000
ROA not before: Thu 05 Jan 2023 13:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20712
IP address blocks: 45.140.215.0/24 maxlen: 24
45.142.205.0/24 maxlen: 24
45.142.207.0/24 maxlen: 24
45.144.159.0/24 maxlen: 24
45.144.157.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:82:2d:44:e2:b2:d7:c6:d4:1c:c9:97:aa:27:15:d3:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 5 13:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=617c7709c210fc3a67100ee42c52f65d316f2013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:5e:2a:47:af:ce:ff:d8:88:eb:e7:f2:6a:40:
53:46:35:f0:6c:c1:2d:b6:d7:7e:32:22:08:db:1e:
65:07:43:8b:f6:a5:cd:fa:f8:2e:ba:d8:cb:d9:86:
d6:1b:21:51:63:e7:02:70:51:98:5f:bb:75:c0:bb:
2d:5f:d4:e2:a2:8d:d4:14:52:69:99:bf:de:e7:18:
c7:4f:ef:d7:b9:03:8e:f0:8b:b7:98:d9:cb:77:11:
43:5e:f1:8a:e0:87:e8:ac:87:ee:da:59:25:fa:5e:
49:58:3c:b1:fc:b9:d2:6e:c5:80:74:a1:b8:63:3f:
3c:72:33:3b:d0:1b:1b:d0:63:57:ea:fd:f4:da:39:
ea:38:df:3f:98:06:4a:85:c8:b9:60:de:8c:7f:a1:
36:b7:6c:90:1c:de:ec:ba:8c:8a:2a:82:18:9f:30:
84:02:dc:65:3f:c5:59:3a:c8:53:a9:92:1d:9b:d2:
4f:90:86:68:b4:4b:ad:1e:f3:26:17:47:3e:47:63:
ee:02:45:40:38:6c:1c:a6:85:98:bb:2c:2a:07:21:
c7:c3:36:07:44:ca:28:93:28:f8:04:e2:4e:52:61:
52:2d:4a:94:dc:7f:89:9e:cc:16:49:67:aa:d7:40:
e6:3f:f5:d2:0b:31:4e:8b:17:e2:9e:1a:2b:4c:cf:
a2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:7C:77:09:C2:10:FC:3A:67:10:0E:E4:2C:52:F6:5D:31:6F:20:13
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/YXx3CcIQ_DpnEA7kLFL2XTFvIBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.215.0/24
45.142.205.0/24
45.142.207.0/24
45.144.157.0/24
45.144.159.0/24
Signature Algorithm: sha256WithRSAEncryption
54:01:b9:80:cf:b2:35:9f:c7:4c:e0:77:99:98:4a:8e:a2:95:
cc:a7:4b:6a:63:c2:b7:73:c2:3c:9a:4f:cf:21:6a:ca:29:8b:
27:6f:a1:ab:e2:91:86:74:75:c8:22:2e:a6:61:71:df:b6:e2:
dc:da:2c:c9:da:07:ee:f2:92:60:bb:d2:c0:68:b3:3f:ab:b0:
03:30:4c:62:f2:3f:e1:2b:60:4c:2f:4f:7a:b0:ee:5b:f4:6d:
32:80:7d:75:a0:3d:0b:87:55:b8:5f:02:28:ef:ed:d7:e1:f5:
94:67:c9:2c:b1:c7:98:2a:01:8e:fb:f6:26:2d:31:3b:c3:29:
ba:0f:5b:d8:44:fe:5e:fa:bb:76:a3:0f:9c:e2:1e:2b:e2:89:
37:7c:0c:fe:f8:a4:9d:d9:02:15:0f:32:0c:54:88:37:6d:77:
7a:c9:97:a3:d7:4c:aa:15:11:50:54:07:48:d8:d1:24:d7:0e:
60:6a:be:62:bc:46:9e:45:42:49:df:a3:c9:27:92:de:94:fd:
41:56:81:41:a2:57:b5:d2:88:e2:18:47:de:b9:45:41:9a:33:
23:9a:de:4e:28:b6:b1:af:93:c0:05:9c:2f:57:01:b9:06:e4:
21:d2:e3:40:2f:9a:56:5f:6f:79:f0:6a:32:d5:b0:05:b2:7e:
3e:5f:1a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:01:43 2024 by rpki-client on console-ams.rpki-client.org