Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/iJ-kyQDDk8E6uVBBXlybdStYVQA.roa
File: iJ-kyQDDk8E6uVBBXlybdStYVQA.roa (raw, json)
Hash identifier: qBXpQXn7ub/UDjCFgeyfAJxAePwgbrKxmi4EUnz9KhQ=
Subject key identifier: 88:9F:A4:C9:00:C3:93:C1:3A:B9:50:41:5E:5C:9B:75:2B:58:55:00
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 018BD1F293252CCCDE75DA3F3070E8AC845F
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/iJ-kyQDDk8E6uVBBXlybdStYVQA.roa
Signing time: Wed 15 Nov 2023 07:46:57 +0000
ROA not before: Wed 15 Nov 2023 07:46:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206092
IP address blocks: 45.92.229.0/24 maxlen: 24
45.86.202.0/24 maxlen: 24
45.86.200.0/24 maxlen: 24
136.144.17.0/24 maxlen: 24
193.37.33.0/24 maxlen: 24
193.37.32.0/24 maxlen: 24
136.144.19.0/24 maxlen: 24
194.5.48.0/24 maxlen: 24
136.144.33.0/24 maxlen: 24
194.5.53.0/24 maxlen: 24
136.144.42.0/24 maxlen: 24
194.34.173.0/24 maxlen: 24
45.84.216.0/24 maxlen: 24
193.36.224.0/24 maxlen: 24
193.36.225.0/24 maxlen: 24
45.95.243.0/24 maxlen: 24
193.176.211.0/24 maxlen: 24
45.154.138.0/24 maxlen: 24
45.146.54.0/24 maxlen: 24
2a0f:e386::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d1:f2:93:25:2c:cc:de:75:da:3f:30:70:e8:ac:84:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Nov 15 07:46:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=889fa4c900c393c13ab950415e5c9b752b585500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ae:5b:6d:b8:3e:66:c0:c8:16:23:d2:09:77:
51:c8:86:db:ed:23:1a:d6:6f:65:c6:3d:6b:c5:f7:
3b:ac:b1:3d:8f:11:70:f7:1a:8d:25:d6:d9:02:d8:
9e:58:9a:44:99:43:67:92:4a:03:12:ba:43:f9:c6:
02:5e:ed:8d:d6:c6:c9:7f:8b:f5:29:27:ee:6d:7f:
dd:43:1e:bd:9d:1b:b6:17:72:a2:83:3c:04:8b:34:
9f:28:7c:21:f0:be:71:45:e0:b7:89:bd:8b:5a:c7:
01:2e:1f:a9:3d:35:66:05:62:7e:d0:4a:4a:9b:1f:
6c:d3:1f:11:81:01:2d:24:7a:ce:83:37:2e:8f:d0:
1e:d0:07:4c:83:f2:e4:03:04:89:83:65:52:60:46:
73:c7:67:94:8c:e6:8a:51:0a:98:00:ed:d8:d6:20:
3f:dd:34:53:b7:a6:e3:41:66:15:d2:09:51:1e:c9:
f2:04:db:6e:c8:4f:41:50:16:4b:1b:fb:32:1d:d3:
00:6a:08:0a:c3:4c:d5:68:78:88:90:70:19:83:69:
90:c0:49:a3:21:6a:f6:91:0e:d0:6a:ba:61:5f:80:
8a:ec:a2:c1:ff:27:35:db:93:13:b5:99:5a:85:fb:
42:d8:bc:ff:87:c7:2c:29:32:f1:a1:c3:15:92:03:
83:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:9F:A4:C9:00:C3:93:C1:3A:B9:50:41:5E:5C:9B:75:2B:58:55:00
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/iJ-kyQDDk8E6uVBBXlybdStYVQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.216.0/24
45.86.200.0/24
45.86.202.0/24
45.92.229.0/24
45.95.243.0/24
45.146.54.0/24
45.154.138.0/24
136.144.17.0/24
136.144.19.0/24
136.144.33.0/24
136.144.42.0/24
193.36.224.0/23
193.37.32.0/23
193.176.211.0/24
194.5.48.0/24
194.5.53.0/24
194.34.173.0/24
IPv6:
2a0f:e386::/32
Signature Algorithm: sha256WithRSAEncryption
2e:8a:21:63:85:59:5a:95:3d:45:ec:f4:90:0e:b0:a1:d5:1c:
ee:70:c2:22:b8:ee:70:f3:22:2d:51:1e:f8:79:51:a4:58:48:
46:1d:a1:d4:70:e3:c8:98:22:25:8d:5d:ae:26:76:71:db:58:
a5:1e:2b:be:37:72:7d:eb:c6:c0:22:8f:d9:e7:c5:d4:7c:84:
bd:94:6d:41:db:e9:c1:c5:6c:e9:f1:87:55:50:a4:e4:4f:ce:
19:23:cd:0a:d0:51:e4:73:79:c9:5f:dd:15:20:64:dd:a5:ae:
1d:e2:af:f0:dd:6c:a1:34:ff:8d:63:33:f4:74:60:19:c6:49:
74:70:ae:49:51:11:e0:0d:0f:08:3e:8d:be:a6:34:2f:be:6e:
c3:ad:bb:16:fc:d4:84:56:f5:f7:5e:cc:22:ea:90:7a:6b:00:
3c:4c:6a:81:74:52:35:4a:92:d9:0d:a9:a2:73:79:80:da:3c:
c6:a5:c9:27:69:23:4d:1e:b5:f9:86:03:54:37:8a:cf:36:94:
8d:01:eb:3f:db:e1:65:cf:e8:67:4e:b2:1c:75:4a:52:e3:dd:
26:18:fc:fa:24:9e:ec:60:b7:bb:3d:45:6a:e4:93:e0:89:e8:
00:a4:8b:6a:5e:0e:3b:57:48:8f:ea:12:23:68:92:79:8d:48:
7b:1b:82:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:01:43 2024 by rpki-client on console-ams.rpki-client.org