Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/tvH3c734jtBSv56iABuVe8krxBQ.roa
File: tvH3c734jtBSv56iABuVe8krxBQ.roa (raw, json)
Hash identifier: 83m1aQYVgbpFxfZA1mF+zi1R4vv3aECNYdiUFDQxYNo=
Subject key identifier: B6:F1:F7:73:BD:F8:8E:D0:52:BF:9E:A2:00:1B:95:7B:C9:2B:C4:14
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 01856F796E0390093B8E508EBEFFCE22FEEB
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/tvH3c734jtBSv56iABuVe8krxBQ.roa
Signing time: Sun 01 Jan 2023 22:35:07 +0000
ROA not before: Sun 01 Jan 2023 22:35:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1299
IP address blocks: 45.149.105.0/24 maxlen: 24
45.87.30.0/23 maxlen: 23
45.149.106.0/23 maxlen: 23
45.134.220.0/23 maxlen: 23
45.148.98.0/23 maxlen: 23
45.148.97.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:6e:03:90:09:3b:8e:50:8e:be:ff:ce:22:fe:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 1 22:35:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b6f1f773bdf88ed052bf9ea2001b957bc92bc414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:76:77:4e:d4:bd:03:40:0a:fe:55:4e:e9:07:
3d:d5:16:10:df:48:7e:ab:44:2d:0d:c0:43:d0:1f:
1b:17:bf:09:60:f0:a3:13:49:a1:c4:ea:fb:24:a8:
b8:27:be:7f:d4:eb:b6:fe:0a:a6:18:4a:18:72:2f:
4d:e8:03:0c:07:41:3d:14:b2:15:4f:2c:fe:0e:77:
20:2c:72:4a:c5:8d:cf:a1:2b:d3:19:a5:26:cf:62:
04:b8:ae:c0:fc:8d:23:b1:39:0c:59:e1:25:5c:fb:
bb:50:c4:e3:4c:f7:98:16:a1:40:87:66:5e:db:0e:
c6:3d:50:27:f4:16:28:0d:ce:7d:5b:1e:8d:46:13:
7f:81:63:92:d1:4b:99:0d:2e:93:62:05:53:16:6e:
30:b5:3b:92:31:c9:25:78:af:5c:8c:62:f9:80:5c:
44:86:68:30:58:8e:2a:0b:5e:73:91:0c:2a:4d:0e:
51:c3:d5:df:cd:b5:7a:04:ac:09:9d:6c:41:b4:b9:
0c:35:c9:fd:c5:67:a2:c8:79:1b:bb:ac:ad:98:31:
53:db:59:11:ea:d1:f1:74:04:6b:1a:b5:82:92:6e:
a2:9e:c9:9d:51:0c:22:0a:b8:9e:e8:56:ca:ce:a9:
1c:93:df:2a:96:e2:02:4a:69:12:52:e1:64:dc:dd:
f7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:F1:F7:73:BD:F8:8E:D0:52:BF:9E:A2:00:1B:95:7B:C9:2B:C4:14
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/tvH3c734jtBSv56iABuVe8krxBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.30.0/23
45.134.220.0/23
45.148.97.0-45.148.99.255
45.149.105.0-45.149.107.255
Signature Algorithm: sha256WithRSAEncryption
4c:d5:95:67:74:d7:bb:41:98:00:62:e1:3d:fa:20:20:95:78:
0f:e9:9f:0a:b8:08:7b:c9:81:1a:21:04:9a:f0:54:7e:c8:20:
7c:07:14:14:a5:7d:76:3d:e4:79:9d:ce:df:3a:10:20:14:fc:
45:9e:ea:52:3f:cd:8c:63:ab:30:07:6f:72:b8:79:bd:96:0e:
e7:db:26:f8:5e:7a:e2:47:e7:32:7d:b6:8a:58:58:36:fe:0a:
2a:d5:73:f8:a0:27:22:24:48:2f:16:c9:13:1b:8d:0f:83:0c:
3d:c4:87:1e:25:aa:a1:28:0c:99:77:4d:65:02:c8:ab:68:b3:
a9:81:ee:af:b6:a0:f2:8b:41:11:39:87:84:e1:38:11:40:e3:
52:de:4b:b4:19:19:65:a1:29:da:cf:0a:9f:24:0d:b4:2d:c3:
f4:17:a0:1b:69:ca:1a:ce:84:71:5f:62:99:bf:b1:94:00:de:
67:c3:56:2c:d0:3b:2f:13:70:27:6e:45:7c:1f:ca:ee:66:2b:
2c:1b:a2:46:02:ed:66:ec:d6:44:1f:19:62:c1:b3:7f:26:5c:
86:ab:af:3b:97:30:82:7f:b9:55:e6:f5:24:40:c7:eb:cc:c2:
73:cc:9b:ab:94:a2:cc:39:d7:42:49:86:31:7a:60:6a:40:15:
db:c0:4a:d2
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgISAYVveW4DkAk7jlCOvv/OIv7rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl
MGI5MjYwHhcNMjMwMTAxMjIzNTA3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNmYxZjc3M2JkZjg4ZWQwNTJiZjllYTIwMDFiOTU3YmM5MmJjNDE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3Z3TtS9A0AK/lVO6Qc91RYQ30h+
q0QtDcBD0B8bF78JYPCjE0mhxOr7JKi4J75/1Ou2/gqmGEoYci9N6AMMB0E9FLIV
Tyz+DncgLHJKxY3PoSvTGaUmz2IEuK7A/I0jsTkMWeElXPu7UMTjTPeYFqFAh2Ze
2w7GPVAn9BYoDc59Wx6NRhN/gWOS0UuZDS6TYgVTFm4wtTuSMckleK9cjGL5gFxE
hmgwWI4qC15zkQwqTQ5Rw9XfzbV6BKwJnWxBtLkMNcn9xWeiyHkbu6ytmDFT21kR
6tHxdARrGrWCkm6insmdUQwiCrie6FbKzqkck98qluICSmkSUuFk3N33wQIDAQAB
o4ICKzCCAicwHQYDVR0OBBYEFLbx93O9+I7QUr+eogAblXvJK8QUMB8GA1UdIwQY
MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt
NzM4NTZhZjQ5ZjNlLzEvdHZIM2M3MzRqdEJTdjU2aUFCdVZlOGtyeEJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl
LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoAwQBLVceAwQB
LYbcMAwDBAAtlGEDBAItlGAwDAMEAC2VaQMEAi2VaDANBgkqhkiG9w0BAQsFAAOC
AQEATNWVZ3TXu0GYAGLhPfogIJV4D+mfCrgIe8mBGiEEmvBUfsggfAcUFKV9dj3k
eZ3O3zoQIBT8RZ7qUj/NjGOrMAdvcrh5vZYO59sm+F564kfnMn22ilhYNv4KKtVz
+KAnIiRILxbJExuND4MMPcSHHiWqoSgMmXdNZQLIq2izqYHur7ag8otBETmHhOE4
EUDjUt5LtBkZZaEp2s8KnyQNtC3D9BegG2nKGs6EcV9imb+xlADeZ8NWLNA7LxNw
J25FfB/K7mYrLBuiRgLtZuzWRB8ZYsGzfyZchquvO5cwgn+5Veb1JEDH68zCc8yb
q5SizDnXQkmGMXpgakAV28BK0g==
-----END CERTIFICATE-----
Generated at Tue Jan 2 09:01:43 2024 by rpki-client on console-ams.rpki-client.org