Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/4EW5wzXnQNkhb1V1lpsuOxnuo-s.roa
File: 4EW5wzXnQNkhb1V1lpsuOxnuo-s.roa (raw, json)
Hash identifier: tlyIwsBhpUgSN4Y7pPkFlyu91cyx1GRSaib4VfYNkRE=
Subject key identifier: E0:45:B9:C3:35:E7:40:D9:21:6F:55:75:96:9B:2E:3B:19:EE:A3:EB
Certificate issuer: /CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0
Certificate serial: 018570B07D9C687CD36031D774301A03DDFB
Authority key identifier: 0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/4EW5wzXnQNkhb1V1lpsuOxnuo-s.roa
Signing time: Mon 02 Jan 2023 04:14:52 +0000
ROA not before: Mon 02 Jan 2023 04:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40065
IP address blocks: 45.142.158.0/23 maxlen: 32
45.142.156.0/24 maxlen: 32
45.142.157.0/24 maxlen: 32
45.145.72.0/23 maxlen: 32
45.150.226.0/23 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b0:7d:9c:68:7c:d3:60:31:d7:74:30:1a:03:dd:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0
Validity
Not Before: Jan 2 04:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e045b9c335e740d9216f5575969b2e3b19eea3eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:11:9d:6c:5a:ba:89:87:89:d0:92:e1:d6:e8:
69:75:ee:e2:bc:ec:25:67:6e:33:df:2c:fd:3f:62:
a5:df:2f:80:15:bd:05:08:a4:3b:83:49:22:30:91:
a1:a5:61:e0:7b:38:0f:c5:25:42:16:8e:07:57:3b:
e1:38:36:30:a8:d6:e5:26:c4:11:ae:3e:2f:cc:36:
d0:86:2c:8a:4b:46:7d:09:a2:f1:b5:89:2d:48:c7:
7e:18:fe:a2:aa:17:6b:f8:25:08:03:00:f7:a0:b5:
c5:84:8a:44:97:c3:e9:9a:14:87:05:2d:31:bc:ec:
3c:e6:d1:b3:78:bc:af:66:e4:1a:50:51:57:41:3c:
52:7c:e6:db:31:e1:b2:37:c2:bc:93:17:2b:1b:b9:
65:d2:b6:e3:2c:45:23:67:22:a0:c6:f4:65:a2:6b:
7b:a8:86:e3:84:3a:98:3b:cc:e6:eb:bd:46:8b:45:
53:70:e1:26:83:36:23:e0:2a:3f:fc:8b:28:ea:e7:
87:fa:61:e1:86:ff:0a:c6:a8:e7:02:8d:3f:1d:74:
6b:c3:be:92:f2:38:7c:ad:04:1b:44:36:0f:14:90:
4e:dc:e2:b6:78:04:1d:8e:db:f5:6a:61:73:f6:8c:
26:90:29:eb:e5:99:17:8f:d1:a2:7a:c2:00:c8:e7:
10:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:45:B9:C3:35:E7:40:D9:21:6F:55:75:96:9B:2E:3B:19:EE:A3:EB
X509v3 Authority Key Identifier:
keyid:0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/4EW5wzXnQNkhb1V1lpsuOxnuo-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.156.0/22
45.145.72.0/23
45.150.226.0/23
Signature Algorithm: sha256WithRSAEncryption
a5:c3:91:91:4f:50:35:5f:69:4f:55:94:d0:a0:d4:89:5e:92:
9a:8c:31:db:9d:71:12:a6:0e:2d:8a:96:cc:68:1c:e4:10:9c:
39:a7:66:79:a1:76:72:ea:8f:02:a0:91:f0:05:2f:52:bd:12:
66:8c:42:ec:32:17:27:1e:e9:f1:5c:36:8d:08:ad:e6:64:0f:
ba:99:ee:47:04:04:2c:bd:f0:8b:a4:25:76:8b:ca:3a:f6:cb:
d9:35:dc:18:31:bf:c5:77:ca:51:b4:72:a6:73:46:d8:94:47:
61:f5:42:de:aa:a8:5e:80:aa:55:33:b8:d5:13:70:10:8a:4a:
12:ec:f4:f0:db:1b:ac:bf:66:66:bb:bf:09:aa:75:31:9b:87:
27:d0:53:c9:77:24:2a:bb:0d:1e:33:58:4d:8b:74:95:28:a0:
78:35:f4:4b:f7:ed:1f:e6:ee:c9:ec:eb:9e:54:11:70:93:43:
a1:7e:07:86:c3:e2:6e:46:b8:86:09:ab:cf:6f:51:83:d6:7f:
bb:45:24:af:85:61:80:e5:11:37:d6:e3:ca:63:fa:4c:d2:85:
09:f9:df:3d:dd:af:7c:98:c7:57:06:60:b4:93:f8:2b:8c:d7:
e9:98:d0:47:80:81:d9:10:c4:93:88:74:7f:bc:58:60:e5:b1:
7d:9a:e5:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:38:07 2024 by rpki-client on console-fra.rpki-client.org