Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/mSeJZrBrRySJKGW_zJFd6wb0dCA.roa
File: mSeJZrBrRySJKGW_zJFd6wb0dCA.roa (raw, json)
Hash identifier: pzDZ2kqFl2zA6+Yr1busyWueVx/zDkc07xF7wPipa9c=
Subject key identifier: 99:27:89:66:B0:6B:47:24:89:28:65:BF:CC:91:5D:EB:06:F4:74:20
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01856E8B40EE8BC0F571FD39D250974249E7
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/mSeJZrBrRySJKGW_zJFd6wb0dCA.roa
Signing time: Sun 01 Jan 2023 18:14:57 +0000
ROA not before: Sun 01 Jan 2023 18:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7029
IP address blocks: 45.128.56.0/24 maxlen: 24
45.128.74.0/24 maxlen: 24
45.92.165.0/24 maxlen: 24
45.92.164.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:8b:40:ee:8b:c0:f5:71:fd:39:d2:50:97:42:49:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 1 18:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=99278966b06b4724892865bfcc915deb06f47420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:63:2c:53:78:05:76:bc:e1:b7:d8:75:53:74:
5b:2d:ff:d6:90:3f:cb:60:2d:ff:97:6e:de:ff:03:
fc:ba:80:7f:cb:7d:41:3c:70:9e:9e:85:06:3c:ec:
09:7d:d5:17:48:98:b8:54:7f:f1:30:84:82:08:dd:
1c:35:1a:75:ff:b5:32:4a:67:42:89:c3:59:16:7d:
f9:54:d0:60:53:1c:be:69:70:fe:87:1f:66:65:22:
d7:be:e5:8d:e6:42:c2:6a:4c:97:84:36:40:c8:38:
31:59:9e:58:1a:b9:1c:2a:fe:ae:d6:fe:56:71:d2:
0d:2c:f2:7a:71:72:9d:e5:40:fd:13:d8:e0:ce:74:
2e:a7:2c:b1:f8:64:31:e9:57:db:69:7f:1e:af:07:
35:7d:b8:00:f2:8a:11:af:41:a6:af:62:e7:24:a1:
4e:02:cf:39:30:da:44:ee:15:38:2b:c9:f6:13:e7:
9b:d4:ad:53:08:9d:04:0f:84:8e:d1:84:c5:a0:2b:
cb:1c:01:be:98:a4:27:bd:de:4a:ce:12:5b:a1:cb:
3d:85:d5:07:c0:97:22:e8:c4:36:e7:16:05:7f:1d:
14:79:c8:bc:2a:53:d0:05:ef:1f:21:2e:ba:52:1c:
08:83:d7:c1:ea:ab:ed:bd:b7:b2:e0:01:11:47:1e:
39:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:27:89:66:B0:6B:47:24:89:28:65:BF:CC:91:5D:EB:06:F4:74:20
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/mSeJZrBrRySJKGW_zJFd6wb0dCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.164.0/23
45.128.56.0/24
45.128.74.0/24
Signature Algorithm: sha256WithRSAEncryption
42:66:64:05:c4:bf:32:6f:38:b9:59:81:2d:a4:81:29:62:e8:
50:e0:09:4a:9e:a8:6d:4b:35:38:fc:60:0a:0e:4e:13:db:a5:
28:26:d3:1e:65:1c:c7:6f:0d:57:7d:4b:29:e8:93:23:ea:c1:
be:51:61:c4:dd:97:be:55:1e:7d:1a:37:75:56:96:bf:ec:7e:
0f:ba:c7:f2:2e:17:f9:83:85:f3:4c:a2:71:a0:f9:1a:3d:a8:
6d:e5:e9:3d:45:91:0f:01:4a:74:e7:b4:76:f2:2a:6b:69:f1:
35:c3:dc:4f:a5:3c:d1:67:28:d3:77:7b:f4:4a:8e:c9:2c:85:
ac:ca:5b:6e:a3:ba:7d:eb:5e:92:4f:b8:cb:3d:71:38:cc:5e:
5a:22:53:8d:ff:c9:25:25:95:3c:12:df:ec:50:65:10:84:5f:
e4:a9:47:d3:09:e5:0c:fe:73:38:f5:ed:d4:2f:16:54:4d:c7:
4a:83:fd:80:17:cf:c7:a4:bb:85:5a:0c:df:ae:06:1f:c7:02:
34:63:b4:3e:3b:74:5b:19:e8:67:20:46:43:7c:56:71:69:67:
cc:59:a5:61:dd:94:a4:94:78:e9:1c:fc:7c:c1:08:58:8f:ce:
8b:6b:fd:85:7c:b4:b4:f7:87:88:9b:ff:c5:ec:8e:d9:73:9b:
e9:74:49:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 7 09:33:06 2023 by rpki-client on console-fra.rpki-client.org