Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/uA9jnDiAHX_rWsOwCb7qX3uArY8.roa
File: uA9jnDiAHX_rWsOwCb7qX3uArY8.roa (raw, json)
Hash identifier: z/tk15wc+K371liHupVuHW96vsDQ7BlQaLAeFaZ8Hao=
Subject key identifier: B8:0F:63:9C:38:80:1D:7F:EB:5A:C3:B0:09:BE:EA:5F:7B:80:AD:8F
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018A5F461B970936518DF1B21785C25B7980
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/uA9jnDiAHX_rWsOwCb7qX3uArY8.roa
Signing time: Mon 04 Sep 2023 08:19:04 +0000
ROA not before: Mon 04 Sep 2023 08:19:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35913
IP address blocks: 45.128.59.0/24 maxlen: 24
45.88.180.0/24 maxlen: 24
45.86.66.0/24 maxlen: 24
45.15.143.0/24 maxlen: 24
45.86.73.0/24 maxlen: 24
171.22.108.0/24 maxlen: 24
45.15.177.0/24 maxlen: 24
45.89.104.0/24 maxlen: 24
45.92.195.0/24 maxlen: 24
92.118.235.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:5f:46:1b:97:09:36:51:8d:f1:b2:17:85:c2:5b:79:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Sep 4 08:19:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b80f639c38801d7feb5ac3b009beea5f7b80ad8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3d:52:f6:09:23:54:cd:ac:29:7d:cb:84:05:
55:8b:90:e1:5e:8a:f9:f1:5b:97:f2:2a:3a:51:e5:
dc:0e:70:f9:43:01:a6:63:25:22:39:2c:6f:07:d3:
17:b4:f0:e2:ae:e2:c5:81:1a:57:79:a9:f5:d9:8f:
20:b4:e4:4f:c8:de:53:ae:5b:49:70:32:51:b1:d1:
12:c1:4e:16:02:6c:ee:e9:22:a8:75:13:6b:8b:a4:
fc:72:61:b5:49:fa:d8:6a:72:9e:8b:e7:3c:f9:2f:
57:05:56:c5:69:9c:27:89:63:d1:d9:35:b2:be:fc:
36:43:cb:87:f0:11:2b:1c:fc:1e:f4:bd:28:ed:66:
cf:fd:8f:ca:0d:d8:47:8d:dc:73:26:3f:0f:f7:df:
57:d3:e5:8c:49:70:cc:b9:45:2e:03:10:ae:db:88:
5a:7f:49:b4:d8:14:e0:46:b2:49:75:39:9a:80:f8:
65:a5:e1:96:7b:9e:99:28:5c:4a:5b:91:f5:3f:1d:
ff:ce:60:40:5e:fb:c9:a2:e5:74:0e:43:83:4c:5a:
60:2a:af:95:41:0c:a0:2a:f0:b1:50:ba:21:c2:9f:
a8:8a:74:5c:a7:bd:45:da:d5:a5:72:39:9e:73:1f:
e7:7d:a1:82:72:ce:59:d8:e0:3d:b5:a4:f6:5e:8c:
8e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:0F:63:9C:38:80:1D:7F:EB:5A:C3:B0:09:BE:EA:5F:7B:80:AD:8F
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/uA9jnDiAHX_rWsOwCb7qX3uArY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.143.0/24
45.15.177.0/24
45.86.66.0/24
45.86.73.0/24
45.88.180.0/24
45.89.104.0/24
45.92.195.0/24
45.128.59.0/24
92.118.235.0/24
171.22.108.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:7e:9e:0e:cf:5e:cb:ec:02:95:44:1b:19:8c:5d:0c:63:6e:
37:44:80:75:b8:f2:e7:03:35:4f:e7:b9:48:b5:76:7b:dd:65:
59:6b:b6:47:3e:82:9d:69:ac:1a:c9:18:9f:26:31:b7:cf:0b:
0c:af:6b:83:0a:28:ec:29:29:eb:18:10:30:c1:be:fd:e1:aa:
1a:b3:94:62:a0:77:05:75:32:d6:84:33:b4:17:bd:c5:92:a7:
29:e4:00:c4:c3:5a:af:f3:24:03:77:a1:f0:35:7a:35:d2:ff:
56:99:17:58:4b:36:2a:a0:b3:c3:d4:3f:9d:e8:bf:67:2e:a1:
97:8c:16:e2:6b:65:bd:ee:52:2d:d6:3c:55:da:43:b1:df:9d:
3d:64:60:b4:e7:58:c5:7b:91:7d:bd:b2:d3:72:b9:dc:95:b2:
05:1d:54:20:66:f0:10:34:6c:e8:36:91:a7:9f:88:0a:12:b5:
7d:b8:3e:08:9e:4f:08:83:02:90:34:5a:4b:e5:94:15:b1:5f:
e3:0b:b7:51:b5:75:57:97:d4:76:91:a4:91:bc:8e:a9:7e:da:
cb:75:f8:bc:8e:0d:92:4e:f1:c7:87:29:47:0d:38:7e:91:50:
f5:02:f9:56:32:f3:5a:5b:3c:07:16:c5:fd:10:3d:4b:ae:94:
03:61:d0:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 4 09:05:43 2023 by rpki-client on console-fra.rpki-client.org