Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/cYgO4TauNrGTmOirD3o-fR8_5p8.roa
File: cYgO4TauNrGTmOirD3o-fR8_5p8.roa (raw, json)
Hash identifier: dB/sZhsFSVf2iAwobAbtoUV/zakBMhLEPYA3MWhoTbI=
Subject key identifier: 71:88:0E:E1:36:AE:36:B1:93:98:E8:AB:0F:7A:3E:7D:1F:3F:E6:9F
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01857103175FA9B9653403DF4C452978E775
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/cYgO4TauNrGTmOirD3o-fR8_5p8.roa
Signing time: Mon 02 Jan 2023 05:45:06 +0000
ROA not before: Mon 02 Jan 2023 05:45:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206092
IP address blocks: 45.130.83.0/24 maxlen: 24
45.130.81.0/24 maxlen: 24
203.26.81.0/24 maxlen: 24
185.192.71.0/24 maxlen: 24
188.212.135.0/24 maxlen: 24
89.47.15.0/24 maxlen: 24
45.67.96.0/24 maxlen: 24
193.19.109.0/24 maxlen: 24
45.135.186.0/24 maxlen: 24
203.159.81.0/24 maxlen: 24
45.135.187.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:03:17:5f:a9:b9:65:34:03:df:4c:45:29:78:e7:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 2 05:45:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=71880ee136ae36b19398e8ab0f7a3e7d1f3fe69f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3c:7e:79:98:f9:d3:a1:62:ee:4d:69:22:82:
97:3e:42:60:85:55:5c:79:d9:82:14:4d:48:ea:39:
6f:ee:a5:5a:7d:22:5f:63:0f:43:ba:18:11:1f:d7:
e4:8a:d5:84:88:49:01:f0:96:63:70:30:91:1d:79:
4b:f4:cd:95:62:b9:b8:5e:15:66:9a:34:f2:2f:eb:
75:e6:12:cd:94:8b:78:9f:81:44:8d:83:d0:b5:fa:
cf:93:a4:30:8f:46:4b:fb:5f:ef:6e:38:b4:58:ca:
43:1f:33:58:81:9e:08:2c:ac:9b:9d:bc:ea:21:c9:
e8:22:f1:3c:f6:cd:73:7d:89:63:2f:da:60:3f:f7:
96:c0:14:4d:1e:c8:aa:55:87:da:0a:ca:22:f0:0b:
00:1f:7e:7b:5b:76:31:52:d6:9a:22:24:9a:96:03:
04:c7:86:03:19:37:b3:92:c1:ce:e0:96:0b:a7:45:
33:c7:fb:68:11:8f:8d:0a:2a:31:77:7a:04:71:75:
87:db:23:ed:75:fe:d3:23:52:51:ff:6c:06:0a:e3:
d7:70:ad:72:61:b1:9d:27:04:7c:b2:d2:36:cf:d0:
46:ef:85:b9:2a:d8:d5:d0:ed:5e:81:73:54:5e:71:
6a:37:29:4e:2c:87:34:85:a2:cd:fa:a2:ef:4e:f8:
b7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:88:0E:E1:36:AE:36:B1:93:98:E8:AB:0F:7A:3E:7D:1F:3F:E6:9F
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/cYgO4TauNrGTmOirD3o-fR8_5p8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.96.0/24
45.130.81.0/24
45.130.83.0/24
45.135.186.0/23
89.47.15.0/24
185.192.71.0/24
188.212.135.0/24
193.19.109.0/24
203.26.81.0/24
203.159.81.0/24
Signature Algorithm: sha256WithRSAEncryption
19:f6:0a:44:37:5e:ff:9f:09:41:a4:2e:cf:3b:a9:d2:14:d6:
02:7c:e5:71:70:af:46:cd:99:f5:c2:a9:15:67:e7:c2:71:9b:
fc:01:03:44:96:26:75:60:eb:27:4e:5c:76:29:18:cf:4f:c2:
1f:04:f5:7a:49:41:86:70:91:a0:27:17:55:d6:43:80:1c:f5:
93:0c:36:df:0c:d2:60:90:4f:c7:66:0c:01:60:51:45:f0:3a:
e8:11:18:bf:e2:f1:3c:f2:96:d5:e8:67:4d:0c:8f:94:dd:c6:
c7:d6:c8:a9:0e:e8:d6:77:63:21:3f:b8:af:78:62:8e:09:19:
d5:bb:4e:91:06:83:b1:20:8d:c2:ab:78:25:86:1b:6b:b6:00:
56:c3:1f:29:f1:96:a0:50:4c:ee:a4:74:19:94:f1:8c:f4:9c:
9f:7b:90:8a:29:f6:fd:61:4a:d4:fe:b8:5d:7d:65:ac:70:a6:
2d:69:d7:ec:35:03:10:43:5c:45:e8:03:03:4c:87:9e:10:9f:
77:24:16:53:4d:67:4a:bb:19:78:cf:b0:87:14:60:c1:55:4b:
90:3c:46:e1:a5:e6:3c:69:10:15:0c:9c:a8:8b:96:ae:a5:a9:
f9:cd:43:d2:01:2b:e8:33:b1:ac:1b:0f:20:b9:9d:56:28:f9:
4b:dc:4a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:55 2023 by rpki-client on console-ams.rpki-client.org