Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/N_WVQoRFpCgBXRGQQXpX_cSwV0c.roa
File: N_WVQoRFpCgBXRGQQXpX_cSwV0c.roa (raw, json)
Hash identifier: Ewo40kytepBHoEOxsF+urCGZFs22fQXg0guZyOs8xwI=
Subject key identifier: 37:F5:95:42:84:45:A4:28:01:5D:11:90:41:7A:57:FD:C4:B0:57:47
Certificate issuer: /CN=e1b9a3ce0f593910819c3271e1e8d0bd1371a6be
Certificate serial: 01856EB8E0914AC9CE53E41E6FF7E3E3E9B1
Authority key identifier: E1:B9:A3:CE:0F:59:39:10:81:9C:32:71:E1:E8:D0:BD:13:71:A6:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/N_WVQoRFpCgBXRGQQXpX_cSwV0c.roa
Signing time: Sun 01 Jan 2023 19:04:47 +0000
ROA not before: Sun 01 Jan 2023 19:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203020
IP address blocks: 109.196.160.0/22 maxlen: 32
45.157.124.0/22 maxlen: 32
80.65.216.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:b8:e0:91:4a:c9:ce:53:e4:1e:6f:f7:e3:e3:e9:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1b9a3ce0f593910819c3271e1e8d0bd1371a6be
Validity
Not Before: Jan 1 19:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=37f595428445a428015d1190417a57fdc4b05747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e1:ba:fd:b9:2d:17:41:fa:53:32:d2:a8:c5:
c7:02:5a:d6:58:20:3b:7d:14:89:e6:b6:ce:2d:43:
a5:e6:4e:1a:0e:5e:7b:97:20:2e:2a:b1:d6:5d:c6:
59:12:55:48:fa:51:4d:f9:d7:01:13:44:b4:a5:e6:
67:c3:3b:c2:55:9a:46:50:7e:2f:48:ce:9d:3e:b4:
e1:92:84:09:26:ca:98:89:25:3e:16:3f:28:4c:5c:
84:6f:ba:a7:63:0e:a6:47:40:58:bf:d7:08:ed:63:
4e:b3:c9:cd:2e:c4:3b:85:18:2b:00:d3:4b:26:80:
9e:8c:d2:9d:36:bd:b0:6c:17:fc:97:d0:c0:4b:b2:
16:16:10:15:7e:7d:6e:e0:2f:c1:c9:9b:8a:e3:90:
f7:f5:51:f1:ff:9f:6d:73:c0:e8:ff:ab:19:39:8f:
80:f7:dc:02:ea:b3:ec:15:ce:55:9b:86:c6:50:40:
4b:6b:31:62:69:70:3f:21:4e:06:e5:6c:38:87:ca:
da:ee:9a:e3:1a:63:8a:d3:13:e7:2b:7e:61:ff:7c:
ca:f0:11:1a:91:34:09:91:26:08:1e:00:0f:ff:f4:
6f:9a:2c:ae:55:7c:f7:43:7b:03:21:3f:7b:2d:06:
c1:c7:cc:0f:4a:60:92:6e:90:de:21:5c:4d:24:36:
e7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:F5:95:42:84:45:A4:28:01:5D:11:90:41:7A:57:FD:C4:B0:57:47
X509v3 Authority Key Identifier:
keyid:E1:B9:A3:CE:0F:59:39:10:81:9C:32:71:E1:E8:D0:BD:13:71:A6:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/N_WVQoRFpCgBXRGQQXpX_cSwV0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.124.0/22
80.65.216.0/22
109.196.160.0/22
Signature Algorithm: sha256WithRSAEncryption
62:4e:6f:f2:95:37:41:20:ed:cb:49:5c:91:83:d8:de:a9:38:
fc:95:97:e1:cc:bb:72:91:d1:4b:f4:77:2a:65:fc:00:ec:49:
3c:b7:64:8c:b6:b3:08:7e:f7:1a:38:ba:16:bb:0a:3d:c1:94:
8b:9d:8d:72:0e:09:de:e2:15:13:0e:c2:c6:f4:52:20:2c:c1:
ec:d1:77:e4:a5:ff:13:ac:3d:59:03:28:74:4a:63:aa:89:81:
71:29:22:90:be:e0:9c:65:f1:fc:c7:b8:64:17:df:e0:9f:4a:
a3:2c:9f:d3:25:2d:df:68:1d:0b:0a:93:5a:cd:64:b4:2a:9e:
92:ab:19:d8:47:d8:84:9a:f0:9d:7c:1e:60:6c:ba:e4:d2:b8:
01:8b:a0:05:df:20:70:91:b7:66:66:88:bd:28:a5:2a:14:59:
0b:23:0a:79:fe:97:a4:a6:27:03:42:8d:0b:85:ed:b1:9d:f3:
4b:41:25:14:74:3a:6a:f8:a1:27:bc:a6:bf:c7:a1:ce:7e:d8:
d6:c0:cb:0a:5e:41:c9:d0:0d:18:b7:12:48:c3:0d:a5:5f:4a:
e1:02:ca:7b:ae:df:58:2e:8f:a5:94:5b:08:28:19:30:71:14:
40:e3:c7:c8:74:fd:42:1e:85:c4:41:5a:a3:49:2d:64:8f:04:
79:13:b6:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 22 12:18:01 2023 by rpki-client on console-fra.rpki-client.org