Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/ob5cIWMlkuRe6gp6mQf3v8npgao.roa
File: ob5cIWMlkuRe6gp6mQf3v8npgao.roa (raw, json)
Hash identifier: JVWaYLwZd6YeGI+Z2751cBqNvX+p48VtXYzSOLsedrU=
Subject key identifier: A1:BE:5C:21:63:25:92:E4:5E:EA:0A:7A:99:07:F7:BF:C9:E9:81:AA
Certificate issuer: /CN=025f2a93db10f2dd5f6a55bb2a440f67486cd1a3
Certificate serial: 01856FF05E6E78ACF476C8575F0C042273D7
Authority key identifier: 02:5F:2A:93:DB:10:F2:DD:5F:6A:55:BB:2A:44:0F:67:48:6C:D1:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/ob5cIWMlkuRe6gp6mQf3v8npgao.roa
Signing time: Mon 02 Jan 2023 00:45:01 +0000
ROA not before: Mon 02 Jan 2023 00:45:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49870
IP address blocks: 45.95.145.0/24 maxlen: 24
45.95.144.0/23 maxlen: 23
45.95.146.0/24 maxlen: 24
45.95.147.0/24 maxlen: 24
45.80.36.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f0:5e:6e:78:ac:f4:76:c8:57:5f:0c:04:22:73:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=025f2a93db10f2dd5f6a55bb2a440f67486cd1a3
Validity
Not Before: Jan 2 00:45:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a1be5c21632592e45eea0a7a9907f7bfc9e981aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:42:fc:94:03:76:e8:ab:ff:f6:6e:04:f5:93:
9d:d9:51:5e:bc:96:27:89:5c:4b:f1:2e:f7:f9:8a:
4e:f2:f1:49:4c:ce:65:f4:21:4d:36:e9:35:16:84:
0b:7a:d9:48:da:f4:8b:8a:a8:8f:d1:f3:3d:d6:78:
d2:88:14:d6:a7:78:0d:69:01:10:51:73:a1:fb:01:
7d:00:66:c7:f1:a4:6a:2c:1b:51:77:a6:cb:39:a7:
91:07:0b:3a:89:6a:20:20:72:da:07:b0:11:ff:af:
e3:8f:91:c3:34:f5:43:c1:20:a3:21:18:ec:a6:50:
41:d5:2d:fc:ab:5f:e7:7f:15:0b:fa:d5:70:1c:1d:
48:3a:b3:81:aa:59:fc:8e:97:df:29:62:50:16:9a:
1a:2c:0f:eb:a1:99:42:84:58:33:68:9a:07:b2:df:
bf:cd:d2:ec:96:64:5e:44:f9:e9:54:c4:2d:bb:6a:
9c:be:91:76:81:3e:fe:28:65:ff:c7:cc:4b:da:8f:
bb:52:82:a2:a9:d4:46:06:41:9f:f8:be:f2:1b:9b:
35:ba:64:eb:b3:3f:c3:b4:f3:99:7e:e9:22:e5:a4:
21:0f:e3:db:ff:1e:24:72:8e:b2:89:29:43:08:4f:
ae:50:3c:f7:13:94:3a:03:6f:5b:80:c1:7b:b5:6a:
a2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:BE:5C:21:63:25:92:E4:5E:EA:0A:7A:99:07:F7:BF:C9:E9:81:AA
X509v3 Authority Key Identifier:
keyid:02:5F:2A:93:DB:10:F2:DD:5F:6A:55:BB:2A:44:0F:67:48:6C:D1:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/ob5cIWMlkuRe6gp6mQf3v8npgao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.36.0/23
45.95.144.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:86:e9:b8:13:aa:b0:08:0f:f9:04:7c:e3:b9:8a:02:a7:40:
1d:7f:e5:84:c1:ca:42:16:0f:f5:b3:de:8d:2f:02:2f:6e:db:
ac:ce:85:67:79:75:2e:39:06:1f:f5:17:f4:af:6b:44:4e:87:
d9:20:f5:d6:e4:23:6d:6f:e1:c4:95:53:71:0c:29:90:54:85:
a5:76:9c:ac:c0:9c:f1:62:9f:4a:71:6a:b2:64:8c:b3:a3:21:
fe:7e:f0:16:4c:53:d5:d8:f2:59:85:0e:cc:6c:7c:49:20:b0:
84:be:ea:db:be:bc:d9:c3:95:c3:93:af:92:3b:0a:49:d6:69:
26:17:34:11:3a:cb:45:11:0a:b7:81:3b:f8:8b:85:08:ee:90:
95:96:6e:45:fd:3f:6c:57:99:87:df:2a:34:56:52:0b:0a:bd:
b1:52:ed:8e:6b:f6:a4:58:2c:bc:7e:67:4b:cd:4f:71:3a:0d:
c7:20:2d:d5:f2:a5:44:c0:6f:92:33:31:0a:77:d7:06:0f:b8:
a6:4d:f3:07:a4:30:47:c3:d0:ee:bc:fb:0a:29:8e:b1:93:2b:
36:ee:71:bc:37:ef:14:2a:92:15:d7:29:6c:1e:ef:27:c3:f7:
a7:07:18:09:f1:b9:09:aa:02:7c:85:40:bd:77:0e:ac:12:e5:
e9:19:e9:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:06 2023 by rpki-client on console-fra.rpki-client.org