Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/w4FRshA-ZRG1mZVWkusAQyuiAck.roa
File: w4FRshA-ZRG1mZVWkusAQyuiAck.roa (raw, json)
Hash identifier: 8hWhmFlC7SeevLgR8LxXEFOV9UoFbV7cpCHPvPYLRDo=
Subject key identifier: C3:81:51:B2:10:3E:65:11:B5:99:95:56:92:EB:00:43:2B:A2:01:C9
Certificate issuer: /CN=025f2a93db10f2dd5f6a55bb2a440f67486cd1a3
Certificate serial: 0187D803D81937B4BFAA5E1645AD02931B38
Authority key identifier: 02:5F:2A:93:DB:10:F2:DD:5F:6A:55:BB:2A:44:0F:67:48:6C:D1:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/w4FRshA-ZRG1mZVWkusAQyuiAck.roa
Signing time: Mon 01 May 2023 15:52:23 +0000
ROA not before: Mon 01 May 2023 15:52:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49870
IP address blocks: 45.95.145.0/24 maxlen: 24
45.95.144.0/23 maxlen: 23
45.95.146.0/24 maxlen: 24
45.95.147.0/24 maxlen: 24
45.80.36.0/23 maxlen: 23
2a0e:3980::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:d8:03:d8:19:37:b4:bf:aa:5e:16:45:ad:02:93:1b:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=025f2a93db10f2dd5f6a55bb2a440f67486cd1a3
Validity
Not Before: May 1 15:52:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c38151b2103e6511b599955692eb00432ba201c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e9:99:f1:fb:49:73:27:7c:88:ac:39:64:56:
cb:07:e8:97:30:43:6a:99:05:90:f1:97:b7:13:b3:
2c:5d:29:87:c6:5d:d3:16:9f:f8:3c:1e:79:c5:71:
cf:bf:47:d9:10:8a:56:11:23:8c:90:ef:98:20:e0:
f5:92:04:a2:93:5e:dc:58:43:87:6a:cb:3a:58:c6:
a9:76:4d:aa:14:97:0e:55:31:2d:db:62:df:6e:5d:
f7:15:c5:6c:cc:75:2c:0d:8d:64:89:89:d5:b6:0e:
58:61:77:35:52:74:7b:21:a9:9d:07:4a:6e:1d:19:
a7:86:22:ee:7b:b3:e9:3f:7b:86:12:a4:64:e5:54:
ab:8b:a2:bc:ba:8f:1a:5a:e6:95:df:35:65:f9:b9:
3d:03:85:72:6e:c3:37:24:90:29:93:9f:07:7d:04:
f7:01:fa:39:78:a4:07:11:6b:32:00:49:61:47:73:
78:c5:03:f4:a1:e4:db:f2:ab:d0:c4:ce:f3:0f:d9:
d6:d2:8d:d8:c9:4f:70:48:1a:b4:27:f1:09:5b:a2:
3f:4b:e3:8b:39:7f:86:5b:b2:55:f9:0f:0b:c7:5d:
c7:a3:2f:b9:b8:ca:d0:c8:3c:8c:f0:67:bb:f7:74:
50:bb:fb:72:8b:15:7f:8d:f9:e7:f0:1d:7c:7e:9b:
00:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:81:51:B2:10:3E:65:11:B5:99:95:56:92:EB:00:43:2B:A2:01:C9
X509v3 Authority Key Identifier:
keyid:02:5F:2A:93:DB:10:F2:DD:5F:6A:55:BB:2A:44:0F:67:48:6C:D1:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/w4FRshA-ZRG1mZVWkusAQyuiAck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.36.0/23
45.95.144.0/22
IPv6:
2a0e:3980::/48
Signature Algorithm: sha256WithRSAEncryption
7b:6b:71:af:1c:d6:d3:a4:3f:0b:a2:e5:d6:d8:e0:63:9a:74:
72:04:8a:29:f6:53:94:a3:f7:0d:13:37:97:90:29:29:67:97:
19:73:a0:d0:d5:16:6b:25:0f:48:67:ad:f8:3f:41:f9:9e:be:
d2:82:60:22:e3:5d:27:51:30:13:b0:c7:dd:27:ce:cb:ec:80:
b5:d8:3d:23:5a:70:3a:37:77:24:88:69:b6:e2:14:3b:ea:b8:
7d:86:e9:2c:c6:68:84:4f:08:0e:c0:16:b0:70:89:e4:44:36:
0c:c4:e0:62:40:25:65:7d:7c:82:ee:ee:f6:dc:49:78:0e:1a:
56:b1:a0:6a:bf:d2:04:bb:93:ff:ed:4e:ce:de:73:b6:02:1c:
db:19:62:0a:29:23:76:82:3e:8e:3a:27:62:10:c1:11:c9:66:
b1:62:53:8e:27:8d:f5:30:39:c0:e7:b7:c9:96:9e:57:4a:32:
06:52:7a:f4:1c:19:69:f4:bc:1c:8c:d7:eb:f7:b3:49:a8:5e:
38:ef:b4:32:49:ac:e9:37:04:e2:a4:22:e4:6c:58:4a:f8:ed:
69:b9:c1:5c:40:50:04:e6:c9:98:57:04:0a:7e:53:5c:13:d7:
24:1d:9c:e7:8d:86:f9:15:19:45:f6:3f:10:c5:70:3b:d9:4b:
0a:ec:23:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:56 2023 by rpki-client on console-ams.rpki-client.org