Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/zv9eG0-eBXBmZ_SteE4JaWD6GU8.roa
File: zv9eG0-eBXBmZ_SteE4JaWD6GU8.roa (raw, json)
Hash identifier: vpKdyPGUT7L8vNDFWyXO/EqNCm7T1WmSIMMl9eL+sdU=
Subject key identifier: CE:FF:5E:1B:4F:9E:05:70:66:67:F4:AD:78:4E:09:69:60:FA:19:4F
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 0187E17D125E83F6F98729FDEFCB74BF32C8
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/zv9eG0-eBXBmZ_SteE4JaWD6GU8.roa
Signing time: Wed 03 May 2023 12:01:22 +0000
ROA not before: Wed 03 May 2023 12:01:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 54339
IP address blocks: 93.152.208.0/24 maxlen: 24
93.152.211.0/24 maxlen: 24
93.152.214.0/24 maxlen: 24
93.152.216.0/24 maxlen: 24
45.141.235.0/24 maxlen: 24
45.141.234.0/24 maxlen: 24
93.152.230.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e1:7d:12:5e:83:f6:f9:87:29:fd:ef:cb:74:bf:32:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: May 3 12:01:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ceff5e1b4f9e05706667f4ad784e096960fa194f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:dd:fa:5e:39:2e:ec:b1:7e:6f:05:21:1d:b2:
73:4d:40:bc:af:73:d9:71:44:4c:8f:a3:09:43:2c:
fd:54:b8:4b:e3:10:22:53:bc:b3:b9:1e:0a:91:15:
c8:cc:91:ce:1c:01:88:c3:78:43:96:e7:a8:f8:8e:
d5:ed:b3:2a:bf:f1:57:7b:28:4e:e9:87:57:95:9a:
4b:89:76:ae:d6:f6:f2:ca:73:a3:97:91:67:0e:0f:
a4:24:51:e0:5d:f1:2e:e1:d3:43:c8:a3:8c:22:7b:
f0:21:b8:69:85:8b:d5:89:3e:43:49:d0:f7:42:4a:
b8:0a:9c:93:2e:70:82:64:eb:b2:33:ff:42:df:fd:
96:8a:f4:2b:31:28:29:7d:71:13:66:81:4d:bb:67:
4a:d4:ca:1c:bb:8b:a4:5e:0d:92:82:ca:6e:2d:fe:
68:39:e7:e7:1b:82:9f:6f:28:37:7d:58:d8:bc:68:
71:5a:1f:29:47:6f:f6:44:8d:ff:e4:69:f4:35:89:
d4:61:09:79:e0:cb:9a:9f:a4:fa:e3:c0:29:90:a7:
99:bd:f5:90:27:91:e4:43:98:b1:10:f9:bd:15:52:
96:de:24:9a:71:6c:79:bf:9f:25:0b:37:62:83:2e:
d7:c1:4d:fe:68:5c:05:5b:78:b3:26:b6:40:25:80:
f7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:FF:5E:1B:4F:9E:05:70:66:67:F4:AD:78:4E:09:69:60:FA:19:4F
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/zv9eG0-eBXBmZ_SteE4JaWD6GU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.234.0/23
93.152.208.0/24
93.152.211.0/24
93.152.214.0/24
93.152.216.0/24
93.152.230.0/24
Signature Algorithm: sha256WithRSAEncryption
af:56:99:b0:ac:21:49:bb:ea:1b:4d:dc:81:c2:88:79:c6:43:
76:93:16:fc:13:e5:8b:c5:d0:71:07:d8:24:da:99:1f:05:17:
d0:b7:4b:1a:01:47:df:49:ab:38:2c:6a:1a:ce:c3:a7:85:cd:
12:0a:a6:90:38:90:3c:c3:cf:bd:2b:84:01:03:4d:26:07:ed:
67:d3:00:52:ae:21:e2:ed:71:05:5b:0a:bc:96:1f:30:e8:51:
38:64:b9:a2:be:25:b3:27:8a:1f:9a:d4:16:99:b3:88:1a:97:
54:35:c7:68:65:e0:58:1e:f6:2d:5a:e4:10:a3:65:76:73:15:
53:cf:91:4d:10:f1:92:2a:78:21:b3:74:8a:af:fd:fd:0d:19:
2e:15:08:8c:fb:1f:7a:bb:b8:d0:a0:59:68:c4:4c:5a:53:65:
aa:cb:2e:f5:83:80:3b:87:2d:d0:17:9f:c9:2f:72:75:9b:d7:
00:d1:71:93:b1:1b:88:44:b2:b8:44:43:27:6b:11:3a:83:07:
3d:0b:38:f7:af:55:36:8e:47:2f:f0:77:79:06:ae:96:be:05:
49:4e:c2:90:38:00:7c:19:db:21:f9:b0:ed:0c:16:40:be:c8:
86:50:15:b8:a0:df:73:59:bd:75:70:35:9e:67:77:5d:12:7d:
a5:86:1e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:58 2023 by rpki-client on console-ams.rpki-client.org