Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/ViAkkJt--Oj5Pr-jEMS-RMDUdHM.roa
File: ViAkkJt--Oj5Pr-jEMS-RMDUdHM.roa (raw, json)
Hash identifier: CvWbUvvR3Q1n0epmwbD8iMLld3ENjgf1HdEXLZUHSK8=
Subject key identifier: 56:20:24:90:9B:7E:F8:E8:F9:3E:BF:A3:10:C4:BE:44:C0:D4:74:73
Certificate issuer: /CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Certificate serial: 01869D7D9887C2B3BD2B3BC238D5ABB68570
Authority key identifier: E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/ViAkkJt--Oj5Pr-jEMS-RMDUdHM.roa
Signing time: Wed 01 Mar 2023 14:04:59 +0000
ROA not before: Wed 01 Mar 2023 14:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 45.158.88.0/24 maxlen: 24
45.158.90.0/24 maxlen: 24
45.158.89.0/24 maxlen: 24
45.158.91.0/24 maxlen: 24
45.83.136.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9d:7d:98:87:c2:b3:bd:2b:3b:c2:38:d5:ab:b6:85:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Validity
Not Before: Mar 1 14:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=562024909b7ef8e8f93ebfa310c4be44c0d47473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c4:3a:b9:5b:40:6a:b3:19:b5:ca:da:9e:65:
27:ba:ad:bf:42:a5:ac:22:4c:40:9c:4e:18:02:09:
32:05:bb:02:b2:ae:6c:e1:ab:f7:0c:4e:0f:98:24:
b8:e8:74:45:fa:c2:a1:3a:0d:f0:78:65:b3:91:48:
15:f9:25:f6:24:00:45:d0:5a:76:82:c5:03:85:7e:
02:93:8d:f0:23:ae:ca:d8:9f:30:a6:82:1b:a8:ac:
1d:e2:40:34:27:1b:77:86:6c:c5:e1:86:f8:d5:cb:
cb:4e:3d:08:53:66:97:96:85:e8:4e:ca:19:f8:c4:
7a:dd:24:8f:25:10:53:44:7f:11:39:fc:fe:43:5d:
57:70:ce:4a:a3:52:03:55:2f:44:9c:a5:f4:46:7d:
36:64:61:40:f4:e9:7a:2c:4b:de:67:05:94:d5:60:
8e:e0:d0:d9:dc:8b:e6:d1:fe:b1:96:1e:8b:4e:fc:
2f:f5:d4:29:62:8e:e1:5e:8a:77:a2:86:64:3b:26:
f4:8c:70:db:c4:f8:4b:09:fe:29:91:2a:e8:c5:db:
3c:3f:41:b2:d3:b4:17:f0:1f:63:44:2d:b4:a3:3b:
f5:5b:bb:fe:a0:c1:93:65:86:b5:69:27:d4:87:5e:
c7:85:4f:64:f9:42:6e:b7:d7:dc:dc:b7:79:b3:87:
08:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:20:24:90:9B:7E:F8:E8:F9:3E:BF:A3:10:C4:BE:44:C0:D4:74:73
X509v3 Authority Key Identifier:
keyid:E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/ViAkkJt--Oj5Pr-jEMS-RMDUdHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.136.0/22
45.158.88.0/22
Signature Algorithm: sha256WithRSAEncryption
81:0d:3c:33:a4:75:7f:2c:9f:24:8d:87:63:bd:d2:1d:3b:6c:
6d:c3:d1:1d:35:94:f5:92:ee:88:b0:e7:8e:05:37:c5:c3:46:
6c:bd:91:fc:61:44:d6:a8:ce:0d:80:65:5a:de:b6:83:c0:73:
38:7c:23:a1:40:e1:88:6f:dc:6d:d7:cb:44:59:57:2f:c9:84:
fc:2f:a8:99:98:b7:5f:1f:9f:0d:97:88:d3:b8:0b:02:6f:11:
09:a9:47:47:0c:b9:47:e3:e0:34:54:ad:f3:b9:6a:f7:53:5a:
64:5f:45:68:5b:6e:0b:50:ba:22:f7:54:19:0a:7c:74:18:55:
a8:7a:2f:89:b6:9b:14:7a:23:8b:10:ed:6f:81:12:13:c7:28:
cf:a5:0c:16:92:65:e8:63:f5:81:0d:5a:97:fb:b3:12:5c:62:
12:dc:78:87:12:e1:e9:2d:d1:78:c9:1e:cf:8f:e7:49:15:29:
25:e7:67:22:f3:5d:02:01:8a:cd:eb:23:84:65:96:94:51:09:
a5:ee:bd:c7:12:0a:c1:65:03:14:d5:a8:f8:7e:00:63:31:b8:
c8:9c:e4:f0:fd:e4:3a:28:b1:ab:2e:7c:06:0c:21:ee:a4:9c:
60:f2:8b:7c:d3:25:1b:ee:45:31:c5:4f:e3:9a:9f:81:8a:5e:
c9:43:07:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:05 2023 by rpki-client on console-fra.rpki-client.org