Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/L5ywceA-jT2zJ8Fi_4NO0o0-NdA.roa
File: L5ywceA-jT2zJ8Fi_4NO0o0-NdA.roa (raw, json)
Hash identifier: zslZjUe1bKLyymnPiC3bj0t9yoPhrw0SpMkac3xcuZU=
Subject key identifier: 2F:9C:B0:71:E0:3E:8D:3D:B3:27:C1:62:FF:83:4E:D2:8D:3E:35:D0
Certificate issuer: /CN=ded8582b0243863c572ce25786ccb36ff795b22e
Certificate serial: 01856E2F7551CE08316264214922F12AA131
Authority key identifier: DE:D8:58:2B:02:43:86:3C:57:2C:E2:57:86:CC:B3:6F:F7:95:B2:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3thYKwJDhjxXLOJXhsyzb_eVsi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/L5ywceA-jT2zJ8Fi_4NO0o0-NdA.roa
Signing time: Sun 01 Jan 2023 16:34:41 +0000
ROA not before: Sun 01 Jan 2023 16:34:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34605
IP address blocks: 178.218.79.0/24 maxlen: 24
45.142.91.0/24 maxlen: 24
45.142.90.0/24 maxlen: 24
45.142.88.0/24 maxlen: 24
178.218.64.0/24 maxlen: 24
178.218.67.0/24 maxlen: 24
178.218.66.0/24 maxlen: 24
178.218.65.0/24 maxlen: 24
178.218.71.0/24 maxlen: 24
178.218.70.0/24 maxlen: 24
178.218.69.0/24 maxlen: 24
178.218.68.0/24 maxlen: 24
178.218.74.0/24 maxlen: 24
178.218.73.0/24 maxlen: 24
178.218.72.0/24 maxlen: 24
178.218.78.0/24 maxlen: 24
178.218.77.0/24 maxlen: 24
178.218.76.0/24 maxlen: 24
178.218.75.0/24 maxlen: 24
194.126.204.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:75:51:ce:08:31:62:64:21:49:22:f1:2a:a1:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ded8582b0243863c572ce25786ccb36ff795b22e
Validity
Not Before: Jan 1 16:34:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f9cb071e03e8d3db327c162ff834ed28d3e35d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:81:35:5d:c9:a2:1e:df:2d:db:f5:c6:02:22:
04:ea:8c:6a:d6:07:19:ac:61:ac:62:00:89:69:31:
ef:22:4b:83:2f:1e:1a:55:7e:37:ae:7d:70:55:ba:
8d:2f:b0:98:20:f2:de:96:04:a8:e3:89:6d:1d:13:
98:0b:6d:8f:23:14:d3:ab:92:a6:e7:d1:05:61:10:
d5:81:c6:52:75:14:1d:10:59:62:87:84:0d:3c:4c:
d3:32:1c:ab:81:8d:da:46:62:e4:75:98:98:92:65:
7e:8c:b1:8d:50:30:c3:9c:1e:c8:14:d3:f7:d2:53:
27:d7:f6:b9:9a:c1:71:30:e0:ae:ba:87:65:64:02:
1a:28:d4:35:c1:f5:97:23:41:9a:ae:c8:26:5c:f8:
53:f6:37:3b:2c:52:5a:95:21:91:ec:95:4e:09:e2:
be:12:79:43:4b:84:65:7b:3a:4a:ce:51:a3:ba:c9:
28:42:01:37:33:f6:ce:7a:e4:b4:07:83:d8:45:ea:
2c:91:8c:29:c7:7e:65:17:03:91:29:76:e5:2f:38:
90:60:3c:d6:19:64:b2:52:1b:0b:e9:05:5c:96:e8:
9b:2e:6a:f9:e0:a8:a5:13:9d:f0:9a:28:e6:f2:6b:
4f:45:23:c7:79:96:2a:87:3c:49:cb:cd:09:1f:10:
c0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:9C:B0:71:E0:3E:8D:3D:B3:27:C1:62:FF:83:4E:D2:8D:3E:35:D0
X509v3 Authority Key Identifier:
keyid:DE:D8:58:2B:02:43:86:3C:57:2C:E2:57:86:CC:B3:6F:F7:95:B2:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3thYKwJDhjxXLOJXhsyzb_eVsi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/L5ywceA-jT2zJ8Fi_4NO0o0-NdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.88.0/24
45.142.90.0/23
178.218.64.0/20
194.126.204.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:96:ba:f4:f3:aa:0e:9d:18:01:5b:37:bb:a4:c1:0d:d5:59:
eb:56:43:cb:98:20:8c:ad:64:7a:77:69:17:38:54:49:f2:84:
62:27:87:79:ac:a5:21:9f:4a:d8:91:c8:05:49:bb:19:7a:1a:
e5:52:01:ca:8e:c1:df:41:c3:2a:a4:93:b6:d0:7d:fd:82:cb:
f1:4d:a4:f5:cb:6d:5e:00:81:ac:0c:00:a3:eb:74:0f:2c:ff:
e3:ff:f5:87:67:0b:a2:04:9c:70:0c:2a:70:04:8d:39:4f:8f:
d8:1e:7c:b7:fd:05:39:19:da:88:36:13:9b:dc:ba:9f:d6:d4:
c8:0d:b2:7b:5f:81:ca:0f:bc:96:19:44:fe:19:d1:60:8d:dc:
03:43:55:ba:58:ce:b7:19:df:5b:ce:61:ee:35:24:ce:b1:fa:
e7:49:29:d0:99:c0:ed:ff:27:da:69:79:a2:bb:ca:01:29:e2:
c9:30:93:a7:a7:9e:69:da:75:74:04:e9:e2:ea:c1:61:8b:32:
cc:51:7a:3d:3d:06:82:8c:8b:10:79:5d:5c:ee:c1:08:23:79:
e7:e7:07:67:92:7b:73:5c:8b:46:98:82:a5:cd:3c:ad:18:1f:
1a:b0:01:3c:0b:ee:bc:23:cb:58:9d:4d:3c:32:64:98:34:a9:
11:4e:b0:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:49 2023 by rpki-client on console-ams.rpki-client.org