Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/0a3a0f-60f8-4a1c-bba0-7b880c063367/1/zFUYn_zOv5gANFosOh0XlZ4n5Eo.roa
File: zFUYn_zOv5gANFosOh0XlZ4n5Eo.roa (raw, json)
Hash identifier: kU4HKEfxkWa/WrGXPcBw6uAb2BQTfazQMsV173b+qEA=
Subject key identifier: CC:55:18:9F:FC:CE:BF:98:00:34:5A:2C:3A:1D:17:95:9E:27:E4:4A
Certificate issuer: /CN=3406d2c439ccbcb78a82d5cb2b4c3ff6e9934b96
Certificate serial: 018C2BA6335171F1D091BBD9C8E2E5AD8802
Authority key identifier: 34:06:D2:C4:39:CC:BC:B7:8A:82:D5:CB:2B:4C:3F:F6:E9:93:4B:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAbSxDnMvLeKgtXLK0w_9umTS5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/0a3a0f-60f8-4a1c-bba0-7b880c063367/1/zFUYn_zOv5gANFosOh0XlZ4n5Eo.roa
Signing time: Sat 02 Dec 2023 17:49:21 +0000
ROA not before: Sat 02 Dec 2023 17:49:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213122
IP address blocks: 45.130.152.0/24 maxlen: 24
45.130.153.0/24 maxlen: 24
45.130.154.0/24 maxlen: 24
45.130.155.0/24 maxlen: 24
89.36.230.0/24 maxlen: 24
45.87.62.0/24 maxlen: 24
45.87.63.0/24 maxlen: 24
45.87.60.0/24 maxlen: 24
45.87.61.0/24 maxlen: 24
89.37.100.0/24 maxlen: 24
188.210.236.0/24 maxlen: 24
5.252.166.0/24 maxlen: 24
5.252.164.0/24 maxlen: 24
5.252.165.0/24 maxlen: 24
5.252.167.0/24 maxlen: 24
103.202.55.0/24 maxlen: 24
103.202.52.0/24 maxlen: 24
103.202.53.0/24 maxlen: 24
103.202.54.0/24 maxlen: 24
89.46.43.0/24 maxlen: 24
103.104.251.0/24 maxlen: 24
103.104.248.0/24 maxlen: 24
103.104.249.0/24 maxlen: 24
103.104.250.0/24 maxlen: 24
185.162.74.0/24 maxlen: 24
185.162.75.0/24 maxlen: 24
2a0e:f380::/32 maxlen: 32
2a0e:f380:ffff::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:2b:a6:33:51:71:f1:d0:91:bb:d9:c8:e2:e5:ad:88:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3406d2c439ccbcb78a82d5cb2b4c3ff6e9934b96
Validity
Not Before: Dec 2 17:49:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc55189ffccebf9800345a2c3a1d17959e27e44a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:1a:f9:97:19:c5:21:d9:0b:e9:76:7b:5d:77:
aa:ea:e1:a1:9a:c9:55:f1:8d:6b:43:78:05:a7:26:
18:9c:52:6a:eb:9a:1a:88:32:01:98:e9:d1:e5:47:
b4:11:df:d5:29:9b:cd:3f:8e:4d:d0:15:76:52:5a:
1d:88:37:45:10:b0:44:24:a1:20:d9:ef:e5:45:46:
1e:9c:cf:72:54:20:35:44:f0:ad:a3:ec:62:b6:a0:
dc:d2:87:e4:3e:94:b2:f1:62:80:27:c7:6e:b3:d4:
f8:9b:ad:1b:d3:72:1e:fb:07:f6:14:58:16:9d:7e:
fb:99:0c:8e:5e:02:99:6e:dc:d5:6e:44:a0:bc:45:
59:8a:79:2a:1b:82:79:e9:d2:bc:02:07:95:64:81:
f2:d3:2e:d1:f1:c0:cd:f6:be:31:cf:33:a8:43:b3:
d4:31:3f:ff:0a:1f:4f:0b:65:9a:0d:38:ac:bd:83:
80:22:63:54:a5:2c:e8:9e:85:15:2c:44:fd:cd:5c:
42:b1:93:3e:1e:d8:86:0e:b8:1f:e3:f6:66:92:61:
82:c0:87:25:11:4d:1d:1b:ef:f5:f0:c1:3d:1c:9e:
6e:0d:b3:49:b4:e2:f8:e0:fc:3b:d1:3d:e1:a0:e0:
7b:4b:53:e1:fd:64:69:e2:e3:75:d8:4d:83:bc:72:
f0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:55:18:9F:FC:CE:BF:98:00:34:5A:2C:3A:1D:17:95:9E:27:E4:4A
X509v3 Authority Key Identifier:
keyid:34:06:D2:C4:39:CC:BC:B7:8A:82:D5:CB:2B:4C:3F:F6:E9:93:4B:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAbSxDnMvLeKgtXLK0w_9umTS5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/0a3a0f-60f8-4a1c-bba0-7b880c063367/1/zFUYn_zOv5gANFosOh0XlZ4n5Eo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/0a3a0f-60f8-4a1c-bba0-7b880c063367/1/NAbSxDnMvLeKgtXLK0w_9umTS5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.164.0/22
45.87.60.0/22
45.130.152.0/22
89.36.230.0/24
89.37.100.0/24
89.46.43.0/24
103.104.248.0/22
103.202.52.0/22
185.162.74.0/23
188.210.236.0/24
IPv6:
2a0e:f380::/32
Signature Algorithm: sha256WithRSAEncryption
9e:93:d0:da:af:1e:27:66:13:37:e2:43:a8:af:01:1b:65:60:
2e:0d:92:dd:47:71:12:9d:77:0b:c8:8e:26:8c:02:60:d3:ce:
94:49:20:9f:bf:5c:c0:e7:e8:f8:14:6c:dd:c2:63:67:ab:a2:
35:34:dd:07:fd:0d:38:16:f8:98:c8:3e:eb:30:4a:98:b5:4d:
30:77:64:fd:f7:16:5c:ea:62:76:94:7e:19:08:73:f1:8d:59:
ed:95:98:5a:3c:68:11:50:02:98:f3:9f:de:3a:1c:37:3b:04:
e7:7f:17:c6:d0:0e:e2:1a:48:d8:8c:6d:46:d8:af:12:39:a2:
7e:4c:88:1b:2e:31:2b:96:d9:a0:dc:bf:4e:4e:4b:1f:73:87:
f3:40:0e:40:c5:22:5a:18:d8:79:7d:f2:70:f2:12:a7:6d:1e:
8c:a0:d9:a2:b4:79:13:ac:26:a6:a4:f5:e3:51:85:94:92:19:
60:94:3d:fb:50:dd:0d:05:e2:a6:69:68:36:e2:8b:a2:d0:10:
1f:e0:e3:1e:a7:67:0c:15:61:72:bb:ec:4d:03:c4:3a:6e:b6:
9e:0c:83:bb:41:bb:a9:90:ec:e3:1d:22:ac:55:0c:8f:17:a3:
22:c1:30:2a:d3:0e:15:3d:fa:96:45:b5:31:14:db:77:a0:ff:
d0:7e:c0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 16:35:45 2024 by rpki-client on console.sobornost.net