Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/0mzx5XZLAlj9EX-P6M-8f9ejsgY.roa
File: 0mzx5XZLAlj9EX-P6M-8f9ejsgY.roa (raw, json)
Hash identifier: Fo1lbDDLLedVjvToQjVNxSwDrLalnu9lJB4aFlgdyME=
Subject key identifier: D2:6C:F1:E5:76:4B:02:58:FD:11:7F:8F:E8:CF:BC:7F:D7:A3:B2:06
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 0186C0B792716D476253390E7D9CD66FD3BC
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/0mzx5XZLAlj9EX-P6M-8f9ejsgY.roa
Signing time: Wed 08 Mar 2023 10:15:01 +0000
ROA not before: Wed 08 Mar 2023 10:15:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44486
IP address blocks: 45.145.227.0/24 maxlen: 24
212.87.214.0/23 maxlen: 23
185.132.55.0/24 maxlen: 24
185.132.54.0/24 maxlen: 24
45.137.71.0/24 maxlen: 24
45.137.69.0/24 maxlen: 24
45.131.109.0/24 maxlen: 24
45.67.136.0/24 maxlen: 24
45.145.224.0/23 maxlen: 23
45.91.251.0/24 maxlen: 24
5.180.252.0/23 maxlen: 23
5.180.254.0/23 maxlen: 23
5.253.244.0/24 maxlen: 24
45.134.108.0/24 maxlen: 24
45.134.108.0/23 maxlen: 23
45.134.109.0/24 maxlen: 24
45.84.199.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c0:b7:92:71:6d:47:62:53:39:0e:7d:9c:d6:6f:d3:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Mar 8 10:15:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d26cf1e5764b0258fd117f8fe8cfbc7fd7a3b206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:8a:67:8f:f8:1d:9e:89:97:dd:aa:e3:20:0a:
23:cb:35:42:0e:bf:48:7a:03:a1:ef:81:60:82:a6:
d5:6b:ea:87:f1:42:13:fb:6f:7e:9b:58:ab:35:7e:
1a:c6:4b:3b:ce:52:46:7d:02:9b:e6:bb:90:96:22:
40:54:92:e3:9d:21:cf:8e:35:55:ba:ce:10:bb:60:
3b:5c:e2:52:24:dd:5d:f4:79:2a:73:60:eb:bf:51:
5f:9d:9d:29:b6:95:bb:f6:6c:0b:b4:8d:cb:ce:f1:
a9:47:a9:fb:45:3d:9b:2c:1e:d8:3f:6d:f9:af:79:
13:9b:f0:40:ef:0f:51:f7:e6:c1:27:22:fe:a1:60:
bf:8c:1b:d8:98:3b:e6:72:15:de:3f:4f:ff:dd:3f:
46:32:2d:44:c1:c8:32:9b:a4:ba:6e:11:43:93:bf:
16:5e:4a:91:2a:c9:b0:b4:cb:b0:b0:47:5b:fa:09:
b0:da:19:98:f2:3a:c6:e9:ed:44:b8:cb:0d:1c:87:
e1:49:29:52:1a:c9:f3:41:7a:6a:1e:46:ee:9c:12:
89:24:ed:dc:cb:ec:80:c2:c8:0c:7d:1d:08:57:4c:
5f:b5:f1:97:01:58:71:59:62:42:a2:e6:46:72:74:
73:6d:8b:0c:4b:48:96:ea:a8:ea:e0:b3:71:39:90:
4e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:6C:F1:E5:76:4B:02:58:FD:11:7F:8F:E8:CF:BC:7F:D7:A3:B2:06
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/0mzx5XZLAlj9EX-P6M-8f9ejsgY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.252.0/22
5.253.244.0/24
45.67.136.0/24
45.84.199.0/24
45.91.251.0/24
45.131.109.0/24
45.134.108.0/23
45.137.69.0/24
45.137.71.0/24
45.145.224.0/23
45.145.227.0/24
185.132.54.0/23
212.87.214.0/23
Signature Algorithm: sha256WithRSAEncryption
58:2e:5b:86:7e:7f:f2:7d:e8:f6:6a:3e:a7:fe:b8:ed:47:0c:
dd:8d:a4:26:dd:91:56:d4:0d:c1:f9:0a:dd:6c:27:b7:e1:2e:
39:a7:d2:46:b9:5b:51:ed:a7:9b:f8:86:ad:f4:a8:c5:3b:e6:
72:79:ad:89:65:47:0e:45:f0:c4:2a:a2:13:06:e2:37:77:3e:
d0:c8:a1:4c:cc:f2:18:d9:1b:30:36:b7:a2:bf:94:4b:ea:6c:
7f:1a:fc:4d:dd:96:2f:ac:71:ff:90:6e:03:e3:6f:0b:44:24:
81:92:37:e1:22:85:10:63:44:c8:aa:25:13:37:33:aa:30:3b:
7b:1c:9e:ad:18:a8:34:72:08:9f:2b:cf:c4:8a:71:7a:ee:39:
17:ec:8f:72:3f:10:66:2d:5f:bf:2e:4c:88:60:00:44:90:a5:
6f:a9:26:87:df:84:db:61:6b:42:85:c9:de:76:5c:85:01:e1:
0d:ec:cb:3e:61:0b:1e:63:79:9d:aa:61:e8:68:db:ce:b6:48:
72:97:e3:d4:eb:05:52:d5:86:62:e9:1a:99:2f:7c:19:1b:61:
c2:17:db:4b:b2:dd:09:05:d8:2a:aa:80:c8:e9:3d:1b:c9:6d:
e8:90:6d:7a:bc:d3:1b:91:63:31:08:2b:b4:86:24:39:bc:cd:
20:c6:c3:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:30 2023 by rpki-client on console-fra.rpki-client.org