Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/F2pWmADbTSMIh7JeE56tlef1_XU.roa
File: F2pWmADbTSMIh7JeE56tlef1_XU.roa (raw, json)
Hash identifier: GYynqOZe+cOdZpFURmfSoPo84thOH+/YXDNPFMweTuk=
Subject key identifier: 17:6A:56:98:00:DB:4D:23:08:87:B2:5E:13:9E:AD:95:E7:F5:FD:75
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 018683C7319979A5C678A14F3EDDF6D86D0D
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/F2pWmADbTSMIh7JeE56tlef1_XU.roa
Signing time: Fri 24 Feb 2023 14:15:15 +0000
ROA not before: Fri 24 Feb 2023 14:15:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44486
IP address blocks: 45.145.227.0/24 maxlen: 24
212.87.214.0/23 maxlen: 23
185.132.55.0/24 maxlen: 24
185.132.54.0/24 maxlen: 24
45.137.71.0/24 maxlen: 24
45.137.69.0/24 maxlen: 24
45.131.109.0/24 maxlen: 24
45.145.224.0/23 maxlen: 23
45.91.251.0/24 maxlen: 24
5.180.252.0/23 maxlen: 23
5.180.254.0/23 maxlen: 23
5.253.244.0/24 maxlen: 24
45.134.108.0/23 maxlen: 23
45.134.108.0/24 maxlen: 24
45.134.109.0/24 maxlen: 24
45.84.199.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:83:c7:31:99:79:a5:c6:78:a1:4f:3e:dd:f6:d8:6d:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Feb 24 14:15:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=176a569800db4d230887b25e139ead95e7f5fd75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b5:d9:23:01:9a:60:32:e9:fc:51:73:5a:23:
4b:41:3c:8b:cc:e9:03:a5:d4:97:df:de:07:78:0d:
4b:d5:50:03:03:2f:35:a8:89:3b:1e:f4:d7:d1:f9:
74:c1:59:aa:53:73:4a:4c:74:3c:b6:be:b2:da:46:
db:37:d4:ab:e5:c0:54:e6:d6:d9:94:e3:a0:b8:c0:
41:7e:32:e2:1c:cc:ba:f9:8a:19:f4:7f:a1:70:13:
1f:53:a6:20:49:62:a5:94:e1:78:89:47:44:48:ec:
04:20:71:32:26:53:bc:9f:1d:d4:9f:a8:80:a8:d3:
5f:cb:e9:09:42:a6:97:08:40:c5:0e:c9:0e:9a:e9:
19:43:bc:29:5f:ff:ee:86:85:65:e1:db:ec:a5:1b:
a1:62:c4:ee:36:c9:d8:ce:15:84:bd:d0:83:cd:06:
80:33:e2:e8:83:27:07:da:b8:05:ca:da:18:71:e4:
f0:74:1f:71:46:6b:86:61:68:04:74:a5:4d:b3:09:
a5:99:40:b6:24:8e:5f:09:2a:f2:c3:57:a8:a2:68:
56:c2:39:7a:07:05:7a:6d:52:ca:b9:73:d5:84:02:
39:f8:b7:02:a6:02:be:09:cb:8b:a1:64:d6:13:01:
a9:22:a2:09:bc:90:c2:e6:2b:43:62:f8:6e:7a:05:
5d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:6A:56:98:00:DB:4D:23:08:87:B2:5E:13:9E:AD:95:E7:F5:FD:75
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/F2pWmADbTSMIh7JeE56tlef1_XU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.252.0/22
5.253.244.0/24
45.84.199.0/24
45.91.251.0/24
45.131.109.0/24
45.134.108.0/23
45.137.69.0/24
45.137.71.0/24
45.145.224.0/23
45.145.227.0/24
185.132.54.0/23
212.87.214.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:b7:dc:03:f8:53:57:d0:6a:80:20:02:b6:81:5e:f7:1f:4c:
fc:c1:48:09:ec:6e:90:99:28:0f:44:08:80:f3:ef:6e:b6:d8:
ff:cc:a6:70:7d:7b:01:cd:b4:48:42:e9:28:f2:e6:99:21:08:
45:8d:a3:9e:72:48:af:b2:52:83:1e:c5:55:70:af:b1:92:d1:
96:2f:f1:d7:20:c2:53:2a:00:de:9a:f0:d9:27:ed:bb:71:d5:
07:45:f0:5f:21:c6:ff:9c:46:18:cb:f4:42:4b:3b:07:6f:f9:
ce:e4:e2:a2:60:05:70:09:57:c2:73:c0:3d:5a:7e:22:d3:3a:
7e:12:e7:25:55:a1:f7:80:f5:df:35:2e:18:91:3f:53:7e:3f:
bd:4f:1c:6f:10:04:35:cd:eb:06:76:36:1f:23:f7:6c:f1:c2:
26:05:27:08:6b:83:09:11:be:f4:b1:6e:21:5e:ef:50:b8:9c:
6c:c1:62:0e:bd:5a:3e:a8:7a:9b:fe:b0:4f:11:53:06:5e:64:
13:23:af:5c:24:a3:2f:e6:e3:a1:66:f6:75:09:97:e8:41:83:
64:39:e7:e3:83:89:85:0d:19:27:94:a4:32:ac:12:10:75:ab:
ad:87:fb:b3:67:5d:a7:49:23:9e:f7:1e:3e:8d:a6:76:e9:96:
68:65:f7:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:30 2023 by rpki-client on console-fra.rpki-client.org