Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/X3o-1OJ3q3D3wD8EHeZ2OQ9fy5A.roa
File: X3o-1OJ3q3D3wD8EHeZ2OQ9fy5A.roa (raw, json)
Hash identifier: QjhkBovxKENV9YvSHjwbw5YK8MFOKKWQs1by7ab7dgw=
Subject key identifier: 5F:7A:3E:D4:E2:77:AB:70:F7:C0:3F:04:1D:E6:76:39:0F:5F:CB:90
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 018986AF5ED8394C00AB655BA17BB2E683E8
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/X3o-1OJ3q3D3wD8EHeZ2OQ9fy5A.roa
Signing time: Mon 24 Jul 2023 06:56:27 +0000
ROA not before: Mon 24 Jul 2023 06:56:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49581
IP address blocks: 45.131.111.0/24 maxlen: 24
45.131.108.0/24 maxlen: 24
92.118.207.0/24 maxlen: 24
45.142.104.0/24 maxlen: 24
45.142.107.0/24 maxlen: 24
37.221.92.0/24 maxlen: 24
185.117.3.0/24 maxlen: 24
45.13.227.0/24 maxlen: 24
45.151.56.0/24 maxlen: 24
5.253.246.0/24 maxlen: 24
45.147.7.0/24 maxlen: 24
45.137.203.0/24 maxlen: 24
45.84.196.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:86:af:5e:d8:39:4c:00:ab:65:5b:a1:7b:b2:e6:83:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jul 24 06:56:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5f7a3ed4e277ab70f7c03f041de676390f5fcb90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b8:0f:98:cf:65:b1:11:b1:48:30:73:96:a9:
e8:92:ba:4c:9b:01:7f:8b:b3:88:e5:75:75:9b:e1:
73:65:2f:ba:f9:b5:64:97:1a:48:2f:3a:47:05:7c:
ba:c2:8c:dd:78:c3:69:4c:0e:2a:c3:1e:ae:35:43:
c1:c4:21:c1:4f:30:d9:50:76:de:bd:16:f3:fb:20:
81:ab:70:68:ff:41:8b:29:db:27:41:26:b9:db:ac:
36:83:31:27:49:10:cb:11:e4:8b:a2:ee:d0:f7:96:
4c:ac:cd:07:2e:b6:04:d1:ee:e7:bf:2a:16:87:9d:
da:fc:01:42:6b:a4:ac:af:0f:a2:c8:2e:a5:34:09:
08:96:27:78:70:17:b9:48:67:d4:4d:88:9c:34:50:
57:19:05:de:41:15:53:dd:89:89:3b:b8:c0:c0:8e:
ac:b9:29:89:40:a5:fe:cd:01:f4:9b:eb:11:02:a3:
7a:e7:3c:13:66:50:a1:9d:e3:06:b2:13:25:1b:4f:
31:4a:35:b0:e2:9e:bc:dd:39:a6:aa:a6:55:59:52:
d2:a7:a1:26:46:8e:69:fb:fb:69:f8:a0:d1:cd:5a:
51:ba:2d:e9:01:f0:e0:d8:49:5e:74:3a:28:c4:ff:
b7:4d:27:8d:d1:76:ad:35:80:54:a4:5a:f9:86:1e:
9e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:7A:3E:D4:E2:77:AB:70:F7:C0:3F:04:1D:E6:76:39:0F:5F:CB:90
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/X3o-1OJ3q3D3wD8EHeZ2OQ9fy5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.246.0/24
37.221.92.0/24
45.13.227.0/24
45.84.196.0/24
45.131.108.0/24
45.131.111.0/24
45.137.203.0/24
45.142.104.0/24
45.142.107.0/24
45.147.7.0/24
45.151.56.0/24
92.118.207.0/24
185.117.3.0/24
Signature Algorithm: sha256WithRSAEncryption
74:f9:72:0a:0a:c4:85:d1:2c:f7:c2:38:22:80:89:82:49:aa:
d0:c0:48:cc:fc:41:6f:2f:86:32:fd:c9:cc:a6:6a:12:cd:f0:
6c:11:67:a7:17:8c:5d:ce:01:a8:8c:88:ba:71:44:6f:19:eb:
2c:3c:8c:dd:66:01:2f:cb:5a:82:b4:83:1a:0a:4e:cf:89:c5:
c8:19:f8:ad:52:46:dc:09:97:e4:5e:88:b5:d3:33:4f:f1:80:
c8:e4:af:b5:67:15:7e:ed:06:39:2c:a8:f8:41:7e:47:fc:78:
e6:fe:de:9a:5d:df:c2:c2:82:28:31:0b:4c:98:de:e8:3b:bc:
70:97:b6:99:11:9e:60:fb:4b:a2:1b:9b:20:ad:1a:c8:4f:0f:
91:63:80:56:98:57:c7:97:d5:b4:be:06:ae:aa:4e:58:45:71:
06:e3:69:f7:a9:f7:59:4d:94:2b:b9:46:88:66:59:96:5c:81:
d7:69:2d:30:3b:e5:f2:bc:87:63:49:46:d8:16:35:59:c0:e3:
9c:7a:d9:86:a4:7b:9b:2e:a0:89:5b:38:e4:78:31:8e:48:65:
cf:22:ef:27:c1:db:b0:71:7c:45:3b:2c:56:90:34:fe:65:29:
e1:30:be:25:f4:6c:e2:bc:53:2b:3f:20:fc:0c:98:f9:f1:41:
3f:cb:2b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 28 12:01:20 2023 by rpki-client on console-ams.rpki-client.org