Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/_5MORdqCTXM9IquATRjldBQuKVw.roa
File: _5MORdqCTXM9IquATRjldBQuKVw.roa (raw, json)
Hash identifier: bTRr33PuuhR1brBCD/T1HUSiANdyOAv4LwrUvLc+1DE=
Subject key identifier: FF:93:0E:45:DA:82:4D:73:3D:22:AB:80:4D:18:E5:74:14:2E:29:5C
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 0186B7CE1239AE2D5D6CED0B26C8E55C62DC
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/_5MORdqCTXM9IquATRjldBQuKVw.roa
Signing time: Mon 06 Mar 2023 16:43:01 +0000
ROA not before: Mon 06 Mar 2023 16:43:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213250
IP address blocks: 45.89.124.0/23 maxlen: 23
45.89.126.0/23 maxlen: 23
212.87.212.0/23 maxlen: 23
45.133.74.0/24 maxlen: 24
45.13.224.0/23 maxlen: 23
109.71.252.0/24 maxlen: 24
5.182.206.0/23 maxlen: 23
5.182.204.0/23 maxlen: 23
45.11.229.0/24 maxlen: 24
45.131.64.0/24 maxlen: 24
45.86.155.0/24 maxlen: 24
45.131.66.0/23 maxlen: 23
37.221.93.0/24 maxlen: 24
194.15.36.0/24 maxlen: 24
2.56.245.0/24 maxlen: 24
5.252.103.0/24 maxlen: 24
5.252.100.0/22 maxlen: 22
5.252.100.0/24 maxlen: 24
5.252.101.0/24 maxlen: 24
5.252.102.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b7:ce:12:39:ae:2d:5d:6c:ed:0b:26:c8:e5:5c:62:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Mar 6 16:43:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff930e45da824d733d22ab804d18e574142e295c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c3:ea:69:f7:54:d4:8b:cc:8f:54:d0:c7:1d:
bb:cc:33:f9:ba:4e:e5:da:64:3d:38:39:fe:35:e4:
28:d6:0d:df:36:33:63:14:29:07:fe:fe:c3:82:b7:
f1:1a:6e:60:b3:ef:45:49:b3:26:38:02:5f:a0:fa:
08:da:72:b7:ca:b7:35:fb:de:17:7d:2f:bb:f8:82:
12:96:45:c8:1f:9e:b3:e2:c4:3a:fc:d6:5c:f0:5e:
07:3d:5e:49:49:82:c5:55:b4:fc:17:1c:f2:06:de:
04:45:83:ab:4b:e9:52:8a:50:03:00:5d:a1:47:76:
70:14:5f:47:70:53:0f:3b:ba:3b:74:ce:7e:5a:fc:
66:5e:ba:0e:86:f3:24:16:e4:af:6b:91:34:f3:67:
04:5c:2c:e7:59:34:68:f8:7a:e7:f3:a8:ba:d1:5a:
f4:0e:94:7c:a1:ae:29:9f:ad:23:0a:e6:ab:b4:61:
f2:7e:16:1b:02:e1:c2:22:97:bb:7c:93:63:1e:15:
84:d2:66:b9:5a:1a:01:e1:ad:ce:3d:71:9a:79:05:
a8:48:5f:f1:4e:5a:8a:d5:7d:2b:56:59:d4:bd:08:
b8:00:e4:7b:a4:2c:a4:c0:01:72:8c:85:9d:8a:1d:
96:a4:46:34:fd:03:61:0a:59:cf:13:c6:17:2c:b8:
cf:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:93:0E:45:DA:82:4D:73:3D:22:AB:80:4D:18:E5:74:14:2E:29:5C
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/_5MORdqCTXM9IquATRjldBQuKVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.245.0/24
5.182.204.0/22
5.252.100.0/22
37.221.93.0/24
45.11.229.0/24
45.13.224.0/23
45.86.155.0/24
45.89.124.0/22
45.131.64.0/24
45.131.66.0/23
45.133.74.0/24
109.71.252.0/24
194.15.36.0/24
212.87.212.0/23
Signature Algorithm: sha256WithRSAEncryption
43:e5:c3:41:ad:85:e5:5f:46:9f:74:5e:ae:99:35:42:41:ed:
13:e7:77:d3:f6:29:45:db:36:f3:5b:71:d5:95:1d:3f:75:68:
03:89:3d:db:87:91:36:fd:24:80:63:42:cb:17:94:13:c0:a7:
09:4c:e9:cb:66:78:5d:bc:fe:1a:cf:54:96:f2:27:93:e5:29:
b4:d5:ef:7d:6a:0b:dd:de:4a:c3:d9:f7:2a:1c:94:ba:26:53:
b0:9f:7e:ed:47:92:df:96:da:f6:8b:fc:2e:5d:7b:e7:f6:89:
a7:46:3e:2a:79:30:54:46:26:79:92:69:81:c8:7c:4a:dc:69:
d6:c6:4c:39:c7:f7:0e:4b:0d:34:b9:b3:da:61:e1:36:ea:9a:
3d:2e:71:8b:e9:28:d5:4a:ae:c6:ec:34:6f:f0:36:69:5c:99:
10:30:08:7b:da:49:75:21:1d:75:37:f5:4c:f5:5e:17:58:11:
3b:df:ec:c2:e1:89:8d:0d:55:ef:5f:e7:d3:a6:67:8b:44:2e:
c7:4f:3c:42:7e:3b:10:5c:a0:fd:ed:49:68:a6:cf:3c:dd:95:
bb:2a:7c:6e:34:55:35:03:f1:6b:b9:24:79:11:5b:48:85:a2:
b1:d4:0d:34:c0:ae:4f:a4:7b:8f:23:c6:22:67:51:e0:db:0e:
bf:0c:a2:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 24 07:32:55 2023 by rpki-client on console-fra.rpki-client.org