Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/ar0kORFL5cTk6DFZpehLsfA7zJ0.roa
File: ar0kORFL5cTk6DFZpehLsfA7zJ0.roa (raw, json)
Hash identifier: nUKeWivkwUSC0VoWqwtHDOjY1gkxBDG30+ZuVPJPWEQ=
Subject key identifier: 6A:BD:24:39:11:4B:E5:C4:E4:E8:31:59:A5:E8:4B:B1:F0:3B:CC:9D
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 01856CE62B096135BCBB048BDCBB6133BD03
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/ar0kORFL5cTk6DFZpehLsfA7zJ0.roa
Signing time: Sun 01 Jan 2023 10:35:01 +0000
ROA not before: Sun 01 Jan 2023 10:35:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213250
IP address blocks: 45.89.124.0/23 maxlen: 23
45.89.126.0/23 maxlen: 23
212.87.212.0/23 maxlen: 23
45.133.74.0/24 maxlen: 24
45.13.224.0/23 maxlen: 23
5.182.206.0/23 maxlen: 23
5.182.204.0/23 maxlen: 23
45.11.229.0/24 maxlen: 24
45.131.64.0/24 maxlen: 24
45.131.66.0/23 maxlen: 23
37.221.93.0/24 maxlen: 24
194.15.36.0/24 maxlen: 24
2.56.245.0/24 maxlen: 24
5.252.103.0/24 maxlen: 24
5.252.100.0/22 maxlen: 22
5.252.100.0/24 maxlen: 24
5.252.101.0/24 maxlen: 24
5.252.102.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:2b:09:61:35:bc:bb:04:8b:dc:bb:61:33:bd:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 1 10:35:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6abd2439114be5c4e4e83159a5e84bb1f03bcc9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:74:74:e8:3e:82:f5:39:c0:c8:c7:7a:f9:e9:
a8:74:bf:3f:b4:49:88:5f:3f:06:f1:a1:fb:0e:45:
81:6d:25:f0:1c:8c:64:7e:39:24:57:f4:9f:8f:bd:
0a:5d:d9:8d:a9:c2:61:12:ee:24:b8:24:86:38:43:
12:81:6d:da:a4:63:f0:85:a7:06:1a:50:25:c8:3c:
95:fc:eb:3b:79:55:78:a0:5e:a4:d9:3b:ff:f6:48:
ed:9e:ac:51:78:37:f4:f3:ec:38:e7:a2:56:26:c5:
aa:7c:e3:11:de:6f:c5:be:8b:d9:3a:58:b2:88:e4:
3a:01:5c:fa:eb:4f:35:01:95:8d:e7:20:96:5e:a8:
48:5b:e1:01:d7:70:9e:5d:6a:73:c2:70:e3:b7:80:
29:54:a9:fc:e2:f6:42:48:fe:73:68:e6:ce:78:06:
54:a9:5c:40:2a:fa:d1:d5:df:f7:e4:27:06:19:9a:
73:a9:4a:03:b0:d8:e9:de:46:2d:b4:4f:0a:aa:63:
16:0f:36:da:07:a7:65:d8:54:20:19:21:c6:8b:42:
de:3c:ff:21:1b:e3:7a:c4:88:07:85:e5:7a:b2:45:
30:87:67:9c:ce:bb:d3:fe:22:81:7a:cc:46:cc:de:
ba:fc:4a:58:4d:35:ac:b2:49:09:16:29:ae:a1:56:
69:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:BD:24:39:11:4B:E5:C4:E4:E8:31:59:A5:E8:4B:B1:F0:3B:CC:9D
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/ar0kORFL5cTk6DFZpehLsfA7zJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.245.0/24
5.182.204.0/22
5.252.100.0/22
37.221.93.0/24
45.11.229.0/24
45.13.224.0/23
45.89.124.0/22
45.131.64.0/24
45.131.66.0/23
45.133.74.0/24
194.15.36.0/24
212.87.212.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:4a:9c:fa:f7:40:f6:fd:66:99:2b:8b:7f:08:aa:d9:cb:a7:
aa:0f:82:9f:66:de:84:c3:ed:68:db:b6:04:72:e8:9d:bb:82:
f4:5c:a4:d4:a3:c4:70:9f:d4:15:7c:43:11:90:2c:a8:85:e0:
30:cb:6d:80:2c:af:d3:74:36:c1:3c:b3:0b:8b:5c:0c:7e:19:
1c:36:a9:b6:66:20:da:d0:1f:bc:d5:fa:fb:a1:78:82:86:fc:
1f:b9:f2:cb:3f:75:d1:d3:f9:3e:20:ee:85:8a:06:37:63:ab:
d8:45:d5:b9:98:b9:04:30:a2:4b:dc:7e:31:2a:6d:bb:ff:3f:
a9:ce:45:28:8d:f5:6b:1f:7e:91:19:a6:b8:58:31:79:dc:fc:
d4:8b:2d:29:b9:4b:4d:12:d5:18:16:ca:44:fb:9c:78:cb:c7:
5d:c4:46:f4:48:d2:39:0b:c3:7a:f2:66:d9:35:e2:e5:5d:55:
67:9e:17:a8:1c:33:91:7e:ee:06:9b:4c:cb:6b:73:f0:f8:3b:
2d:b9:d3:4f:15:04:89:15:d3:de:99:23:c6:a2:50:b0:43:2f:
c3:a7:d8:ce:c2:e8:63:42:50:fd:6b:23:df:25:d1:f1:07:11:
bf:06:88:47:a6:56:cb:e3:5b:a5:99:c8:64:53:f8:46:af:94:
9c:6f:a0:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:30 2023 by rpki-client on console-fra.rpki-client.org