Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/9SCaS28w-CRB9PRn5ezJw5VLHas.roa
File: 9SCaS28w-CRB9PRn5ezJw5VLHas.roa (raw, json)
Hash identifier: T00/piuNocVGFm5He9WzjiXjBF33IMKETDoOsFgRITo=
Subject key identifier: F5:20:9A:4B:6F:30:F8:24:41:F4:F4:67:E5:EC:C9:C3:95:4B:1D:AB
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 018C43592BEFC34EA85B638EC48D255CA9E4
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/9SCaS28w-CRB9PRn5ezJw5VLHas.roa
Signing time: Thu 07 Dec 2023 08:16:06 +0000
ROA not before: Thu 07 Dec 2023 08:16:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202423
IP address blocks: 212.60.22.0/24 maxlen: 24
5.44.43.0/24 maxlen: 24
5.44.45.0/24 maxlen: 24
45.129.186.0/24 maxlen: 24
185.247.185.0/24 maxlen: 24
89.191.225.0/24 maxlen: 24
89.191.230.0/24 maxlen: 24
89.191.231.0/24 maxlen: 24
89.191.233.0/24 maxlen: 24
89.191.235.0/24 maxlen: 24
194.116.162.0/24 maxlen: 24
194.116.163.0/24 maxlen: 24
45.89.188.0/24 maxlen: 24
45.89.189.0/24 maxlen: 24
45.89.191.0/24 maxlen: 24
91.107.119.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:43:59:2b:ef:c3:4e:a8:5b:63:8e:c4:8d:25:5c:a9:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Dec 7 08:16:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f5209a4b6f30f82441f4f467e5ecc9c3954b1dab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f9:5c:a7:17:32:94:aa:fa:95:e1:44:6c:9b:
10:3f:e7:64:94:ee:47:f6:d3:2b:62:a6:7e:1d:7b:
34:ff:25:c9:71:1b:23:a7:a0:45:48:bb:47:37:58:
bb:0b:32:50:98:5b:25:b4:4b:5b:60:a0:ad:23:18:
67:bd:16:c1:dd:ff:81:21:78:9c:c0:1a:f8:c6:81:
a4:88:ab:2d:04:61:0f:c5:3e:13:c4:a6:12:ca:6e:
97:c3:75:af:2e:04:04:c9:f6:39:8b:d6:e4:47:01:
4c:82:c9:8c:4e:84:b3:4c:68:0b:cc:80:a5:12:8c:
1e:28:d7:2e:60:a4:be:d6:57:44:cc:c0:db:d9:44:
a1:05:cd:cc:d6:d2:d5:e8:1e:c0:87:4e:af:78:22:
da:15:45:23:d6:4b:9f:c6:6e:2c:51:40:9d:f2:53:
f8:2a:db:f9:1b:9b:57:6e:ae:a1:93:c3:b5:a3:df:
18:83:cb:04:11:c9:c6:b1:69:0e:12:6c:b5:b3:b1:
61:0a:a4:c5:b3:5e:cb:1a:a8:5e:02:ea:88:cb:c5:
2f:92:2c:bb:37:1f:6b:7d:be:3d:0f:70:21:7c:dc:
68:b1:a9:00:96:ed:1e:44:2e:f6:0f:63:6e:56:25:
a3:3e:0e:33:f3:9d:25:95:39:d8:de:17:81:a5:65:
e1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:20:9A:4B:6F:30:F8:24:41:F4:F4:67:E5:EC:C9:C3:95:4B:1D:AB
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/9SCaS28w-CRB9PRn5ezJw5VLHas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.44.43.0/24
5.44.45.0/24
45.89.188.0/23
45.89.191.0/24
45.129.186.0/24
89.191.225.0/24
89.191.230.0/23
89.191.233.0/24
89.191.235.0/24
91.107.119.0/24
185.247.185.0/24
194.116.162.0/23
212.60.22.0/24
Signature Algorithm: sha256WithRSAEncryption
67:2b:82:a9:a2:62:37:62:66:98:5d:9e:a7:fa:ef:c0:08:7e:
9a:57:03:20:6d:cc:41:b7:67:1c:2c:54:f6:ce:d9:d2:e5:f3:
2d:18:b3:83:f4:bf:e6:de:2d:80:ba:03:0c:cf:50:c9:e0:e3:
d7:55:24:60:bc:e0:6e:78:b5:c6:1d:87:f3:f3:21:f9:9f:a6:
6e:0b:0f:7c:d4:05:58:38:98:99:31:17:fe:3d:3e:fc:37:da:
a8:56:7f:a7:46:ef:64:36:da:c2:cb:cc:5f:05:9b:3b:bf:a7:
85:20:0c:28:26:71:d6:8f:42:de:f8:63:d6:48:15:aa:cb:60:
66:10:8c:60:e4:bd:d2:ab:c0:6f:0e:03:5a:e9:47:db:48:f7:
a7:f0:0b:df:bc:db:97:e4:5e:8d:d0:a4:00:99:1d:35:b7:09:
b6:14:1d:ed:8f:0b:fc:24:bd:b4:b3:e8:49:31:0f:ff:9b:d0:
87:07:8e:60:f2:30:00:04:63:e1:59:74:89:64:b2:f2:ff:d1:
52:99:f7:05:a9:85:ff:94:82:ab:a7:a7:0d:08:76:d6:74:0b:
e7:2c:68:c5:f7:c0:1f:49:82:02:53:a2:fa:87:96:88:57:1b:
5c:0b:6b:ef:1c:0e:9c:8c:9b:e4:e3:33:2a:fa:b4:b1:4b:77:
1a:14:33:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:26:15 2024 by rpki-client on console-fra.rpki-client.org