Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/rFsBDIhUXGCbXwwKx_nddXAyOkw.roa
File: rFsBDIhUXGCbXwwKx_nddXAyOkw.roa (raw, json)
Hash identifier: OC/Dl7SKi3fuCPANqqbfqEbDd2kKr1wACvoeY27vI9w=
Subject key identifier: AC:5B:01:0C:88:54:5C:60:9B:5F:0C:0A:C7:F9:DD:75:70:32:3A:4C
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 018969CCA8012B4C292B4A74A2921587FA43
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/rFsBDIhUXGCbXwwKx_nddXAyOkw.roa
Signing time: Tue 18 Jul 2023 16:19:27 +0000
ROA not before: Tue 18 Jul 2023 16:19:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43350
IP address blocks: 185.135.212.0/22 maxlen: 24
45.43.88.0/22 maxlen: 24
198.105.96.0/22 maxlen: 24
198.105.104.0/22 maxlen: 24
198.105.112.0/24 maxlen: 24
198.105.118.0/23 maxlen: 24
198.105.114.0/23 maxlen: 24
198.105.113.0/24 maxlen: 24
155.254.40.0/22 maxlen: 22
155.254.44.0/22 maxlen: 24
155.254.50.0/23 maxlen: 24
155.254.52.0/22 maxlen: 24
155.254.56.0/22 maxlen: 24
45.43.92.0/22 maxlen: 24
185.53.131.0/24 maxlen: 24
185.53.128.0/24 maxlen: 24
185.53.130.0/24 maxlen: 24
185.53.129.0/24 maxlen: 24
185.83.219.0/24 maxlen: 24
185.83.218.0/24 maxlen: 24
185.83.216.0/24 maxlen: 24
185.83.217.0/24 maxlen: 24
107.181.137.0/24 maxlen: 24
107.181.156.0/22 maxlen: 22
91.210.64.0/22 maxlen: 24
103.206.232.0/22 maxlen: 24
162.220.246.0/23 maxlen: 24
94.177.5.0/24 maxlen: 24
43.239.88.0/22 maxlen: 22
87.239.252.0/23 maxlen: 24
2a02:2ca0::/29 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:69:cc:a8:01:2b:4c:29:2b:4a:74:a2:92:15:87:fa:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Jul 18 16:19:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ac5b010c88545c609b5f0c0ac7f9dd7570323a4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b5:ef:2c:e0:99:d2:52:e5:fb:c2:f5:c5:53:
1b:cb:8d:d3:64:63:af:f0:d7:54:68:08:53:03:0b:
64:47:68:78:07:8a:8f:c9:70:a8:b2:e0:23:9b:cf:
b8:01:8e:2e:da:ed:67:15:18:55:7a:39:16:55:9b:
a1:ec:f9:49:64:0c:35:48:d4:ba:a7:e5:88:75:c2:
92:07:15:d0:6d:5d:72:38:5f:54:4e:1c:4e:22:73:
57:f0:50:f9:b1:fc:f8:d9:61:11:02:60:85:08:54:
fd:34:8a:5d:92:a6:71:59:c2:79:39:21:2a:aa:35:
56:c1:84:8c:39:a6:09:72:80:d2:46:8c:f5:96:c0:
06:8e:c2:13:79:88:0f:a1:f1:c5:bf:b0:c8:d0:5d:
3d:93:fa:96:3e:51:f0:64:65:39:a8:7f:e4:32:87:
df:e7:49:2f:fb:66:3c:93:0c:30:9b:88:f2:e3:1b:
e1:dd:f2:41:d5:c8:a3:48:a6:08:b3:2a:2e:10:74:
59:8a:ee:e4:63:01:fc:0a:ca:11:2e:d9:1a:d1:f2:
47:72:af:32:02:4b:66:a7:83:9e:18:9b:5a:cd:0a:
3a:3f:d5:e8:cf:93:8c:44:5d:b3:f2:59:af:67:a1:
35:af:84:da:8f:50:35:39:79:d5:78:59:7b:59:02:
4c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:5B:01:0C:88:54:5C:60:9B:5F:0C:0A:C7:F9:DD:75:70:32:3A:4C
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/rFsBDIhUXGCbXwwKx_nddXAyOkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.239.88.0/22
45.43.88.0/21
87.239.252.0/23
91.210.64.0/22
94.177.5.0/24
103.206.232.0/22
107.181.137.0/24
107.181.156.0/22
155.254.40.0/21
155.254.50.0-155.254.59.255
162.220.246.0/23
185.53.128.0/22
185.83.216.0/22
185.135.212.0/22
198.105.96.0/22
198.105.104.0/22
198.105.112.0/22
198.105.118.0/23
IPv6:
2a02:2ca0::/29
Signature Algorithm: sha256WithRSAEncryption
31:e3:a0:e3:7a:c1:49:8d:e3:a9:45:52:5c:61:da:e1:6e:3f:
25:32:7b:26:e1:5e:14:2d:df:01:7d:a6:c8:7d:85:19:d6:78:
75:a8:bd:d6:9f:19:74:3d:c1:33:aa:e4:45:38:43:f0:d4:be:
89:4a:9f:21:b4:5d:86:ab:45:c8:cf:5a:75:3e:69:56:50:81:
78:92:51:12:ea:1c:35:0e:10:ee:7c:e5:92:b2:68:57:e3:e9:
5a:3b:9a:a2:41:81:c5:65:76:1b:45:da:0f:65:94:b5:9a:56:
9c:7b:18:9d:35:54:05:d4:17:5b:0c:04:e8:6a:8a:e0:80:be:
57:26:9d:ea:88:55:b2:92:8d:f1:a9:67:37:8b:da:e0:77:9b:
d4:15:5e:b3:18:79:aa:41:a5:7f:24:9e:53:52:26:53:9c:5a:
8d:e3:22:52:cd:f4:ae:b7:a7:22:66:43:63:13:75:0f:0c:21:
45:c8:f9:b6:ff:ef:7e:27:71:66:01:21:05:d6:5c:e4:e8:0e:
30:5b:29:fa:51:66:2a:ae:ae:89:b9:19:83:65:41:75:2e:86:
35:3e:83:0c:89:aa:ee:48:ff:67:ba:08:e7:6b:dd:92:25:d6:
c0:f9:6c:fd:a9:4e:cf:89:96:33:3d:55:79:4c:1f:ee:63:3e:
9c:d6:7e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:16:16 2024 by rpki-client on console-ams.rpki-client.org