Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/5SGTVkIM60Meuh2oqIFp1He433Q.roa
File: 5SGTVkIM60Meuh2oqIFp1He433Q.roa (raw, json)
Hash identifier: XV5uuMcSBM2D/ECv3bzGRmUIRl3w1C8xHNNbHWamEjI=
Subject key identifier: E5:21:93:56:42:0C:EB:43:1E:BA:1D:A8:A8:81:69:D4:77:B8:DF:74
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0186D9E8BC7E02A589D8081B9EB268EAD873
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/5SGTVkIM60Meuh2oqIFp1He433Q.roa
Signing time: Mon 13 Mar 2023 07:39:13 +0000
ROA not before: Mon 13 Mar 2023 07:39:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 185.218.84.0/22 maxlen: 24
87.121.124.0/23 maxlen: 24
164.40.185.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
45.128.233.0/24 maxlen: 24
185.252.176.0/24 maxlen: 24
171.22.19.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.137.0/24 maxlen: 24
94.154.161.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
185.219.126.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:d9:e8:bc:7e:02:a5:89:d8:08:1b:9e:b2:68:ea:d8:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 13 07:39:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e5219356420ceb431eba1da8a88169d477b8df74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:de:29:e6:6a:aa:3b:b8:bf:e3:42:c5:04:cd:
28:2f:44:45:9b:cd:8d:14:45:43:54:40:c0:0d:46:
cb:f0:2c:74:dc:2a:5f:c0:73:1a:56:0a:c9:45:ed:
a0:64:67:fe:60:a7:2b:41:f0:4d:8b:1d:7e:74:04:
84:a7:5c:8c:df:3a:2c:ce:7e:7b:75:09:72:fb:7f:
70:ea:47:62:66:b7:d5:c6:07:28:c9:d8:53:b8:9c:
34:a0:0c:4d:42:84:d4:32:8f:36:05:23:0b:e0:24:
2e:1a:5b:40:d3:be:4f:3d:6c:c0:09:25:d0:ca:2f:
ba:ff:50:79:52:cc:fd:40:5d:e0:f1:ce:a3:4a:f8:
28:af:1a:60:bd:08:d5:a6:7d:72:7b:be:8d:6d:36:
56:ac:df:18:38:59:be:01:91:cf:07:16:c7:6e:09:
3d:cf:db:28:2a:bb:d0:82:33:1a:c8:b5:d5:ca:ea:
5c:58:4c:e7:e0:d8:85:f4:4f:e6:23:0b:b9:53:d7:
ea:db:09:4c:60:60:d9:88:6c:89:a4:e3:40:25:b3:
ea:6e:5e:91:43:05:e5:45:25:56:78:e2:97:d6:38:
44:11:d6:ec:95:8d:42:a6:c7:29:f2:7a:a5:e5:b6:
e0:25:f2:b1:cd:06:55:99:7e:7a:55:8f:d6:a5:bb:
a8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:21:93:56:42:0C:EB:43:1E:BA:1D:A8:A8:81:69:D4:77:B8:DF:74
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/5SGTVkIM60Meuh2oqIFp1He433Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.233.0/24
45.151.89.0/24
87.121.124.0/23
92.119.196.0/23
94.154.161.0-94.154.163.255
164.40.185.0/24
171.22.19.0/24
171.22.72.0/22
178.215.236.0/24
185.216.84.0/22
185.218.84.0/22
185.218.137.0/24
185.219.126.0/24
185.252.176.0/24
Signature Algorithm: sha256WithRSAEncryption
14:a3:9b:cb:cb:c6:b8:9b:f1:73:0e:a8:c6:4b:f9:18:a8:7b:
42:63:98:a5:1a:88:b8:54:78:bf:f2:27:75:f2:43:02:dd:bc:
38:9a:6c:48:69:b1:1a:b7:52:b6:1a:5f:32:29:e6:e6:46:56:
59:42:57:24:f7:0b:3b:da:87:ab:e1:7e:df:69:1f:52:51:b3:
03:97:7b:45:79:e1:b5:1b:98:ad:c2:f6:47:45:99:5c:49:e3:
71:f8:d7:4c:a3:dc:24:c3:4c:2c:81:ee:6b:96:30:9d:58:cb:
5f:d9:6f:e2:f5:43:0d:06:a6:98:7f:87:61:46:61:a6:a6:8f:
29:43:20:ed:a7:15:12:b5:ae:46:96:07:4e:dd:30:e7:61:ce:
b8:b0:c3:35:fe:53:f7:5c:45:40:30:ec:48:29:51:6c:a5:e4:
bc:22:66:2d:1b:4e:56:b4:0a:46:8f:7e:81:9e:ad:87:a3:e6:
6a:5e:26:72:bc:fa:ea:8d:b6:e8:fe:ce:dc:4a:13:74:da:b8:
5a:1f:5f:04:91:02:15:9e:0c:7b:0e:65:2f:78:4f:bc:90:c5:
37:17:54:6a:cc:92:da:25:d7:11:c1:0a:39:80:fb:51:4f:45:
a2:9f:d6:74:46:14:ea:2f:6c:b5:1e:ba:42:ab:41:00:04:7d:
6b:ff:fb:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:32 2023 by rpki-client on console-ams.rpki-client.org