Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/5bNFou3HO1IMCtyXK_C7Ue2mFU8.roa
File: 5bNFou3HO1IMCtyXK_C7Ue2mFU8.roa (raw, json)
Hash identifier: nqh88AXlJzTHiL0Ca4H9SHCLhUX2+AhgPsazfv7zKnQ=
Subject key identifier: E5:B3:45:A2:ED:C7:3B:52:0C:0A:DC:97:2B:F0:BB:51:ED:A6:15:4F
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0187A2334566E78C3917532B82D2E486CBD3
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/5bNFou3HO1IMCtyXK_C7Ue2mFU8.roa
Signing time: Fri 21 Apr 2023 05:04:41 +0000
ROA not before: Fri 21 Apr 2023 05:04:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 185.218.84.0/22 maxlen: 24
84.54.49.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
178.215.237.0/24 maxlen: 24
141.98.7.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
45.149.233.0/24 maxlen: 24
147.78.101.0/24 maxlen: 24
147.78.100.0/24 maxlen: 24
185.246.223.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
87.120.64.0/23 maxlen: 24
79.110.50.0/24 maxlen: 24
94.103.125.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.137.0/24 maxlen: 24
82.115.209.0/24 maxlen: 24
194.49.87.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
185.219.126.0/24 maxlen: 24
94.154.172.0/24 maxlen: 24
87.121.220.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a2:33:45:66:e7:8c:39:17:53:2b:82:d2:e4:86:cb:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 21 05:04:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e5b345a2edc73b520c0adc972bf0bb51eda6154f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d1:2c:e2:41:92:8d:a7:6e:a1:a8:63:d7:ad:
f2:69:14:41:ac:22:68:bf:a4:fa:26:e0:b3:a4:7c:
12:a7:c9:f7:db:cf:0c:5e:de:65:0d:0f:30:ce:7b:
5f:43:ce:03:69:0b:21:8b:cb:68:90:5b:88:55:33:
6d:32:2b:48:62:71:2d:b7:a3:3a:de:e5:1d:b0:97:
1a:2b:92:e6:2d:2c:f6:83:b8:71:3f:b2:55:56:9a:
55:cb:8d:ed:10:51:9d:fc:a5:e8:1d:0f:8c:57:8c:
da:b1:9a:8b:f1:1d:24:4a:45:d1:d3:56:72:43:9b:
20:ed:cc:0f:0b:ac:d5:5c:b1:a2:9c:52:b7:9a:89:
53:26:91:8e:3c:9d:01:2f:bc:39:71:9a:60:04:fc:
d3:b7:8f:48:aa:f8:60:bf:07:7c:b5:e9:80:d1:5c:
84:13:73:cd:3e:ba:92:98:53:41:3d:69:b3:12:1f:
10:dc:2a:de:37:a7:29:78:f5:f7:d0:ba:95:33:d7:
fa:4a:fb:0c:32:f4:8c:72:17:5a:62:8c:1c:02:1b:
e4:11:55:d1:b9:32:e5:2e:19:8a:f4:e2:b6:36:1b:
11:6c:04:ca:48:b8:ab:34:10:79:7a:fb:2e:5f:2d:
fa:42:04:ad:f8:47:f9:c7:d0:bd:4a:2d:b1:25:55:
49:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B3:45:A2:ED:C7:3B:52:0C:0A:DC:97:2B:F0:BB:51:ED:A6:15:4F
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/5bNFou3HO1IMCtyXK_C7Ue2mFU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.233.0/24
45.151.89.0/24
79.110.50.0/24
82.115.209.0/24
84.54.49.0/24
87.120.64.0/23
87.121.220.0/24
92.119.196.0/23
94.103.125.0/24
94.154.161.0-94.154.163.255
94.154.172.0/24
141.98.7.0/24
147.78.100.0/23
171.22.72.0/22
178.215.236.0/23
185.216.84.0/22
185.218.84.0/22
185.218.137.0/24
185.219.126.0/24
185.246.223.0/24
194.49.87.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:2a:87:f5:eb:0e:89:d3:d7:f0:e1:9c:08:f6:c8:e0:ca:1e:
3c:b9:e8:08:c0:20:24:58:4c:e7:2d:78:a6:e0:6c:a9:bd:74:
35:3d:8e:57:6f:c6:ab:06:42:09:e5:5e:ad:d3:a6:c3:8e:7d:
02:f6:93:2b:24:22:e5:bc:a1:e1:e7:f4:a4:b8:a4:2a:8e:8a:
3d:b5:c8:0c:ca:d9:6c:cc:83:ec:44:dd:81:49:04:4e:bd:92:
6e:28:60:62:b0:22:51:fa:d8:c3:2b:0d:f6:bd:8b:23:82:fd:
4f:80:f6:b8:54:da:89:de:1b:16:3f:a3:8c:2d:99:89:57:d0:
4a:8a:1d:e6:94:06:00:d3:da:33:e0:64:79:29:22:e2:4f:c4:
2e:c0:91:e2:ea:2f:d2:15:ff:d8:60:63:a2:09:aa:1d:67:91:
a0:98:fa:21:03:50:d6:d1:c6:cb:74:01:1d:8f:52:01:bc:b5:
e6:4b:9d:72:af:4b:8e:26:1f:f8:89:8c:bd:e6:32:56:33:1e:
c4:bd:4a:30:0c:c0:88:8c:49:d6:e2:ba:e9:b9:2f:c4:0d:67:
b1:76:df:00:54:0b:03:cb:29:0a:8a:fc:7e:da:4e:00:06:5b:
f5:25:4d:6a:c3:d4:3b:5b:4d:fb:96:5b:90:fc:89:f1:14:db:
72:07:1a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:32 2023 by rpki-client on console-ams.rpki-client.org