Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/OhPhMbpGFZOk_bqVS_M44KUq3Y8.roa
File: OhPhMbpGFZOk_bqVS_M44KUq3Y8.roa (raw, json)
Hash identifier: 5vdirU093stld0H7xTgDGXC3472B9R/08qnGc3QUX7E=
Subject key identifier: 3A:13:E1:31:BA:46:15:93:A4:FD:BA:95:4B:F3:38:E0:A5:2A:DD:8F
Certificate issuer: /CN=8533ef46116fd9d21bfb533e44bde517890c24dc
Certificate serial: 01865083135E7935D6E8E4D85A7FACCE932A
Authority key identifier: 85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/OhPhMbpGFZOk_bqVS_M44KUq3Y8.roa
Signing time: Tue 14 Feb 2023 15:20:12 +0000
ROA not before: Tue 14 Feb 2023 15:20:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 185.45.94.0/24 maxlen: 24
185.45.95.0/24 maxlen: 24
171.22.60.0/23 maxlen: 23
5.183.240.0/23 maxlen: 23
92.119.24.0/23 maxlen: 23
171.22.62.0/23 maxlen: 23
5.183.242.0/23 maxlen: 23
92.119.26.0/23 maxlen: 23
45.14.80.0/24 maxlen: 24
45.14.81.0/24 maxlen: 24
45.86.24.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:50:83:13:5e:79:35:d6:e8:e4:d8:5a:7f:ac:ce:93:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8533ef46116fd9d21bfb533e44bde517890c24dc
Validity
Not Before: Feb 14 15:20:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3a13e131ba461593a4fdba954bf338e0a52add8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8d:11:38:8f:5a:35:97:e5:ea:31:7d:ad:24:
1e:d8:ca:28:2f:ba:8d:31:d0:e4:56:9e:ed:a3:50:
d4:0b:b4:96:7f:32:69:2b:b1:ab:27:be:f8:ba:55:
f3:b5:d9:5a:eb:38:b5:8a:2e:4d:82:9d:eb:c4:ac:
1d:2a:b8:62:fe:39:99:32:c3:53:d6:9a:5f:aa:d6:
24:99:0e:7a:2a:b0:6c:f7:3c:d0:de:9e:b8:75:6b:
5c:f5:c6:ce:40:02:9c:1f:f1:d5:2e:c7:7b:79:f2:
c8:b1:c4:aa:a8:53:3b:6d:fe:8f:20:4a:77:e4:e6:
67:1c:92:91:6b:a0:f9:45:a1:24:0e:81:dc:3f:c4:
5f:c4:a5:25:97:70:fc:50:15:18:c9:a4:05:a0:8c:
51:ac:79:6c:a9:6d:ab:29:db:c5:91:2b:0e:0f:df:
c2:86:6d:a0:19:80:ed:ae:e2:73:c3:e5:c2:b8:c0:
16:cd:65:ba:4d:ed:50:24:d0:7b:f4:a2:ea:b1:ba:
51:6a:42:95:2f:fe:a8:95:90:96:f7:28:e7:91:43:
a4:04:b3:34:b6:dc:f7:ab:68:eb:f4:67:8a:bc:88:
e4:3c:e9:ea:dd:4e:d2:e2:50:28:dd:21:2d:b6:35:
31:48:33:66:ae:13:98:fb:ec:91:d4:3c:87:ad:d9:
92:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:13:E1:31:BA:46:15:93:A4:FD:BA:95:4B:F3:38:E0:A5:2A:DD:8F
X509v3 Authority Key Identifier:
keyid:85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/OhPhMbpGFZOk_bqVS_M44KUq3Y8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.240.0/22
45.14.80.0/23
45.86.24.0/22
92.119.24.0/22
171.22.60.0/22
185.45.94.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:e9:3b:55:9a:a2:7a:51:4d:08:b7:c9:b0:00:fc:66:53:db:
40:02:b7:c7:8a:72:1b:82:66:8d:4e:ad:a5:a2:57:ed:68:1a:
bd:ae:d7:9c:9d:ad:47:03:20:05:65:ed:1b:81:59:38:22:b3:
57:7b:d3:2b:dc:6c:31:d7:70:fd:5b:4a:8a:ce:c6:df:ea:93:
61:b2:2b:cc:92:4c:75:a7:a7:ef:7f:63:aa:2d:ae:97:6b:bd:
eb:ba:14:d1:cd:e8:ad:37:15:9d:37:7a:96:05:8e:71:58:52:
0e:3d:92:49:c4:30:9c:1f:27:99:e5:6d:34:e7:69:25:1f:57:
c1:17:2a:22:a9:c1:84:41:76:e0:8e:ff:fd:fe:13:df:12:54:
d0:db:bc:6b:3f:8b:3c:cc:c8:84:58:ef:24:e3:01:6d:33:1e:
e3:ee:24:db:b0:8b:d4:63:bb:f2:78:b0:da:8a:56:01:cf:3f:
07:dd:6b:c9:88:3a:2e:a8:30:83:1f:73:c9:2f:d2:dc:ff:bb:
dc:a2:61:0b:cd:8e:1d:90:60:3b:28:25:59:77:4e:cb:02:75:
62:24:97:8f:31:bf:03:67:1e:a2:96:b8:9f:e3:78:4e:39:c3:
e8:d8:ca:3e:e9:2c:8d:b8:80:c5:ac:1f:ed:10:df:8d:df:da:
7f:ba:c8:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:45 2023 by rpki-client on console-ams.rpki-client.org