Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/53XWCfRzXGxgEOKb-u39hboow7U.roa
File: 53XWCfRzXGxgEOKb-u39hboow7U.roa (raw, json)
Hash identifier: pE+beR8yZLtTl5IzBJRCmcZR2ABns31buQFRW90gEXg=
Subject key identifier: E7:75:D6:09:F4:73:5C:6C:60:10:E2:9B:FA:ED:FD:85:BA:28:C3:B5
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0188B4A8D63DE90EBDB49E275F9E6A0A184A
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/53XWCfRzXGxgEOKb-u39hboow7U.roa
Signing time: Tue 13 Jun 2023 12:09:03 +0000
ROA not before: Tue 13 Jun 2023 12:09:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 45.13.189.0/24 maxlen: 24
45.13.190.0/24 maxlen: 24
5.181.84.0/24 maxlen: 24
5.181.85.0/24 maxlen: 24
45.151.3.0/24 maxlen: 24
5.181.87.0/24 maxlen: 24
195.211.188.0/22 maxlen: 24
45.88.136.0/23 maxlen: 24
85.209.122.0/23 maxlen: 24
194.242.97.0/24 maxlen: 24
45.144.212.0/24 maxlen: 24
45.132.181.0/24 maxlen: 24
45.132.182.0/23 maxlen: 24
195.177.92.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
45.81.112.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b4:a8:d6:3d:e9:0e:bd:b4:9e:27:5f:9e:6a:0a:18:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jun 13 12:09:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e775d609f4735c6c6010e29bfaedfd85ba28c3b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:db:95:97:e1:b8:24:39:af:f6:59:f8:98:59:
aa:6b:dc:3a:51:c8:27:9b:d9:64:c9:97:6f:39:b8:
4f:15:6f:c2:38:35:92:77:63:25:68:65:0e:a4:e2:
5c:62:dc:06:d6:71:ba:73:06:f1:2a:db:2b:b5:8f:
ee:00:44:d2:a5:98:bf:d7:67:2d:58:6c:8d:61:c1:
47:08:69:ec:db:cb:70:87:70:cf:d0:11:61:57:ea:
32:db:ee:aa:33:8a:73:1b:05:f5:3f:f6:64:41:7d:
0e:92:e5:31:72:37:76:6e:92:8d:90:fc:95:6a:d0:
5b:0a:5c:5b:93:ed:9e:c1:d3:9b:2c:d2:63:ad:87:
72:96:2b:0e:98:1d:57:86:7b:96:e7:13:71:0f:dd:
f8:6c:d6:20:a9:51:eb:3b:ed:1b:0f:ba:ca:ef:46:
42:e3:ea:55:19:99:2d:0b:17:2c:28:6d:26:29:25:
31:6f:46:31:20:a9:40:e6:05:61:d9:a5:2f:d8:f6:
95:f3:d3:d3:b7:1d:c7:a7:aa:af:e5:81:9b:46:fb:
32:16:a8:39:bc:59:07:24:9b:d6:56:c7:8e:f8:0c:
eb:8e:dc:00:b2:64:5b:4a:17:9f:69:9e:dd:0d:0d:
ae:12:d2:eb:89:f0:35:56:07:23:01:47:9d:9f:ee:
c4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:75:D6:09:F4:73:5C:6C:60:10:E2:9B:FA:ED:FD:85:BA:28:C3:B5
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/53XWCfRzXGxgEOKb-u39hboow7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.84.0/23
5.181.87.0/24
45.13.189.0-45.13.190.255
45.81.112.0/22
45.88.136.0/23
45.132.181.0-45.132.183.255
45.144.212.0/24
45.151.3.0/24
85.209.122.0/23
194.242.97.0/24
195.177.92.0/23
195.211.188.0/22
Signature Algorithm: sha256WithRSAEncryption
24:3c:1c:ae:43:59:18:45:65:2b:47:ec:99:f9:e1:76:fa:60:
af:97:f6:3e:ec:ed:ca:e4:89:0c:9b:25:80:23:52:2e:09:b9:
5d:d3:30:71:96:1b:21:c8:6b:b6:b3:81:37:7c:38:72:18:b2:
b4:29:8f:a4:64:71:14:c6:4c:bc:ff:05:1c:d7:19:99:53:a9:
97:73:bd:ba:0f:05:6d:b1:0d:5e:ee:34:81:d9:c9:5c:77:e9:
64:69:e1:03:f5:d9:35:19:17:32:25:c4:f0:77:85:f4:26:d7:
7e:3d:88:c9:a4:a2:b0:c1:d8:6b:30:f5:79:81:ba:b7:b6:c9:
09:cf:e1:eb:f6:61:d5:e9:eb:a1:bd:cd:71:f3:c2:48:b2:75:
8b:57:4d:a2:51:14:3b:95:2f:8e:e7:f8:d9:61:73:80:35:8f:
62:9e:20:81:13:59:51:44:f6:dc:87:2c:45:af:2f:4a:56:dc:
c6:d3:cc:dd:79:4b:6d:5b:df:88:02:3c:89:5c:5e:aa:df:3f:
81:94:3a:48:da:9e:0a:fe:cf:21:a6:54:af:87:3a:a3:33:d2:
31:e7:e1:c2:98:bb:ae:28:79:ac:c8:58:10:5a:dd:76:fb:ec:
cc:98:15:1e:0a:7e:6a:e9:9e:a3:23:d9:89:ba:7c:3b:73:f1:
d4:49:6d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:20 2023 by rpki-client on console-ams.rpki-client.org