Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/S4tzMZvJ8ZP04x89xuKvuhOrMLc.roa
File: S4tzMZvJ8ZP04x89xuKvuhOrMLc.roa (raw, json)
Hash identifier: 2pGYsKGt38AQtYhpFCeOJSO49wKa4i7+jqGmCJd4X20=
Subject key identifier: 4B:8B:73:31:9B:C9:F1:93:F4:E3:1F:3D:C6:E2:AF:BA:13:AB:30:B7
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01857827F34041872EDA95976F0A6E3FBBE4
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/S4tzMZvJ8ZP04x89xuKvuhOrMLc.roa
Signing time: Tue 03 Jan 2023 15:02:42 +0000
ROA not before: Tue 03 Jan 2023 15:02:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 45.13.190.0/24 maxlen: 24
5.181.84.0/24 maxlen: 24
5.181.85.0/24 maxlen: 24
45.151.3.0/24 maxlen: 24
5.181.87.0/24 maxlen: 24
195.211.188.0/22 maxlen: 24
45.88.136.0/23 maxlen: 24
85.209.122.0/23 maxlen: 24
194.242.97.0/24 maxlen: 24
45.144.212.0/24 maxlen: 24
45.132.181.0/24 maxlen: 24
45.132.182.0/23 maxlen: 24
195.177.92.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
45.81.112.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:78:27:f3:40:41:87:2e:da:95:97:6f:0a:6e:3f:bb:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 3 15:02:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4b8b73319bc9f193f4e31f3dc6e2afba13ab30b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:83:51:7d:17:52:ac:5e:7c:3b:24:70:46:64:
bc:d4:5d:45:be:4a:b4:54:4b:02:b6:ab:8c:03:bd:
96:08:91:7c:90:15:ee:b7:af:b5:9a:9d:9d:1f:b2:
be:ce:01:77:15:b0:11:2c:e1:de:ed:aa:76:37:36:
51:66:57:8b:62:2b:f2:ef:d2:28:cb:33:94:40:97:
89:18:9a:8e:0e:fa:55:43:e5:09:26:14:02:4a:cf:
67:f9:d0:58:32:29:72:7c:f9:89:86:5f:85:8b:73:
8c:8b:05:fa:89:a0:01:16:57:a5:8f:6c:90:6f:b3:
e1:f0:40:5b:93:34:9c:e8:dc:56:50:f5:12:1c:43:
eb:97:c8:57:07:d6:00:56:c7:52:1e:cb:b4:ad:16:
cb:e9:02:21:4a:f0:10:d0:4d:cc:43:91:2a:06:8a:
91:cd:90:89:83:2b:64:0a:2b:bd:4c:2b:ea:8b:12:
83:a5:ba:f3:fb:99:fe:66:c5:83:99:f5:9f:e6:c7:
c6:0d:b9:d6:7d:ce:b6:f3:d3:98:9d:24:0d:85:b6:
bb:f9:c0:bb:79:1a:08:e1:d4:98:6d:5a:02:83:46:
c2:eb:a5:3a:7b:0c:fc:c8:41:bf:87:aa:25:6c:fa:
b5:a6:1e:06:39:1e:31:69:9e:17:43:52:d0:04:d1:
cc:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:8B:73:31:9B:C9:F1:93:F4:E3:1F:3D:C6:E2:AF:BA:13:AB:30:B7
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/S4tzMZvJ8ZP04x89xuKvuhOrMLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.84.0/23
5.181.87.0/24
45.13.190.0/24
45.81.112.0/22
45.88.136.0/23
45.132.181.0-45.132.183.255
45.144.212.0/24
45.151.3.0/24
85.209.122.0/23
194.242.97.0/24
195.177.92.0/23
195.211.188.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:a8:7b:78:e6:3e:4f:2b:f4:af:ec:fd:ab:7e:77:6c:70:e3:
b2:8e:18:de:1a:b3:82:f4:48:a9:48:50:fd:2e:df:a2:d4:a1:
58:71:1a:55:9f:c6:9f:01:1e:e6:c8:54:43:97:1b:ee:09:7e:
69:7a:87:90:7d:fc:53:a9:f9:7b:42:28:bc:db:93:eb:b0:bd:
a9:7e:84:43:b4:2c:61:e3:0b:32:c6:73:82:67:6b:e6:a3:da:
30:87:67:6d:f7:5b:04:64:77:54:d2:a5:89:f4:a9:67:8e:49:
2c:28:50:7b:13:87:01:9d:5e:d1:b8:4c:dd:d8:f5:5f:0c:6a:
9d:53:84:69:f2:30:2b:30:03:ca:61:2e:25:3a:ab:5a:31:2f:
4e:69:b9:e7:85:e8:57:4b:23:85:35:2c:4c:22:fa:0c:b2:a1:
b1:0c:cd:0f:d9:01:54:6c:41:24:35:47:19:5e:03:ee:0d:69:
02:2c:8e:84:83:56:90:2f:77:13:5a:86:70:ea:41:04:f7:ce:
7b:33:dd:96:15:f2:95:22:15:e6:73:ce:6a:fb:e5:28:1a:7a:
11:cd:bd:c6:0e:1c:c8:e8:40:8c:85:0c:0d:0e:74:b1:e6:f6:
3f:22:aa:c3:ce:92:74:1c:06:4e:e6:89:d2:1d:8b:31:64:eb:
18:f5:08:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:20 2023 by rpki-client on console-ams.rpki-client.org