Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/r_68GTfF_1c25r2DbU1XlM3GXiY.roa
File: r_68GTfF_1c25r2DbU1XlM3GXiY.roa (raw, json)
Hash identifier: IwQVjjnsdhe8OW6QNPi+9yL0moczYitKCFTbp1aYV4c=
Subject key identifier: AF:FE:BC:19:37:C5:FF:57:36:E6:BD:83:6D:4D:57:94:CD:C6:5E:26
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 018C0CB50E7EA4190685D5BB7E29643CAF1B
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/r_68GTfF_1c25r2DbU1XlM3GXiY.roa
Signing time: Sun 26 Nov 2023 17:37:21 +0000
ROA not before: Sun 26 Nov 2023 17:37:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30938
IP address blocks: 45.12.216.0/24 maxlen: 24
45.12.217.0/24 maxlen: 24
45.12.219.0/24 maxlen: 24
5.39.248.0/24 maxlen: 24
5.39.251.0/24 maxlen: 24
5.39.252.0/24 maxlen: 24
5.39.250.0/24 maxlen: 24
5.39.253.0/24 maxlen: 24
185.5.36.0/22 maxlen: 22
31.192.240.0/21 maxlen: 21
5.178.98.0/24 maxlen: 24
5.178.97.0/24 maxlen: 24
5.178.96.0/24 maxlen: 24
5.178.99.0/24 maxlen: 24
5.178.100.0/24 maxlen: 24
5.178.105.0/24 maxlen: 24
5.178.104.0/24 maxlen: 24
5.178.106.0/24 maxlen: 24
5.178.109.0/24 maxlen: 24
5.178.108.0/24 maxlen: 24
5.39.254.0/24 maxlen: 24
5.39.255.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:0c:b5:0e:7e:a4:19:06:85:d5:bb:7e:29:64:3c:af:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Nov 26 17:37:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=affebc1937c5ff5736e6bd836d4d5794cdc65e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:fd:ce:20:3a:d7:c0:21:40:16:fe:b6:4d:1f:
67:eb:74:eb:2d:8b:f4:d0:ce:21:3a:6d:7e:d6:86:
04:db:ec:07:19:43:08:95:e2:53:bc:b4:1f:82:6a:
3a:b5:72:97:22:96:12:49:b2:36:bd:bc:d3:e1:3d:
f8:53:b5:19:d5:c2:89:28:94:c1:a1:90:50:75:52:
25:59:35:44:ee:cf:38:94:e4:7c:a3:ad:58:7e:95:
a1:6a:fc:e1:5f:28:cf:b8:bd:b7:8b:10:47:8f:21:
d7:8b:cb:12:27:85:8b:6f:f3:44:c8:6c:a6:a7:51:
32:96:e0:fe:d6:bd:a3:77:e2:94:98:10:d2:88:9b:
52:60:c5:5e:46:29:32:5d:b3:36:1d:7b:70:99:a0:
e6:6c:be:ff:9c:a8:5e:16:df:f3:aa:63:4d:e2:92:
84:90:2d:7f:4b:4d:8e:cc:23:81:0b:da:66:95:ec:
28:96:90:bf:ed:61:c7:cc:a5:3e:5a:e6:ed:ff:2c:
ab:97:87:e0:b8:13:6a:42:38:2c:df:b6:5e:0c:c1:
b7:35:ba:a5:f7:5a:1d:13:1e:a1:69:85:91:1a:91:
4c:8d:93:25:5e:76:05:7a:25:ef:ce:08:67:54:d9:
f1:9d:33:c2:ef:60:ac:25:4d:18:82:99:5e:21:1a:
6d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:FE:BC:19:37:C5:FF:57:36:E6:BD:83:6D:4D:57:94:CD:C6:5E:26
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/r_68GTfF_1c25r2DbU1XlM3GXiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.39.248.0/24
5.39.250.0-5.39.255.255
5.178.96.0-5.178.100.255
5.178.104.0-5.178.106.255
5.178.108.0/23
31.192.240.0/21
45.12.216.0/23
45.12.219.0/24
185.5.36.0/22
Signature Algorithm: sha256WithRSAEncryption
44:fe:be:8e:16:3d:a1:9a:e3:d5:7a:03:78:79:c1:fe:da:4d:
c9:cd:1c:ab:9e:cd:bd:03:e6:7a:7f:32:5a:81:f1:9d:5b:5a:
7a:b3:8a:97:31:3b:10:c9:eb:4a:21:02:5c:85:a0:8b:29:4f:
76:70:a7:1c:6b:f2:93:59:7f:33:ff:4f:4d:ca:5b:15:c1:37:
64:a8:eb:86:16:ff:e5:7b:ce:04:5f:25:ec:5a:aa:4b:a7:8d:
65:0b:0a:dd:0a:a9:34:39:04:05:70:76:b0:37:30:eb:bb:47:
43:04:50:ac:d9:04:80:b1:a6:20:ff:b1:0f:b0:96:76:05:74:
65:50:b3:44:70:8a:6e:69:dc:54:4b:fc:e5:6c:0b:f5:09:e3:
6a:25:b8:3f:b5:2d:56:19:a1:a5:1c:d9:f1:54:9b:2b:9b:a3:
a6:9e:56:5c:0e:4c:6c:68:cd:a4:2f:1c:06:2f:48:08:99:1d:
15:fe:25:53:fc:0b:50:fc:08:39:65:ff:ec:e4:0f:a7:d6:bc:
8a:5b:94:a2:55:e6:18:87:35:15:f1:bf:95:01:56:e9:bd:2a:
61:01:2d:52:e6:05:81:82:9c:da:f1:28:e0:5b:c8:cf:7a:70:
dd:d6:df:d6:49:a6:a3:a7:4e:cf:f5:a9:1c:c8:ff:bb:bc:f8:
ad:e5:d7:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 28 11:47:17 2023 by rpki-client on console-ams.rpki-client.org