Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/lWM5Op8DCSY91UTIC2aEX0sMKTw.roa
File: lWM5Op8DCSY91UTIC2aEX0sMKTw.roa (raw, json)
Hash identifier: 5iWdUt8Go+XY/1i2I4V+gUY3FhNOyQ1TiKPBZ6kJSMo=
Subject key identifier: 95:63:39:3A:9F:03:09:26:3D:D5:44:C8:0B:66:84:5F:4B:0C:29:3C
Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial: 018B8F781F8377114DA2B9B34226185DD67F
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/lWM5Op8DCSY91UTIC2aEX0sMKTw.roa
Signing time: Thu 02 Nov 2023 09:58:16 +0000
ROA not before: Thu 02 Nov 2023 09:58:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42303
IP address blocks: 185.55.8.0/22 maxlen: 22
5.35.184.0/21 maxlen: 21
46.182.200.0/24 maxlen: 24
46.182.204.0/24 maxlen: 24
46.182.203.0/24 maxlen: 24
46.182.202.0/24 maxlen: 24
46.182.201.0/24 maxlen: 24
46.182.206.0/24 maxlen: 24
46.182.205.0/24 maxlen: 24
151.236.200.0/21 maxlen: 24
193.149.178.0/24 maxlen: 24
77.72.96.0/21 maxlen: 21
94.127.32.0/21 maxlen: 21
185.153.212.0/22 maxlen: 24
2a02:470::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8f:78:1f:83:77:11:4d:a2:b9:b3:42:26:18:5d:d6:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Validity
Not Before: Nov 2 09:58:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9563393a9f0309263dd544c80b66845f4b0c293c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:41:44:8f:50:7f:82:d6:dd:08:47:5e:78:09:
71:37:48:e2:fa:1c:52:72:90:68:84:c7:cf:ec:5b:
a0:3d:a4:b2:d7:2b:b6:dd:15:dd:2a:65:f2:0b:05:
db:b5:67:92:64:20:5f:1a:9e:b1:97:d0:23:8b:59:
35:8e:ac:f9:d9:19:0e:12:8e:68:93:b6:4d:58:52:
af:d6:1a:ea:fd:2e:d8:8f:8c:dd:f7:4a:b4:dd:30:
f1:95:25:cc:1a:13:ab:73:30:7f:6b:42:70:65:21:
5b:02:7c:a9:db:02:c4:a1:30:f0:23:17:02:1e:63:
a0:de:4d:aa:bf:c1:a2:d4:01:e3:ce:7d:fc:b2:64:
df:c6:d8:93:af:2f:ce:6f:a8:0a:53:a8:1e:64:eb:
07:92:a5:4c:5a:1d:f1:14:f3:f0:37:2c:fb:49:96:
e4:85:0c:43:03:00:ab:4f:94:fc:06:2a:75:aa:e9:
5a:7a:2a:b9:fa:d9:5d:66:77:21:e7:9a:94:cf:88:
5c:8a:ce:3d:56:0a:84:0c:1f:6e:70:7e:09:3d:de:
de:44:76:3e:36:39:33:d5:22:c5:00:b5:f0:19:a7:
71:a8:e9:7b:48:d7:66:e7:34:47:32:11:67:5b:37:
4b:7d:68:a0:cf:30:59:79:50:a4:d7:72:64:45:37:
f9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:63:39:3A:9F:03:09:26:3D:D5:44:C8:0B:66:84:5F:4B:0C:29:3C
X509v3 Authority Key Identifier:
keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/lWM5Op8DCSY91UTIC2aEX0sMKTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.184.0/21
46.182.200.0-46.182.206.255
77.72.96.0/21
94.127.32.0/21
151.236.200.0/21
185.55.8.0/22
185.153.212.0/22
193.149.178.0/24
IPv6:
2a02:470::/32
Signature Algorithm: sha256WithRSAEncryption
a0:93:3d:37:b8:8e:9e:da:12:1d:94:91:4d:b6:4d:e4:a7:c9:
86:bb:8f:b4:0e:b5:a4:51:ee:ef:0c:55:b8:c7:af:05:49:86:
40:82:2d:b0:a2:90:48:c6:ac:b5:d2:2e:e8:7a:c5:76:6a:32:
1c:dd:85:4b:9f:21:e5:5f:7d:aa:0e:2b:18:7a:99:f4:9e:15:
aa:bc:7e:65:4e:0e:3e:69:36:bc:1d:d9:f9:bf:bb:25:b8:fd:
e1:d5:0d:a5:8f:24:31:e4:c6:15:4d:b8:eb:d1:de:01:a7:81:
11:60:91:04:59:63:bf:d7:61:d2:be:c7:30:51:41:64:2d:ae:
36:a0:99:91:19:ef:8c:cf:da:f7:ab:a6:cc:15:b9:d7:06:ad:
97:95:c7:1b:d9:e1:1f:9a:a9:9b:37:4b:d9:66:3f:9c:20:73:
90:ff:46:d7:80:69:f1:80:f6:09:2f:7e:56:b2:08:f7:3b:6b:
38:d0:b4:f4:bd:3d:38:7a:14:1a:96:7e:6a:2b:16:d8:70:39:
9a:d9:c4:24:a0:42:11:26:c2:30:f2:16:60:f4:b1:b3:d8:e1:
97:6b:20:e5:8d:6f:c7:5c:d2:1d:58:14:a7:f8:a7:b9:d7:e3:
e7:0e:d7:2f:10:53:a2:a4:a1:0d:e0:6b:4f:fd:44:0c:49:13:
b8:b2:79:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:09:36 2024 by rpki-client on console-ams.rpki-client.org