Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/VXIvtbounMHvPK3Ac71rYSrFJHs.roa
File: VXIvtbounMHvPK3Ac71rYSrFJHs.roa (raw, json)
Hash identifier: Ixq35AphU3B7z3YNLmUn/i77HOiSoVq+k2MjLMWKn9k=
Subject key identifier: 55:72:2F:B5:BA:2E:9C:C1:EF:3C:AD:C0:73:BD:6B:61:2A:C5:24:7B
Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial: 018B9BC1DFC5887059EAC7DE476D024E97EA
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/VXIvtbounMHvPK3Ac71rYSrFJHs.roa
Signing time: Sat 04 Nov 2023 19:14:16 +0000
ROA not before: Sat 04 Nov 2023 19:14:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49223
IP address blocks: 185.145.232.0/24 maxlen: 24
188.244.118.0/24 maxlen: 24
193.104.183.0/24 maxlen: 24
37.140.240.0/24 maxlen: 24
62.204.33.0/24 maxlen: 24
95.130.228.0/24 maxlen: 24
194.32.105.0/24 maxlen: 24
83.138.49.0/24 maxlen: 24
193.163.124.0/24 maxlen: 24
213.109.158.0/24 maxlen: 24
91.247.186.0/24 maxlen: 24
5.181.54.0/24 maxlen: 24
176.126.126.0/24 maxlen: 24
89.248.64.0/24 maxlen: 24
193.228.228.0/24 maxlen: 24
185.201.253.0/24 maxlen: 24
46.18.106.0/24 maxlen: 24
194.156.78.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:9b:c1:df:c5:88:70:59:ea:c7:de:47:6d:02:4e:97:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Validity
Not Before: Nov 4 19:14:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=55722fb5ba2e9cc1ef3cadc073bd6b612ac5247b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:65:16:cc:f3:bb:ce:a1:af:11:83:98:2c:53:
fa:5f:ae:66:7e:71:48:aa:6a:9c:89:2f:fd:03:4b:
de:bf:29:07:29:07:1e:42:33:19:59:11:8a:9a:24:
0d:09:eb:cb:e6:67:40:41:e0:8a:d7:2f:27:98:27:
e7:9b:e2:99:e4:5b:1f:25:a4:9a:77:93:2f:35:02:
13:1c:95:e4:a5:b4:3c:03:71:66:6e:8d:1b:78:21:
ed:32:16:5d:5b:32:da:ac:2b:45:c9:48:90:ca:f2:
21:8d:07:85:5b:dd:b5:fd:e2:a4:45:57:a1:07:ff:
b3:2f:14:99:ce:56:ef:10:c8:18:3a:59:f5:a3:9d:
a0:71:82:f7:cb:43:1b:9b:0c:9c:99:43:12:d5:74:
0b:05:1f:79:04:17:8f:bf:53:cf:b9:fc:d1:10:a6:
b9:5f:34:b1:78:0c:ab:96:f6:10:9a:c5:96:4e:ff:
25:94:dc:19:ab:16:7a:68:9c:35:4c:06:ee:b6:30:
e8:bd:53:17:67:52:0c:83:e9:17:eb:83:f7:38:06:
ca:dc:04:65:c4:40:bc:5e:c0:19:0c:8a:82:0b:dc:
02:1e:ab:0c:2c:2f:c5:5b:1c:db:7a:2b:ac:79:ab:
c3:3e:3d:94:cf:8e:1c:81:c9:63:f0:9c:dc:66:1c:
9c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:72:2F:B5:BA:2E:9C:C1:EF:3C:AD:C0:73:BD:6B:61:2A:C5:24:7B
X509v3 Authority Key Identifier:
keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/VXIvtbounMHvPK3Ac71rYSrFJHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.54.0/24
37.140.240.0/24
46.18.106.0/24
62.204.33.0/24
83.138.49.0/24
89.248.64.0/24
91.247.186.0/24
95.130.228.0/24
176.126.126.0/24
185.145.232.0/24
185.201.253.0/24
188.244.118.0/24
193.104.183.0/24
193.163.124.0/24
193.228.228.0/24
194.32.105.0/24
194.156.78.0/24
213.109.158.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:a2:fa:07:a3:fc:2e:ad:0b:54:ff:d8:e2:31:77:8a:f6:c5:
fd:e6:57:d7:9d:6d:f3:6a:e8:65:db:d3:75:32:bb:fa:51:31:
43:6c:1a:a4:68:74:66:15:af:bf:3f:c8:75:6d:67:4d:b7:8f:
22:a4:d5:f2:77:cd:f4:48:4d:3b:4f:ad:b4:38:4a:cd:0c:b3:
52:b4:df:94:26:f6:6c:68:9d:e4:1a:77:fb:c5:35:7e:e5:36:
12:00:53:93:43:1d:7c:5a:3d:e3:ec:53:b7:4d:e6:d4:00:d1:
1a:8d:81:b8:31:94:5a:a3:53:09:b5:6d:0d:40:d3:54:06:1b:
41:12:ca:9d:5f:5f:27:84:39:a9:df:f0:61:26:f1:fa:dc:39:
84:5e:b7:a5:47:23:a6:07:77:74:cb:70:70:2e:67:10:ad:38:
db:bf:78:f9:a5:4e:87:14:a5:c8:aa:e9:ba:fb:a3:99:61:7e:
f9:d3:bb:6c:6c:b3:71:a9:e5:cf:8d:1d:81:56:fb:45:31:f4:
c4:ef:dc:39:b2:5c:71:5b:76:07:55:e2:51:d8:0c:db:1d:28:
bf:a6:95:ad:52:06:45:7b:5b:54:79:ac:0e:93:e4:0b:57:6b:
ac:bb:b5:b1:5a:5a:a7:12:8b:e5:ba:fe:81:89:3b:50:ca:58:
f4:e7:3d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 30 17:11:08 2023 by rpki-client on console-ams.rpki-client.org