Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/BtIMw7P5VBP12QSS6-3t1fX1Jbg.roa
File: BtIMw7P5VBP12QSS6-3t1fX1Jbg.roa (raw, json)
Hash identifier: C1mZOlZEXttqFWdgjSaPBWU8LEErLIBSFe2yT6bQRaA=
Subject key identifier: 06:D2:0C:C3:B3:F9:54:13:F5:D9:04:92:EB:ED:ED:D5:F5:F5:25:B8
Certificate issuer: /CN=00e4f6a77368b7cecfe67220b436576b1e008aec
Certificate serial: 01856F14C1042245A4E60DCC0DA0DF62FB31
Authority key identifier: 00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/BtIMw7P5VBP12QSS6-3t1fX1Jbg.roa
Signing time: Sun 01 Jan 2023 20:45:09 +0000
ROA not before: Sun 01 Jan 2023 20:45:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202422
IP address blocks: 95.85.76.0/24 maxlen: 24
92.223.102.0/24 maxlen: 24
80.93.209.0/24 maxlen: 24
80.93.210.0/24 maxlen: 24
5.188.36.0/24 maxlen: 24
80.93.219.0/24 maxlen: 24
80.93.218.0/24 maxlen: 24
80.93.214.0/24 maxlen: 24
80.93.215.0/24 maxlen: 24
80.93.217.0/24 maxlen: 24
80.93.223.0/24 maxlen: 24
92.38.148.0/24 maxlen: 24
92.38.155.0/24 maxlen: 24
92.38.173.0/24 maxlen: 24
5.188.148.0/24 maxlen: 24
92.38.186.0/23 maxlen: 24
92.38.181.0/24 maxlen: 24
92.38.186.0/24 maxlen: 24
92.38.180.0/24 maxlen: 24
5.8.24.0/24 maxlen: 24
78.111.105.0/24 maxlen: 24
78.111.99.0/24 maxlen: 24
78.111.102.0/24 maxlen: 24
78.111.101.0/24 maxlen: 24
103.215.218.0/24 maxlen: 24
217.195.193.0/24 maxlen: 24
92.38.187.0/24 maxlen: 24
5.188.169.0/24 maxlen: 24
5.188.168.0/24 maxlen: 24
5.188.190.0/24 maxlen: 24
146.185.236.0/24 maxlen: 24
146.185.237.0/24 maxlen: 24
37.9.33.0/24 maxlen: 24
37.9.32.0/24 maxlen: 24
146.185.248.0/24 maxlen: 24
217.195.205.0/24 maxlen: 24
146.185.216.0/24 maxlen: 24
146.185.217.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:c1:04:22:45:a4:e6:0d:cc:0d:a0:df:62:fb:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00e4f6a77368b7cecfe67220b436576b1e008aec
Validity
Not Before: Jan 1 20:45:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06d20cc3b3f95413f5d90492ebededd5f5f525b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:81:61:d6:74:c6:46:14:a1:3b:b2:00:7b:fd:
e7:10:8d:d8:b0:4e:e0:84:18:36:d3:6a:fb:c1:db:
47:31:d0:47:db:38:92:2b:35:b1:9b:a5:a2:e9:00:
dc:27:52:ec:50:08:1b:ec:41:bd:ab:e7:8a:38:32:
65:11:75:26:ff:7b:d3:8d:2e:be:21:72:37:83:2c:
7e:70:9a:62:b2:12:e1:c6:18:65:ed:7b:84:86:0f:
05:cc:b8:ab:3d:11:fe:d8:35:2a:00:d5:a1:81:8b:
61:63:9f:2e:02:97:a0:6e:62:71:4c:33:d0:32:91:
92:d5:4e:9c:85:f9:b1:b7:9b:64:84:e8:0b:82:71:
e2:63:09:18:54:18:72:ec:e6:3a:8c:4a:aa:39:8f:
44:cb:21:df:ee:a1:e8:95:4b:e2:85:df:11:a1:ad:
5c:fd:a2:57:d0:aa:49:4a:cf:84:5a:13:77:ca:95:
f4:59:9c:a5:02:dc:53:2e:2d:bc:4f:ba:10:93:a5:
9b:58:7a:15:a0:a9:8a:9b:a6:a9:7b:af:cd:87:ed:
64:31:d6:71:5a:2b:61:93:69:5f:e4:7b:0f:5c:a3:
47:7f:52:5f:ef:bc:c0:cb:0e:05:31:38:56:1f:f5:
37:bb:05:35:4a:96:02:4f:6a:cc:09:7b:6e:92:3d:
11:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D2:0C:C3:B3:F9:54:13:F5:D9:04:92:EB:ED:ED:D5:F5:F5:25:B8
X509v3 Authority Key Identifier:
keyid:00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/BtIMw7P5VBP12QSS6-3t1fX1Jbg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.24.0/24
5.188.36.0/24
5.188.148.0/24
5.188.168.0/23
5.188.190.0/24
37.9.32.0/23
78.111.99.0/24
78.111.101.0-78.111.102.255
78.111.105.0/24
80.93.209.0-80.93.210.255
80.93.214.0/23
80.93.217.0-80.93.219.255
80.93.223.0/24
92.38.148.0/24
92.38.155.0/24
92.38.173.0/24
92.38.180.0/23
92.38.186.0/23
92.223.102.0/24
95.85.76.0/24
103.215.218.0/24
146.185.216.0/23
146.185.236.0/23
146.185.248.0/24
217.195.193.0/24
217.195.205.0/24
Signature Algorithm: sha256WithRSAEncryption
f0:b5:6c:5a:c8:ae:3a:ee:08:cf:2a:cd:a8:2a:63:50:98:b9:
a6:81:0d:e7:02:2a:df:ff:ae:f8:88:e9:08:0c:54:20:64:69:
20:3b:40:fc:bb:be:55:47:3d:c7:f4:1b:5f:70:06:41:fd:7c:
30:47:c6:7c:bb:4b:47:a3:f1:fd:46:2c:b3:14:a9:cd:0d:d4:
fc:51:1c:34:95:cc:e6:eb:fa:4a:24:1a:f5:8a:cd:48:71:75:
b2:9b:21:f4:4d:90:29:1f:f8:09:f8:b1:e6:09:89:ea:ef:c3:
a8:da:a5:84:0e:20:b5:6a:13:48:70:49:73:43:ee:9b:8f:d8:
50:9c:b1:b3:3d:34:c6:1a:9f:a1:b3:db:1f:39:82:2f:20:6a:
b7:79:58:80:e8:6b:5c:48:d0:cb:ec:38:a9:61:51:c3:75:79:
95:6e:66:57:04:28:9f:22:10:68:a9:68:b3:ca:c6:ac:49:69:
17:34:1b:45:e3:07:f1:d2:fe:b8:1a:5b:b3:c2:35:00:3c:34:
b3:43:e8:d9:93:38:93:76:a6:5c:da:b2:2e:f7:76:30:76:32:
81:0d:67:cb:7f:1c:44:c2:02:8e:03:5c:4c:e6:f0:11:b5:4f:
c0:16:a0:97:cd:f8:88:cd:c8:49:fc:76:d3:26:a4:42:2d:a1:
f3:05:72:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:10 2023 by rpki-client on console-fra.rpki-client.org