Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/0a3a0f-60f8-4a1c-bba0-7b880c063367/1/BteguDwVlbw3fbgNGt1FKsoQLmQ.roa
File: BteguDwVlbw3fbgNGt1FKsoQLmQ.roa (raw, json)
Hash identifier: ahtTezHKfm3ztu4o5+z4M6jsfvTjY1KHgrk6hsR19zA=
Subject key identifier: 06:D7:A0:B8:3C:15:95:BC:37:7D:B8:0D:1A:DD:45:2A:CA:10:2E:64
Certificate issuer: /CN=3406d2c439ccbcb78a82d5cb2b4c3ff6e9934b96
Certificate serial: 01890DAAB27B5097402D03AF88C3A22FE4D8
Authority key identifier: 34:06:D2:C4:39:CC:BC:B7:8A:82:D5:CB:2B:4C:3F:F6:E9:93:4B:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAbSxDnMvLeKgtXLK0w_9umTS5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/0a3a0f-60f8-4a1c-bba0-7b880c063367/1/BteguDwVlbw3fbgNGt1FKsoQLmQ.roa
Signing time: Fri 30 Jun 2023 18:57:17 +0000
ROA not before: Fri 30 Jun 2023 18:57:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213122
IP address blocks: 45.130.152.0/24 maxlen: 24
45.130.153.0/24 maxlen: 24
45.130.154.0/24 maxlen: 24
45.130.155.0/24 maxlen: 24
89.36.230.0/24 maxlen: 24
45.87.62.0/24 maxlen: 24
45.87.63.0/24 maxlen: 24
45.87.60.0/24 maxlen: 24
45.87.61.0/24 maxlen: 24
89.37.100.0/24 maxlen: 24
188.210.236.0/24 maxlen: 24
5.252.166.0/24 maxlen: 24
5.252.164.0/24 maxlen: 24
5.252.165.0/24 maxlen: 24
5.252.167.0/24 maxlen: 24
103.202.53.0/24 maxlen: 24
103.202.54.0/24 maxlen: 24
89.46.43.0/24 maxlen: 24
103.104.251.0/24 maxlen: 24
103.104.248.0/24 maxlen: 24
103.104.249.0/24 maxlen: 24
103.104.250.0/24 maxlen: 24
185.162.74.0/24 maxlen: 24
185.162.75.0/24 maxlen: 24
2a0e:f380::/32 maxlen: 32
2a0e:f380:ffff::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:0d:aa:b2:7b:50:97:40:2d:03:af:88:c3:a2:2f:e4:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3406d2c439ccbcb78a82d5cb2b4c3ff6e9934b96
Validity
Not Before: Jun 30 18:57:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06d7a0b83c1595bc377db80d1add452aca102e64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:3b:d1:7a:ae:30:4c:f3:b0:d0:f7:8a:0b:9b:
76:ff:11:fe:23:a9:1d:d1:3e:bf:11:8c:c7:cc:6b:
ec:ce:c9:dd:5d:31:2c:99:87:bf:fa:8f:cb:ec:14:
a4:c9:37:dc:8d:bb:76:62:3b:f9:b8:f1:00:b1:2f:
b5:d3:9f:45:27:13:7b:94:fe:26:80:7a:0c:65:c9:
67:f9:71:90:f6:47:3b:60:fd:c6:59:d2:03:15:58:
f1:e0:47:d0:0f:3b:78:ab:3d:f3:c8:4c:fc:d9:1f:
06:fc:5a:c2:dd:34:8b:14:1f:7f:8b:de:ee:be:80:
76:12:07:02:14:03:2c:cc:77:8d:46:89:bb:7e:7d:
ac:83:af:b9:35:59:b7:4f:81:71:9c:a8:c7:4f:28:
d4:1b:a9:0e:dd:95:f7:5f:01:42:f9:bb:bb:d9:9e:
06:68:ec:19:d8:59:6a:d0:a8:1e:65:f7:0f:e0:3a:
eb:14:7e:43:24:ae:1b:c3:1c:26:fa:b3:65:5e:7c:
fc:81:ad:f2:75:8b:07:73:e6:24:cf:be:04:7a:67:
e6:1d:a0:27:23:32:bf:3c:cb:ed:a8:a6:d8:ab:37:
78:52:3a:b1:0a:77:e2:df:e2:94:3d:f1:6f:f2:17:
1f:fe:e6:b3:00:13:01:dd:2d:ab:1c:75:32:66:5d:
40:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D7:A0:B8:3C:15:95:BC:37:7D:B8:0D:1A:DD:45:2A:CA:10:2E:64
X509v3 Authority Key Identifier:
keyid:34:06:D2:C4:39:CC:BC:B7:8A:82:D5:CB:2B:4C:3F:F6:E9:93:4B:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAbSxDnMvLeKgtXLK0w_9umTS5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/0a3a0f-60f8-4a1c-bba0-7b880c063367/1/BteguDwVlbw3fbgNGt1FKsoQLmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/0a3a0f-60f8-4a1c-bba0-7b880c063367/1/NAbSxDnMvLeKgtXLK0w_9umTS5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.164.0/22
45.87.60.0/22
45.130.152.0/22
89.36.230.0/24
89.37.100.0/24
89.46.43.0/24
103.104.248.0/22
103.202.53.0-103.202.54.255
185.162.74.0/23
188.210.236.0/24
IPv6:
2a0e:f380::/32
Signature Algorithm: sha256WithRSAEncryption
27:6e:1e:77:51:bf:eb:6a:52:8a:ff:c2:2c:31:04:bf:23:b5:
10:85:4b:3a:5d:f3:6a:76:5b:c8:9b:e9:7e:69:fa:e6:47:0f:
f6:28:9d:81:4a:12:2e:a3:10:55:43:43:9c:e4:48:a9:a8:04:
39:b2:15:22:80:cc:e4:12:56:14:7c:ff:d5:a5:bc:42:2d:cd:
20:04:24:d3:6c:8f:88:85:50:2d:c7:c1:a8:1e:9e:d2:bd:5a:
a8:7e:a3:c5:ba:81:71:7d:f7:85:32:fc:9f:99:b6:ad:0d:af:
6f:c1:07:02:c7:18:28:00:b8:98:94:c2:c8:2f:3d:54:21:6c:
4b:e0:f7:cd:1a:fb:68:22:17:8a:28:d6:9c:4d:25:4a:2a:a7:
ac:35:5e:85:fc:93:67:c0:26:3b:36:f1:d1:2e:11:89:60:48:
ee:f8:50:34:ca:9e:37:0e:f7:3c:8e:39:af:ec:4e:d0:4e:01:
56:e7:d6:78:1f:ac:33:4b:67:b7:47:2b:dd:fc:d9:de:6b:45:
42:a7:31:38:d3:ce:aa:75:71:94:36:ba:13:60:ce:64:57:6a:
61:5d:39:74:13:75:f4:65:00:4a:14:d0:4c:d7:32:39:3f:27:
0a:f7:d5:72:b2:69:9c:15:68:12:cf:ae:98:c4:fc:0e:e9:72:
bd:76:bd:94
-----BEGIN CERTIFICATE-----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Generated at Sat Dec 2 18:18:50 2023 by rpki-client on console-ams.rpki-client.org