Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/5GPOP3CFtOooyV3UE9IDPF_nUho.roa
File: 5GPOP3CFtOooyV3UE9IDPF_nUho.roa (raw, json)
Hash identifier: XqO3C+mCCbwCH7bkkE/yXr+3FyQDYkX/9zRVZT7XQa4=
Subject key identifier: E4:63:CE:3F:70:85:B4:EA:28:C9:5D:D4:13:D2:03:3C:5F:E7:52:1A
Certificate issuer: /CN=4a4ad03a0f592bb9c97c3052a690125d846415a4
Certificate serial: 01879391DDF0834ACC4940F65E990FDCBA62
Authority key identifier: 4A:4A:D0:3A:0F:59:2B:B9:C9:7C:30:52:A6:90:12:5D:84:64:15:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SkrQOg9ZK7nJfDBSppASXYRkFaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/5GPOP3CFtOooyV3UE9IDPF_nUho.roa
Signing time: Tue 18 Apr 2023 08:53:42 +0000
ROA not before: Tue 18 Apr 2023 08:53:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58293
IP address blocks: 185.195.48.0/24 maxlen: 24
185.195.50.0/24 maxlen: 24
185.195.49.0/24 maxlen: 24
185.195.51.0/24 maxlen: 24
45.11.201.0/24 maxlen: 24
45.81.100.0/22 maxlen: 24
2a07:a5c0::/36 maxlen: 36
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:93:91:dd:f0:83:4a:cc:49:40:f6:5e:99:0f:dc:ba:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4ad03a0f592bb9c97c3052a690125d846415a4
Validity
Not Before: Apr 18 08:53:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e463ce3f7085b4ea28c95dd413d2033c5fe7521a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:58:0d:cf:7f:e5:92:53:c9:14:45:71:43:83:
67:92:a4:0d:37:7b:09:cf:ef:f5:c1:b6:cc:a4:b6:
0a:18:04:49:2b:6e:49:c1:26:40:9f:78:85:f3:42:
17:a5:9f:72:0b:af:b1:7a:0f:2b:cd:cb:46:03:d0:
e4:c3:84:e9:b3:1e:29:78:94:70:aa:40:18:c9:64:
25:b0:c9:b1:0e:62:52:af:90:14:fc:3e:23:e7:4d:
01:5e:6d:1a:03:eb:df:58:3e:26:a8:b2:46:cb:5e:
8a:b1:4d:0a:e4:25:7b:28:cd:33:bb:27:2a:d1:40:
d6:e1:48:fd:74:65:f8:ea:e7:d9:aa:58:79:cf:1b:
ac:e0:bd:5a:07:96:fe:56:5c:e2:d0:02:ea:f3:1e:
d1:47:6f:55:43:4b:ec:22:e2:2a:f2:90:a4:0c:83:
37:18:6d:aa:d8:1a:27:fa:87:18:84:d0:8c:6d:68:
7c:f7:3e:96:6e:59:d1:22:44:72:af:a8:32:8e:c9:
65:3f:1d:71:c8:c5:9d:b4:a8:19:6a:a2:c8:f6:e7:
04:f8:5f:4b:16:07:e8:67:31:30:f4:56:19:8d:f3:
81:73:dc:8c:0c:e5:b4:54:8e:09:1f:00:36:80:8c:
70:84:2c:93:7d:ac:2e:ba:dc:b3:9f:5c:6f:cc:2a:
00:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:63:CE:3F:70:85:B4:EA:28:C9:5D:D4:13:D2:03:3C:5F:E7:52:1A
X509v3 Authority Key Identifier:
keyid:4A:4A:D0:3A:0F:59:2B:B9:C9:7C:30:52:A6:90:12:5D:84:64:15:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkrQOg9ZK7nJfDBSppASXYRkFaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/5GPOP3CFtOooyV3UE9IDPF_nUho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.201.0/24
45.81.100.0/22
185.195.48.0/22
IPv6:
2a07:a5c0::/36
Signature Algorithm: sha256WithRSAEncryption
78:ed:ef:14:a7:22:af:cc:af:7b:77:cc:c9:b7:b5:6c:32:f6:
dc:35:96:0f:af:f5:9f:96:40:fe:82:df:96:ab:b1:40:f1:c8:
f3:66:d5:48:a1:35:4c:dd:10:17:d0:b8:1d:c0:25:cd:44:6e:
dd:17:d6:4c:c4:d9:22:e0:72:19:a0:21:cf:23:fd:e2:f7:82:
3e:3c:87:dc:9a:ec:c3:21:fb:82:ea:da:dc:59:d9:0d:60:2c:
2a:a2:a5:a7:34:ed:70:cb:b4:bd:6a:0c:e2:55:28:dd:1f:15:
83:71:fb:86:f4:fa:49:bc:87:aa:77:8c:39:e1:86:45:87:a7:
1b:ac:9d:22:7f:0e:21:7f:cf:ba:bd:a4:f7:bf:7f:ea:46:ea:
38:33:7f:5f:69:76:5c:e4:a3:ac:80:a4:19:ee:24:0b:47:a9:
5c:e7:54:b9:0c:c9:c6:30:a6:9a:b1:27:08:7d:58:87:78:e2:
fb:33:12:ac:b5:07:db:21:b7:5c:41:d8:6e:4f:a2:04:cb:82:
92:41:2a:99:e5:7b:4d:92:c8:b8:30:9c:b3:d7:f0:05:62:63:
10:f3:0a:ed:3d:b5:87:21:56:bf:f0:df:8f:ca:35:56:38:14:
13:6b:50:b9:8c:03:a4:e7:9b:9a:34:93:41:be:b2:0a:e7:f6:
a5:dc:76:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 17 08:33:51 2023 by rpki-client on console-ams.rpki-client.org