Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/sLSnMCz0MEZkXUjKlUs42aOSKko.roa
File: sLSnMCz0MEZkXUjKlUs42aOSKko.roa (raw, json)
Hash identifier: 6EVRPWbUQEhoDc1VWgDDxajF26di3QW2zeroYgDSg0E=
Subject key identifier: B0:B4:A7:30:2C:F4:30:46:64:5D:48:CA:95:4B:38:D9:A3:92:2A:4A
Certificate issuer: /CN=586936266e980dd203b2cbeb1c9c4570604b911b
Certificate serial: 01859A82744B3A3B4DCA26FF1567E9ABB686
Authority key identifier: 58:69:36:26:6E:98:0D:D2:03:B2:CB:EB:1C:9C:45:70:60:4B:91:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/sLSnMCz0MEZkXUjKlUs42aOSKko.roa
Signing time: Tue 10 Jan 2023 07:08:38 +0000
ROA not before: Tue 10 Jan 2023 07:08:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57768
IP address blocks: 185.46.177.0/24 maxlen: 24
185.46.176.0/22 maxlen: 22
185.46.176.0/24 maxlen: 24
185.46.179.0/24 maxlen: 24
185.46.178.0/24 maxlen: 24
5.187.8.0/21 maxlen: 21
5.187.10.0/24 maxlen: 24
5.187.9.0/24 maxlen: 24
5.187.11.0/24 maxlen: 24
5.187.13.0/24 maxlen: 24
5.187.15.0/24 maxlen: 24
5.187.14.0/24 maxlen: 24
5.187.12.0/24 maxlen: 24
37.75.131.0/24 maxlen: 24
37.75.132.0/24 maxlen: 24
37.75.128.0/24 maxlen: 24
37.75.128.0/21 maxlen: 21
37.75.130.0/24 maxlen: 24
37.75.129.0/24 maxlen: 24
37.75.135.0/24 maxlen: 24
37.75.134.0/24 maxlen: 24
37.75.133.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9a:82:74:4b:3a:3b:4d:ca:26:ff:15:67:e9:ab:b6:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=586936266e980dd203b2cbeb1c9c4570604b911b
Validity
Not Before: Jan 10 07:08:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b0b4a7302cf43046645d48ca954b38d9a3922a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ff:ac:64:78:85:ed:68:65:3c:99:fa:39:06:
f8:46:c1:d6:1b:f9:bb:28:b7:b4:74:d2:32:3b:14:
03:48:35:35:b5:aa:7f:70:2b:cf:49:af:da:f4:13:
42:b4:11:55:5d:d9:12:89:af:ec:4e:10:6c:ce:b2:
a9:41:02:90:a1:84:3b:67:1f:d9:2a:28:c2:c5:10:
ad:ea:4e:a8:41:3b:55:f7:e3:04:df:eb:57:d2:fa:
15:70:ee:0d:0e:14:70:c6:72:a3:5e:50:7a:88:cc:
85:03:07:d9:b4:e6:e9:f7:d0:43:cd:67:e0:b6:01:
dc:17:5c:4c:3e:b2:29:f1:f8:fc:c4:89:a5:93:9d:
50:a8:a3:65:b4:1d:d6:03:0e:9a:3c:84:67:29:b4:
02:c8:36:f5:f0:f5:d7:a4:34:81:dd:ac:ea:1e:b0:
e6:c4:f1:c9:5a:50:98:21:31:70:81:a4:c3:70:93:
40:61:f2:04:a8:93:17:7c:88:5a:5c:ce:4a:c4:1d:
c6:4e:9d:d6:12:62:30:1b:8f:7f:dd:cd:9c:73:f0:
d4:f9:47:c5:fc:d3:4b:c7:6f:f3:2c:91:14:06:7f:
ba:89:56:66:97:16:c8:3f:e5:9f:3b:82:70:67:f4:
34:b8:8a:1c:fe:f1:3f:eb:b9:a1:5f:a3:23:29:a4:
13:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B4:A7:30:2C:F4:30:46:64:5D:48:CA:95:4B:38:D9:A3:92:2A:4A
X509v3 Authority Key Identifier:
keyid:58:69:36:26:6E:98:0D:D2:03:B2:CB:EB:1C:9C:45:70:60:4B:91:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/sLSnMCz0MEZkXUjKlUs42aOSKko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.187.8.0/21
37.75.128.0/21
185.46.176.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:82:ff:75:4c:49:24:f1:5f:f8:c0:70:69:7c:58:7f:05:12:
d0:fe:31:1d:77:81:08:80:0a:61:bd:a3:2c:c3:b5:59:b8:e2:
ec:c5:fe:16:1e:c0:4b:35:92:16:e7:90:e5:db:f0:1d:48:27:
5f:26:e3:1e:56:a4:c1:b8:eb:2e:67:dd:7f:1b:2a:6e:39:a0:
55:ab:b4:35:7f:90:30:94:9d:6c:b9:16:2c:b9:b5:a6:14:20:
9e:83:27:d2:2c:90:6a:34:2d:51:62:f5:84:5f:d6:a9:ef:82:
f4:1c:97:6b:f6:e1:8c:9c:f0:66:ae:50:2e:e5:4d:8e:85:e9:
47:83:4a:ed:cb:49:da:4d:74:c9:24:36:de:f0:bb:1f:ce:94:
86:05:19:4f:48:23:d9:76:38:29:1c:60:ab:96:69:70:ee:28:
f4:c2:39:23:0a:eb:8b:37:78:da:75:ff:89:2f:3e:4d:a7:df:
7f:a0:b2:c5:0b:6f:4b:15:e9:a9:80:fe:84:05:2a:2b:d5:0a:
15:eb:6d:96:9c:43:42:8a:ca:f8:e4:48:b8:87:e7:34:83:6a:
3a:ff:59:96:be:76:35:16:5b:ab:64:d7:b2:78:29:93:b9:ac:
a7:b1:c6:7b:9e:2b:6b:f0:e7:c5:bb:b5:1c:41:a0:b0:ca:c2:
f1:cd:18:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:38 2023 by rpki-client on console-fra.rpki-client.org