Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/1JkN_gZ0eMScjhRlXdiYc9YIbWs.roa
File: 1JkN_gZ0eMScjhRlXdiYc9YIbWs.roa (raw, json)
Hash identifier: DZjgAjhcM6KD8IPm8y8Axbyk0mR4twOALYnf1rRjxDk=
Subject key identifier: D4:99:0D:FE:06:74:78:C4:9C:8E:14:65:5D:D8:98:73:D6:08:6D:6B
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 018BAEA73C73D3312875315AD5D59B389CA1
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/1JkN_gZ0eMScjhRlXdiYc9YIbWs.roa
Signing time: Wed 08 Nov 2023 11:17:57 +0000
ROA not before: Wed 08 Nov 2023 11:17:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200845
IP address blocks: 194.31.104.0/22 maxlen: 22
185.28.51.0/24 maxlen: 24
45.152.140.0/22 maxlen: 22
185.231.186.0/24 maxlen: 24
185.231.187.0/24 maxlen: 24
31.15.4.0/24 maxlen: 24
31.15.0.0/22 maxlen: 22
31.15.7.0/24 maxlen: 24
31.15.6.0/24 maxlen: 24
31.15.5.0/24 maxlen: 24
45.155.56.0/22 maxlen: 22
89.190.152.0/24 maxlen: 24
185.225.244.0/22 maxlen: 22
89.190.152.0/22 maxlen: 22
185.225.246.0/24 maxlen: 24
185.225.245.0/24 maxlen: 24
185.225.244.0/24 maxlen: 24
89.190.154.0/24 maxlen: 24
89.190.153.0/24 maxlen: 24
89.190.155.0/24 maxlen: 24
185.225.247.0/24 maxlen: 24
185.246.12.0/23 maxlen: 23
185.246.15.0/24 maxlen: 24
185.246.14.0/24 maxlen: 24
185.246.13.0/24 maxlen: 24
185.246.12.0/24 maxlen: 24
45.133.60.0/22 maxlen: 22
178.19.40.0/22 maxlen: 22
45.137.12.0/23 maxlen: 23
45.145.132.0/22 maxlen: 22
185.244.231.0/24 maxlen: 24
185.244.230.0/24 maxlen: 24
185.244.229.0/24 maxlen: 24
185.244.228.0/24 maxlen: 24
185.244.228.0/23 maxlen: 23
185.229.216.0/22 maxlen: 22
2.59.192.0/22 maxlen: 22
194.32.112.0/24 maxlen: 24
45.150.84.0/22 maxlen: 22
194.32.112.0/22 maxlen: 22
194.32.115.0/24 maxlen: 24
194.32.114.0/24 maxlen: 24
194.32.113.0/24 maxlen: 24
45.81.104.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ae:a7:3c:73:d3:31:28:75:31:5a:d5:d5:9b:38:9c:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Nov 8 11:17:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d4990dfe067478c49c8e14655dd89873d6086d6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a7:ca:1c:0a:d1:be:d1:98:94:a4:86:23:ad:
9f:bc:1e:ab:85:b6:14:02:95:6f:d8:2d:2e:e6:56:
e5:cf:11:a9:2a:7c:6f:a2:e9:cb:6c:8f:f7:88:14:
48:2a:cd:42:e9:da:ee:43:66:6c:57:a2:91:76:ac:
92:b8:69:a1:0b:c8:b3:87:9c:45:2f:5f:a1:1e:33:
11:4a:e6:43:3a:c8:b9:a2:80:e3:be:0a:0a:4e:03:
fd:8f:69:82:11:83:5d:bf:6e:1f:d0:f1:da:e5:0c:
1f:17:ae:d6:6b:43:b0:70:52:82:d0:22:a7:c3:91:
b7:4e:5a:50:bf:51:7c:88:54:2f:47:74:f9:78:67:
a6:f8:30:22:04:a5:e4:47:05:f4:23:83:af:cb:bd:
5c:75:4b:85:cd:af:e4:0b:d9:96:d2:10:04:87:fa:
74:42:04:16:45:9d:0b:d9:29:02:67:9b:f4:76:b2:
c7:7f:c2:0d:54:6e:df:a6:6e:fe:3d:87:5d:a7:98:
b0:71:07:48:db:df:ce:62:f7:18:b7:51:04:85:08:
7b:c7:e0:f2:3a:d3:eb:bb:ea:5c:2a:2d:50:11:c2:
03:28:1c:4d:6b:c3:8a:ed:d3:ef:8c:de:c3:ab:64:
de:b0:f7:e8:31:4b:e6:c0:31:eb:8b:ef:1a:a8:26:
21:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:99:0D:FE:06:74:78:C4:9C:8E:14:65:5D:D8:98:73:D6:08:6D:6B
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/1JkN_gZ0eMScjhRlXdiYc9YIbWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.192.0/22
31.15.0.0/21
45.81.104.0/22
45.133.60.0/22
45.137.12.0/23
45.145.132.0/22
45.150.84.0/22
45.152.140.0/22
45.155.56.0/22
89.190.152.0/22
178.19.40.0/22
185.28.51.0/24
185.225.244.0/22
185.229.216.0/22
185.231.186.0/23
185.244.228.0/22
185.246.12.0/22
194.31.104.0/22
194.32.112.0/22
Signature Algorithm: sha256WithRSAEncryption
06:be:f6:09:a4:77:91:e8:fc:5a:2e:9f:9c:19:aa:08:21:35:
3e:0b:e9:1d:44:bc:21:75:03:71:2e:90:7f:d6:4f:06:62:6e:
46:87:e3:01:af:07:f2:76:4d:1d:2b:41:bb:72:87:00:55:ed:
6a:52:cc:e9:41:3d:2c:aa:08:80:2f:c4:ba:b5:96:15:2d:48:
b8:1d:48:90:a3:d1:80:cd:0a:13:6e:10:21:37:01:15:53:36:
c0:25:2c:3b:be:0b:2d:c2:05:96:01:c2:a2:71:f8:6b:a1:13:
9c:5e:45:c9:9a:c6:69:b6:52:07:e5:d0:d2:32:03:04:e2:e4:
d7:e9:f6:0e:5d:7f:b1:39:f1:d7:f6:bf:bc:cb:3f:68:88:9a:
1e:68:ec:97:49:fe:5e:98:7a:f8:a8:ee:ff:12:da:9e:ef:3a:
cb:6c:a5:35:03:d3:8c:e7:4f:63:a7:34:77:ff:9c:f7:ea:68:
29:3a:2b:18:5a:74:e8:85:4e:2b:d6:20:aa:7a:9d:3d:15:47:
a0:72:e7:98:91:31:9b:91:0a:3e:40:2b:8b:e7:45:7f:fc:08:
39:9c:91:10:ea:30:c5:fd:ae:61:3d:3d:09:9d:c5:a4:e4:aa:
b7:36:65:e1:2b:ac:0a:96:1e:de:91:51:b3:ce:d1:b7:11:7f:
61:fc:d5:7b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Nov 8 12:16:29 2023 by rpki-client on console-ams.rpki-client.org