Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/6OkG59eNsfMpj0Y7il3Gzjg26jE.roa
File: 6OkG59eNsfMpj0Y7il3Gzjg26jE.roa (raw, json)
Hash identifier: Zboeko0xjFStobUaLM0wGtjQm1CWx1uNxH2ktSXHrjc=
Subject key identifier: E8:E9:06:E7:D7:8D:B1:F3:29:8F:46:3B:8A:5D:C6:CE:38:36:EA:31
Certificate issuer: /CN=510b419f0c17b4c8be217f64388d268d14dc261e
Certificate serial: 018A181D40C8DE2DF79BC9912E1457EDB931
Authority key identifier: 51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/6OkG59eNsfMpj0Y7il3Gzjg26jE.roa
Signing time: Mon 21 Aug 2023 12:41:24 +0000
ROA not before: Mon 21 Aug 2023 12:41:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207990
IP address blocks: 43.252.28.0/22 maxlen: 32
94.176.80.0/20 maxlen: 32
103.211.184.0/23 maxlen: 32
203.78.168.0/21 maxlen: 32
37.61.226.0/24 maxlen: 32
94.176.48.0/20 maxlen: 32
92.255.86.0/23 maxlen: 32
103.225.128.0/22 maxlen: 32
213.188.64.0/22 maxlen: 32
193.151.52.0/22 maxlen: 32
213.188.80.0/20 maxlen: 32
85.208.148.0/22 maxlen: 32
103.30.12.0/22 maxlen: 32
206.204.0.0/20 maxlen: 32
206.204.16.0/20 maxlen: 32
206.204.32.0/20 maxlen: 32
139.5.104.0/22 maxlen: 32
206.204.48.0/20 maxlen: 32
45.114.240.0/22 maxlen: 32
216.194.80.0/20 maxlen: 32
89.223.14.0/23 maxlen: 32
89.223.18.0/23 maxlen: 32
45.130.120.0/22 maxlen: 32
92.255.32.0/21 maxlen: 32
103.207.152.0/23 maxlen: 32
116.212.188.0/22 maxlen: 32
180.94.216.0/22 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:18:1d:40:c8:de:2d:f7:9b:c9:91:2e:14:57:ed:b9:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=510b419f0c17b4c8be217f64388d268d14dc261e
Validity
Not Before: Aug 21 12:41:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e8e906e7d78db1f3298f463b8a5dc6ce3836ea31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:87:d2:b5:68:79:6c:49:b5:45:92:27:ee:f2:
ca:6e:4c:dd:3d:55:38:b5:08:ec:c4:61:14:e3:42:
53:86:a7:c4:44:f6:17:31:81:bb:6c:39:3e:e7:b7:
cd:62:7d:5f:84:fd:38:d8:6d:2b:ea:73:bc:7c:12:
b5:52:1e:42:11:6a:ee:1d:d3:26:b7:b0:22:0c:9d:
68:65:47:3f:37:95:2b:db:12:3a:04:ba:ad:4d:ae:
d4:1d:f2:94:46:4c:95:12:6a:30:69:e3:45:cc:0a:
c8:0c:69:38:c2:78:3a:8e:45:3c:79:3a:d6:d3:14:
a4:f1:30:7f:08:a5:d6:fd:48:0a:64:2e:30:91:b6:
29:a4:28:83:ce:db:b8:7c:78:4f:b5:41:69:c7:bf:
a8:81:41:e2:0b:f4:4c:ad:72:bf:45:27:38:45:63:
0b:44:79:d5:04:58:37:a6:78:ca:81:cf:fa:3e:f2:
03:08:8a:26:40:56:94:ac:0d:f3:4a:cc:7b:ce:85:
0c:1e:9b:59:d8:33:a9:63:64:92:64:a0:e1:77:81:
50:d5:e1:3c:b4:98:0d:e8:a9:4c:c5:45:c5:08:ba:
8c:52:83:29:ac:bd:ff:46:84:61:cd:b4:e4:22:56:
3d:96:bd:8f:54:1e:96:3b:25:9f:ac:26:4c:e7:6a:
dd:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E9:06:E7:D7:8D:B1:F3:29:8F:46:3B:8A:5D:C6:CE:38:36:EA:31
X509v3 Authority Key Identifier:
keyid:51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/6OkG59eNsfMpj0Y7il3Gzjg26jE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.61.226.0/24
43.252.28.0/22
45.114.240.0/22
45.130.120.0/22
85.208.148.0/22
89.223.14.0/23
89.223.18.0/23
92.255.32.0/21
92.255.86.0/23
94.176.48.0/20
94.176.80.0/20
103.30.12.0/22
103.207.152.0/23
103.211.184.0/23
103.225.128.0/22
116.212.188.0/22
139.5.104.0/22
180.94.216.0/22
193.151.52.0/22
203.78.168.0/21
206.204.0.0/18
213.188.64.0/22
213.188.80.0/20
216.194.80.0/20
Signature Algorithm: sha256WithRSAEncryption
bc:44:38:a2:59:19:d7:79:b5:fa:79:53:8b:ae:a5:90:1b:8f:
16:92:93:bf:8a:ab:a1:5d:17:8a:99:3a:b6:94:c3:67:43:d5:
ef:99:5d:d7:4f:91:32:e4:04:8b:ed:b2:44:c2:a2:b3:7b:bb:
c1:f4:6b:c0:ea:30:67:c2:b5:7a:eb:60:b3:7b:af:9e:74:da:
2d:c7:77:bf:fd:54:6f:d6:37:12:b2:19:ba:96:eb:c0:09:ab:
12:68:f3:1d:fe:e9:76:4f:23:a7:77:24:ba:f9:5f:1f:81:c9:
ca:8a:da:99:a7:dc:00:2b:9b:ed:9e:49:93:c7:87:d7:c9:9d:
c6:ea:86:57:e1:5d:aa:5b:53:48:53:32:c7:28:24:84:32:b9:
16:05:25:3a:d7:5d:fb:1d:f7:5f:9e:57:da:93:34:dd:47:5d:
cd:bf:eb:a7:7c:c4:5a:0e:4e:dd:8d:ad:47:01:58:7d:af:87:
48:45:1f:fd:8a:c8:8e:95:51:95:06:c4:78:b1:bf:c7:00:a6:
ac:90:69:e5:c5:4c:6c:6a:79:73:b8:af:61:d7:60:43:1c:ec:
40:8a:4f:d3:2a:40:56:37:75:a2:04:41:8d:c2:6b:1d:c0:aa:
a6:50:7d:0f:57:1b:12:9b:58:51:7f:91:c6:6a:f7:87:c4:4f:
77:da:0e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:21:16 2024 by rpki-client on console-ams.rpki-client.org