Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/WrTXvUb0vEEOdRw46uwR-VREA3o.roa
File: WrTXvUb0vEEOdRw46uwR-VREA3o.roa (raw, json)
Hash identifier: 18OmXheAYl47CZBEoNAooUueHOH5sGlax7bN89aeh2Y=
Subject key identifier: 5A:B4:D7:BD:46:F4:BC:41:0E:75:1C:38:EA:EC:11:F9:54:44:03:7A
Certificate issuer: /CN=510b419f0c17b4c8be217f64388d268d14dc261e
Certificate serial: 0186DF1DBF5A23EDC5DD1275ADF22FFF61D2
Authority key identifier: 51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/WrTXvUb0vEEOdRw46uwR-VREA3o.roa
Signing time: Tue 14 Mar 2023 07:55:14 +0000
ROA not before: Tue 14 Mar 2023 07:55:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207990
IP address blocks: 216.194.80.0/20 maxlen: 32
103.225.128.0/22 maxlen: 32
43.252.28.0/22 maxlen: 32
103.211.184.0/23 maxlen: 32
45.130.120.0/22 maxlen: 32
37.61.226.0/24 maxlen: 32
193.151.52.0/22 maxlen: 32
85.208.148.0/22 maxlen: 32
103.30.12.0/22 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:df:1d:bf:5a:23:ed:c5:dd:12:75:ad:f2:2f:ff:61:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=510b419f0c17b4c8be217f64388d268d14dc261e
Validity
Not Before: Mar 14 07:55:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ab4d7bd46f4bc410e751c38eaec11f95444037a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:42:3a:06:35:02:0c:cd:84:7e:55:66:28:8b:
44:12:bc:cc:6b:57:38:2e:f4:80:11:60:2f:2e:04:
f3:c3:23:a7:8a:84:e7:8f:c4:73:55:d4:de:cc:f6:
8b:51:f0:43:38:01:c9:4b:20:51:77:4a:18:b8:90:
09:27:4f:b7:6e:9e:b2:9a:6f:6b:10:ca:f1:84:75:
9b:eb:2f:1f:13:c8:8e:46:bf:c4:42:4e:68:01:de:
9d:45:8c:a7:d4:70:45:75:11:1a:04:1b:72:2d:fd:
c5:5d:28:da:ad:54:81:85:7d:16:2f:97:cf:1d:6a:
b8:e3:ef:ae:08:ee:44:33:46:b2:b4:57:91:32:0e:
68:a0:d3:2c:d5:d7:9f:bc:5a:fe:07:28:a3:3d:3b:
70:b2:e6:33:10:d1:13:7d:18:e4:3d:8c:96:2e:d7:
2d:18:40:f7:65:6c:7c:59:2d:0d:5c:40:85:1c:f9:
2a:cb:25:b4:c4:97:8c:02:97:63:a5:19:6c:79:d9:
a6:87:a0:90:ab:0e:97:24:4e:d6:5b:ff:04:2d:26:
8d:2f:3e:62:e9:90:76:8c:9a:d2:c1:87:ab:1f:2b:
34:99:f3:25:53:67:ca:06:3c:1c:03:82:6c:b6:47:
29:cd:c4:08:a6:b3:dc:08:92:da:32:f0:16:64:6a:
2b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B4:D7:BD:46:F4:BC:41:0E:75:1C:38:EA:EC:11:F9:54:44:03:7A
X509v3 Authority Key Identifier:
keyid:51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/WrTXvUb0vEEOdRw46uwR-VREA3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.61.226.0/24
43.252.28.0/22
45.130.120.0/22
85.208.148.0/22
103.30.12.0/22
103.211.184.0/23
103.225.128.0/22
193.151.52.0/22
216.194.80.0/20
Signature Algorithm: sha256WithRSAEncryption
40:18:9d:d5:f6:dd:ca:d6:e5:c7:7f:36:7c:60:47:46:54:c2:
6b:34:5a:7c:10:6d:63:35:50:96:96:9f:cc:90:58:6f:ab:50:
3e:6d:88:b5:56:69:dc:07:4c:31:ce:55:d1:e9:c6:b3:06:0d:
2f:46:75:ce:4e:a8:87:ae:00:93:a6:a4:94:ae:1c:23:da:1f:
73:25:3c:15:9d:3b:e2:87:eb:1f:08:f7:c9:20:a8:ac:2b:7c:
16:d9:69:cc:62:49:c8:a5:3d:98:6c:51:12:dc:88:8a:c7:2b:
4e:f2:b8:09:f2:c2:e3:4d:e8:35:90:be:9a:c8:60:24:de:77:
09:c2:a9:06:ac:32:39:5e:8f:f4:69:37:b5:4c:bd:c3:91:57:
10:57:bb:72:57:5c:ea:40:c7:12:5a:23:a3:e2:4f:03:37:0b:
66:cd:cb:07:d8:65:68:cd:65:12:39:99:20:8d:94:ed:41:8d:
3c:37:fe:6e:d1:6f:f7:5c:8d:08:31:32:1c:bc:79:e3:63:46:
d5:66:99:22:44:01:10:f5:d8:42:52:47:0c:63:70:3b:2e:49:
77:9d:c9:88:ee:ed:10:c5:6d:de:c7:71:df:fd:ee:6c:a0:90:
ef:7e:de:47:54:c4:54:d1:bf:a4:e5:0b:7d:05:2a:15:be:d3:
db:cc:8b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:19 2023 by rpki-client on console-fra.rpki-client.org