Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/DlTqlKIE6zosOhTHsTZhrsiEEPU.roa
File: DlTqlKIE6zosOhTHsTZhrsiEEPU.roa (raw, json)
Hash identifier: cd4lz2V6EkRW14ijKOiMf9P4sl+ryJlD0NiXJnaP95A=
Subject key identifier: 0E:54:EA:94:A2:04:EB:3A:2C:3A:14:C7:B1:36:61:AE:C8:84:10:F5
Certificate issuer: /CN=f4c0aa7b3e3cbff88262add92b339e35051ce1a0
Certificate serial: 0188AFB093A0A6C5FD55CF02CF1E1548293B
Authority key identifier: F4:C0:AA:7B:3E:3C:BF:F8:82:62:AD:D9:2B:33:9E:35:05:1C:E1:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9MCqez48v_iCYq3ZKzOeNQUc4aA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/DlTqlKIE6zosOhTHsTZhrsiEEPU.roa
Signing time: Mon 12 Jun 2023 12:59:24 +0000
ROA not before: Mon 12 Jun 2023 12:59:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47956
IP address blocks: 141.226.144.0/20 maxlen: 24
141.226.144.0/21 maxlen: 21
141.226.152.0/21 maxlen: 21
188.120.128.0/19 maxlen: 24
141.226.160.0/20 maxlen: 24
141.226.160.0/22 maxlen: 22
141.226.160.0/21 maxlen: 21
141.226.168.0/21 maxlen: 21
141.226.176.0/21 maxlen: 24
94.230.80.0/20 maxlen: 24
141.226.0.0/22 maxlen: 22
141.226.0.0/21 maxlen: 21
141.226.0.0/19 maxlen: 24
141.226.0.0/18 maxlen: 23
141.226.4.0/22 maxlen: 22
141.226.8.0/22 maxlen: 22
141.226.8.0/21 maxlen: 21
141.226.12.0/22 maxlen: 22
5.102.192.0/18 maxlen: 24
91.205.152.0/22 maxlen: 24
31.210.176.0/20 maxlen: 24
37.46.32.0/20 maxlen: 24
141.226.32.0/20 maxlen: 24
141.226.48.0/22 maxlen: 24
141.226.52.0/23 maxlen: 24
141.226.54.0/24 maxlen: 24
141.226.56.0/21 maxlen: 24
141.226.64.0/22 maxlen: 24
141.226.68.0/23 maxlen: 24
141.226.70.0/24 maxlen: 24
141.226.72.0/21 maxlen: 24
2a02:ed5::/32 maxlen: 32
2a02:ed0::/29 maxlen: 29
2a02:ed1::/32 maxlen: 32
2a02:ed2::/32 maxlen: 32
2a02:ed0::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:af:b0:93:a0:a6:c5:fd:55:cf:02:cf:1e:15:48:29:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4c0aa7b3e3cbff88262add92b339e35051ce1a0
Validity
Not Before: Jun 12 12:59:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e54ea94a204eb3a2c3a14c7b13661aec88410f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:95:f7:53:38:8f:2e:89:8f:db:08:87:98:c2:
c7:b1:b5:61:d4:87:a5:5f:a1:cc:b2:5c:7e:08:76:
3d:ba:45:7d:35:5f:2b:3a:50:ae:6e:bb:19:cf:0d:
80:5d:27:22:4c:c8:94:2f:37:6b:49:d8:68:11:98:
ee:f7:18:8b:8e:fd:27:c9:b2:07:23:7e:4c:e2:31:
21:55:85:70:53:2d:37:6c:c4:c0:61:2c:c6:6f:7c:
b8:1b:02:34:af:f5:e6:1b:62:e4:74:89:86:9e:23:
06:a3:27:c1:1c:e9:d9:be:30:c0:f9:ca:3f:87:2b:
67:56:3f:b6:91:65:38:bd:b8:c9:d5:84:61:35:de:
a2:20:c4:ff:0c:98:cf:01:a2:91:24:0f:0e:2d:b1:
e2:38:d5:c8:e0:05:26:a2:88:0e:d9:b3:e0:02:6e:
6e:96:15:fe:8f:df:eb:9b:78:2e:b1:37:a9:56:e5:
32:b1:85:9c:2d:20:b8:f6:fa:b0:93:a1:5c:31:76:
56:11:73:5d:aa:37:7c:8a:f6:1e:5d:b1:05:89:46:
bb:8a:df:01:5a:fa:75:4c:04:65:a4:c6:47:4e:e4:
11:bf:72:56:56:3e:32:32:fe:bf:fc:c3:d8:15:45:
a2:4a:09:b5:eb:87:73:70:71:c0:0f:51:b9:8a:70:
dc:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:54:EA:94:A2:04:EB:3A:2C:3A:14:C7:B1:36:61:AE:C8:84:10:F5
X509v3 Authority Key Identifier:
keyid:F4:C0:AA:7B:3E:3C:BF:F8:82:62:AD:D9:2B:33:9E:35:05:1C:E1:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9MCqez48v_iCYq3ZKzOeNQUc4aA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/DlTqlKIE6zosOhTHsTZhrsiEEPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/9MCqez48v_iCYq3ZKzOeNQUc4aA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.192.0/18
31.210.176.0/20
37.46.32.0/20
91.205.152.0/22
94.230.80.0/20
141.226.0.0-141.226.70.255
141.226.72.0/21
141.226.144.0-141.226.183.255
188.120.128.0/19
IPv6:
2a02:ed0::/29
Signature Algorithm: sha256WithRSAEncryption
42:f9:8b:5d:d5:b5:f8:35:6f:a4:c4:81:e2:aa:3b:34:9d:92:
85:b4:ef:2a:13:fd:87:0c:b3:cf:51:43:f7:1d:f6:1c:86:cb:
2f:36:c4:ca:10:ce:ed:e6:f3:9a:c2:17:85:e9:84:ec:e1:48:
d8:e1:1c:ef:0c:af:99:0a:d7:39:82:1b:58:89:fe:75:89:99:
da:8e:09:d8:44:68:13:e9:07:08:be:65:ed:24:7d:86:e0:3c:
b3:34:a3:b2:8d:be:55:84:15:a8:a2:05:b7:b4:33:e2:51:3b:
fe:fd:02:e1:96:64:9b:c6:1f:58:b3:68:b9:fa:47:7e:55:62:
77:83:82:09:27:af:e8:1b:99:c9:ec:e7:42:e7:69:cf:b2:1c:
6c:29:63:9c:62:ed:62:b2:db:b1:a1:32:8f:03:94:c4:ae:63:
d8:74:75:b7:f5:2f:9f:55:11:53:93:bf:71:a9:47:ba:48:9a:
cd:2d:a5:77:8b:35:b5:f7:aa:f7:3f:0a:8f:e8:d8:0f:5d:d4:
42:22:54:21:c8:39:4a:e9:19:ae:2e:e3:42:d1:66:b3:f0:58:
54:e2:f7:a1:ac:84:bd:c9:bc:e7:5d:7e:a5:fb:03:2c:ae:b8:
51:bb:3d:1c:dc:6d:8c:b0:0e:e1:2b:81:21:ea:af:0f:24:8c:
4b:5e:4f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:29 2023 by rpki-client on console-ams.rpki-client.org