Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/Wk6A0FZABYIZpVyI1LdLDDxqnz8.roa
File: Wk6A0FZABYIZpVyI1LdLDDxqnz8.roa (raw, json)
Hash identifier: U9hRURpJyLBqEB4RDPjJv2+FvtAYkTf4/6mKXMxZb2E=
Subject key identifier: 5A:4E:80:D0:56:40:05:82:19:A5:5C:88:D4:B7:4B:0C:3C:6A:9F:3F
Certificate issuer: /CN=f4c0aa7b3e3cbff88262add92b339e35051ce1a0
Certificate serial: 018570428344E7176FCCE68D5C4485D23BD6
Authority key identifier: F4:C0:AA:7B:3E:3C:BF:F8:82:62:AD:D9:2B:33:9E:35:05:1C:E1:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9MCqez48v_iCYq3ZKzOeNQUc4aA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/Wk6A0FZABYIZpVyI1LdLDDxqnz8.roa
Signing time: Mon 02 Jan 2023 02:14:45 +0000
ROA not before: Mon 02 Jan 2023 02:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47956
IP address blocks: 141.226.144.0/20 maxlen: 24
141.226.144.0/21 maxlen: 21
141.226.152.0/21 maxlen: 21
188.120.128.0/19 maxlen: 24
141.226.160.0/20 maxlen: 24
141.226.160.0/22 maxlen: 22
141.226.160.0/21 maxlen: 21
141.226.168.0/21 maxlen: 21
141.226.176.0/21 maxlen: 24
94.230.80.0/20 maxlen: 24
141.226.0.0/22 maxlen: 22
141.226.0.0/21 maxlen: 21
141.226.0.0/18 maxlen: 24
141.226.4.0/22 maxlen: 22
141.226.8.0/22 maxlen: 22
141.226.8.0/21 maxlen: 21
141.226.12.0/22 maxlen: 22
5.102.192.0/18 maxlen: 24
91.205.152.0/22 maxlen: 24
31.210.176.0/20 maxlen: 24
37.46.32.0/20 maxlen: 24
141.226.56.0/21 maxlen: 21
141.226.64.0/20 maxlen: 24
141.226.72.0/21 maxlen: 21
2a02:ed5::/32 maxlen: 32
2a02:ed0::/29 maxlen: 29
2a02:ed1::/32 maxlen: 32
2a02:ed2::/32 maxlen: 32
2a02:ed0::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:42:83:44:e7:17:6f:cc:e6:8d:5c:44:85:d2:3b:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4c0aa7b3e3cbff88262add92b339e35051ce1a0
Validity
Not Before: Jan 2 02:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a4e80d05640058219a55c88d4b74b0c3c6a9f3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:12:8d:3a:da:41:f5:c3:1c:a3:63:9b:83:19:
e8:ef:b5:94:b3:bd:4f:ee:84:37:41:1a:0a:62:0a:
e2:15:ed:72:42:cd:e1:26:2f:4f:ec:be:85:46:07:
cf:89:38:1c:ab:89:c0:a3:69:bf:78:73:d5:0f:a7:
83:32:2a:0c:a0:2b:89:33:cf:03:13:bb:49:d5:ee:
4a:e0:2a:87:36:99:70:69:52:56:41:6a:55:f7:87:
c7:6c:e6:57:21:cd:5e:18:ea:3d:5e:ef:df:1a:ad:
6e:5f:5f:06:94:66:43:35:1d:67:a9:8f:6a:9e:39:
2c:b4:11:f9:a2:74:68:a9:ad:c6:3e:94:8f:ac:f6:
56:8d:7e:d5:68:5c:9c:e8:27:99:46:a5:70:24:ba:
7b:54:00:a7:6c:da:73:96:76:7b:4e:f8:32:32:7f:
76:72:b4:b7:80:73:1c:e7:aa:29:98:32:0f:25:78:
86:36:1d:0f:7c:f5:81:38:57:02:7f:cf:9e:d2:18:
38:3e:ef:4b:40:cc:10:a2:7e:41:a6:6f:8d:9e:a6:
44:ee:ad:27:8c:93:77:4e:c0:62:7e:f7:5f:76:dc:
15:ec:ed:db:ce:18:81:26:91:cf:0e:82:8f:a0:61:
e2:f3:62:44:b5:13:aa:20:af:48:d3:d9:c9:44:8d:
db:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:4E:80:D0:56:40:05:82:19:A5:5C:88:D4:B7:4B:0C:3C:6A:9F:3F
X509v3 Authority Key Identifier:
keyid:F4:C0:AA:7B:3E:3C:BF:F8:82:62:AD:D9:2B:33:9E:35:05:1C:E1:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9MCqez48v_iCYq3ZKzOeNQUc4aA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/Wk6A0FZABYIZpVyI1LdLDDxqnz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/9MCqez48v_iCYq3ZKzOeNQUc4aA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.192.0/18
31.210.176.0/20
37.46.32.0/20
91.205.152.0/22
94.230.80.0/20
141.226.0.0-141.226.79.255
141.226.144.0-141.226.183.255
188.120.128.0/19
IPv6:
2a02:ed0::/29
Signature Algorithm: sha256WithRSAEncryption
c9:fd:b2:7e:d5:65:a8:48:0b:be:fc:9c:1b:1f:62:8a:2a:84:
cc:35:92:55:10:31:54:d5:51:c2:8e:f3:44:17:7d:11:98:b5:
4a:a7:1e:9c:af:38:4f:6c:80:e9:6b:6b:e1:84:90:fe:83:02:
e0:d4:52:04:d3:ab:48:49:cd:68:78:d2:8f:0c:20:34:8d:33:
e9:48:a9:a7:8a:26:bd:93:d9:ff:ce:18:df:c1:26:fe:12:bb:
4f:be:b4:20:87:b2:0a:46:00:e7:59:a0:f5:dc:fb:81:88:57:
03:6e:86:4a:0f:d2:5a:7e:7f:11:2f:66:0e:0d:59:0c:f3:ec:
03:17:54:2b:fd:1b:88:c7:a8:01:af:72:5b:cb:f6:92:bd:dd:
6c:4c:4e:90:9e:01:ad:78:23:43:14:c8:19:af:e6:82:d2:6e:
24:ac:3d:fc:32:28:39:a9:1b:78:b6:53:e1:14:52:f2:91:7c:
8a:92:8a:8e:bf:bd:1c:63:9c:91:e5:f4:ab:bd:86:23:9d:7b:
5a:c5:01:9e:93:9b:bb:b2:1e:2c:4b:b6:ac:ee:9d:89:ef:11:
23:b5:45:96:c9:81:e3:68:f5:59:1c:4b:04:6d:35:96:68:0d:
3e:dc:b6:e5:dc:f6:21:8b:88:85:11:b7:d2:78:35:62:f2:f3:
09:e9:95:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:29 2023 by rpki-client on console-ams.rpki-client.org