Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/RiA1WEHy6ZqigkoIX5J5LwyUxLI.roa
File: RiA1WEHy6ZqigkoIX5J5LwyUxLI.roa (raw, json)
Hash identifier: ytHMDkuwNPkF8e9kwvlzRUuWsPd8LLU0fXylt/HkReA=
Subject key identifier: 46:20:35:58:41:F2:E9:9A:A2:82:4A:08:5F:92:79:2F:0C:94:C4:B2
Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Certificate serial: 0187BA937F5FE5D9008CBBD23459A0B5AB5A
Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/RiA1WEHy6ZqigkoIX5J5LwyUxLI.roa
Signing time: Tue 25 Apr 2023 22:40:41 +0000
ROA not before: Tue 25 Apr 2023 22:40:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 155.193.32.0/19 maxlen: 19
155.193.48.0/21 maxlen: 21
192.6.64.0/22 maxlen: 22
192.6.172.0/22 maxlen: 22
155.193.163.0/24 maxlen: 24
155.193.161.0/24 maxlen: 24
155.193.162.0/24 maxlen: 24
155.193.160.0/24 maxlen: 24
155.193.229.0/24 maxlen: 24
192.6.252.0/22 maxlen: 22
166.108.20.0/24 maxlen: 24
166.108.24.0/24 maxlen: 24
166.108.23.0/24 maxlen: 24
166.108.21.0/24 maxlen: 24
166.108.22.0/24 maxlen: 24
155.193.250.0/24 maxlen: 24
155.193.251.0/24 maxlen: 24
155.193.248.0/24 maxlen: 24
155.193.249.0/24 maxlen: 24
166.108.26.0/24 maxlen: 24
166.108.27.0/24 maxlen: 24
166.108.25.0/24 maxlen: 24
192.25.232.0/22 maxlen: 22
192.137.24.0/22 maxlen: 22
192.25.244.0/22 maxlen: 22
192.25.180.0/22 maxlen: 22
192.25.200.0/22 maxlen: 22
192.25.208.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ba:93:7f:5f:e5:d9:00:8c:bb:d2:34:59:a0:b5:ab:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Validity
Not Before: Apr 25 22:40:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4620355841f2e99aa2824a085f92792f0c94c4b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e9:24:7a:a1:5e:f2:2d:27:05:19:27:8c:26:
0e:9e:91:d4:0f:99:e0:a9:12:8e:9b:87:b4:b7:ef:
df:a0:18:5e:d1:8f:e3:c7:6d:bf:64:be:68:ba:f8:
55:92:93:88:55:1d:39:d9:49:36:e2:fa:06:10:4a:
19:cf:a8:11:d5:f5:f7:98:81:66:f0:14:82:90:ab:
de:ce:32:08:a4:32:70:ab:9c:f0:6f:17:4d:e8:f6:
93:11:72:ea:8a:31:ba:3e:42:07:ec:36:f0:00:4d:
0d:a2:7a:85:7b:9d:51:9b:69:db:c1:3c:14:3b:e4:
3f:ce:89:6d:9e:45:28:9a:e9:9d:5d:ec:4d:5f:5c:
78:c0:e4:a5:a4:6f:f1:86:92:d0:83:c4:11:2d:18:
f4:d9:ca:d9:8f:fb:6a:74:41:bb:a3:ac:09:48:f0:
ed:1b:d2:52:20:3d:f5:6d:a6:a1:b4:16:be:b9:0d:
68:94:70:c1:c7:48:cd:d1:1a:6e:61:df:a4:05:f7:
29:cd:74:30:0d:78:29:81:05:92:c7:7b:e8:be:7c:
b6:4e:0e:e1:32:54:5f:5e:97:6a:7e:22:a0:a5:52:
51:e7:4d:0a:6d:63:1d:51:3d:51:29:91:eb:2d:ad:
f7:03:f6:79:91:6f:d5:c4:0d:7f:62:1b:da:f1:17:
99:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:20:35:58:41:F2:E9:9A:A2:82:4A:08:5F:92:79:2F:0C:94:C4:B2
X509v3 Authority Key Identifier:
keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/RiA1WEHy6ZqigkoIX5J5LwyUxLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.193.32.0/19
155.193.160.0/22
155.193.229.0/24
155.193.248.0/22
166.108.20.0-166.108.27.255
192.6.64.0/22
192.6.172.0/22
192.6.252.0/22
192.25.180.0/22
192.25.200.0/22
192.25.208.0/22
192.25.232.0/22
192.25.244.0/22
192.137.24.0/22
Signature Algorithm: sha256WithRSAEncryption
ba:e4:6d:bb:65:75:37:5a:d6:85:eb:a9:10:62:0b:41:7d:b3:
02:49:55:2b:8c:29:43:02:78:13:1d:db:6c:7d:f7:26:5b:0e:
65:8a:36:b7:02:df:24:af:74:33:78:1a:fe:23:55:08:05:8a:
a4:ae:3f:96:e1:2d:21:e4:61:74:04:af:d3:2e:24:eb:5f:e2:
a9:da:84:09:7c:46:d0:29:c3:1d:5c:42:8e:d9:c5:da:9e:2e:
e8:b0:cc:7e:f4:43:05:73:da:8a:7e:a8:d3:e1:2f:36:24:fa:
12:9b:0c:fd:ef:53:07:44:f0:3c:0a:35:09:72:37:2e:a5:83:
27:ce:88:c1:39:bd:a9:f6:61:ae:85:87:7b:da:1c:f2:da:9c:
7a:b5:c4:e2:bd:93:ff:29:65:1e:15:bc:05:59:22:10:33:17:
0c:a8:cd:67:0d:4f:a1:6f:e0:37:45:b5:1f:74:35:08:d0:51:
d6:3e:85:b9:c3:2c:d7:39:1c:29:53:b8:b8:fd:ec:f0:4a:9c:
24:0e:02:48:05:aa:c3:88:16:8d:1d:28:f5:d8:54:7f:64:15:
0a:79:66:a1:f8:e9:36:a9:a8:3d:5e:69:a4:67:27:a7:f5:80:
fb:6d:85:65:0d:ab:41:58:1e:cc:8b:20:e2:b7:96:91:30:09:
0b:60:0e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:02 2023 by rpki-client on console-fra.rpki-client.org