Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/WE31zhMF8GoZLhnYMyh3bNw9K7U.roa
File: WE31zhMF8GoZLhnYMyh3bNw9K7U.roa (raw, json)
Hash identifier: JZUbDM5G2PbLKJT1CSuxKZ4P2BndmI1uZJA9UbozMoA=
Subject key identifier: 58:4D:F5:CE:13:05:F0:6A:19:2E:19:D8:33:28:77:6C:DC:3D:2B:B5
Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Certificate serial: 018A23F9B0CC503D237AC8A067F153F7B3BF
Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/WE31zhMF8GoZLhnYMyh3bNw9K7U.roa
Signing time: Wed 23 Aug 2023 19:58:00 +0000
ROA not before: Wed 23 Aug 2023 19:58:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 192.6.64.0/22 maxlen: 22
198.151.94.0/24 maxlen: 24
198.151.92.0/24 maxlen: 24
192.6.172.0/22 maxlen: 22
198.151.64.0/24 maxlen: 24
198.151.66.0/24 maxlen: 24
198.151.70.0/24 maxlen: 24
198.151.68.0/24 maxlen: 24
198.151.78.0/24 maxlen: 24
198.151.76.0/24 maxlen: 24
198.151.74.0/24 maxlen: 24
198.151.72.0/24 maxlen: 24
198.151.84.0/24 maxlen: 24
198.151.82.0/24 maxlen: 24
198.151.80.0/24 maxlen: 24
198.151.90.0/24 maxlen: 24
198.151.88.0/24 maxlen: 24
198.151.86.0/24 maxlen: 24
155.193.229.0/24 maxlen: 24
155.193.248.0/24 maxlen: 24
155.193.250.0/24 maxlen: 24
155.193.251.0/24 maxlen: 24
155.193.249.0/24 maxlen: 24
158.120.58.0/24 maxlen: 24
158.120.56.0/24 maxlen: 24
192.25.232.0/22 maxlen: 22
158.120.54.0/24 maxlen: 24
158.120.52.0/24 maxlen: 24
192.137.24.0/22 maxlen: 22
158.120.62.0/24 maxlen: 24
158.120.60.0/24 maxlen: 24
192.25.244.0/22 maxlen: 22
192.25.180.0/22 maxlen: 22
192.25.200.0/22 maxlen: 22
192.25.208.0/22 maxlen: 22
158.120.48.0/24 maxlen: 24
158.120.50.0/24 maxlen: 24
205.149.36.0/22 maxlen: 22
205.149.32.0/22 maxlen: 22
205.149.44.0/22 maxlen: 22
205.149.40.0/22 maxlen: 22
205.149.48.0/22 maxlen: 22
205.149.56.0/22 maxlen: 22
205.149.52.0/22 maxlen: 22
205.149.60.0/22 maxlen: 22
155.193.163.0/24 maxlen: 24
155.193.161.0/24 maxlen: 24
155.193.162.0/24 maxlen: 24
155.193.160.0/24 maxlen: 24
192.6.252.0/22 maxlen: 22
166.108.24.0/24 maxlen: 24
166.108.23.0/24 maxlen: 24
166.108.21.0/24 maxlen: 24
166.108.22.0/24 maxlen: 24
166.108.20.0/24 maxlen: 24
166.108.26.0/24 maxlen: 24
166.108.27.0/24 maxlen: 24
166.108.25.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:23:f9:b0:cc:50:3d:23:7a:c8:a0:67:f1:53:f7:b3:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Validity
Not Before: Aug 23 19:58:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=584df5ce1305f06a192e19d83328776cdc3d2bb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0b:35:51:e5:b5:f3:94:e3:66:10:63:1b:91:
cf:1d:6a:18:ae:f7:0a:5e:ff:19:bf:7c:df:29:da:
6c:6e:98:e0:84:84:39:95:ae:23:23:bd:25:0c:3e:
70:08:66:56:de:52:c8:05:00:a0:5e:e6:02:54:26:
af:76:3a:a8:02:b7:22:f9:4a:d6:1f:6f:5e:57:47:
1e:8d:f4:72:bd:a3:d1:b6:db:8a:25:73:21:14:21:
a0:3e:e8:52:de:82:69:25:44:03:34:63:f8:c5:9d:
07:42:8c:ab:70:96:53:a4:43:eb:d8:03:3c:79:ce:
94:37:4e:bb:c6:26:14:72:1f:a4:4a:84:2e:07:83:
9c:dd:bb:84:af:d6:7e:09:b7:d5:09:1c:23:3c:29:
bb:32:1b:d5:51:e7:fa:ba:d6:3b:83:fb:a6:55:06:
7c:f2:5a:62:1b:5c:4d:0e:01:87:cc:5e:8b:6a:cd:
d4:e0:7c:fe:c6:7f:c1:86:4c:d9:5f:02:e8:26:cb:
5a:72:5c:96:a7:25:5e:75:c2:5d:9d:6f:b9:4c:8c:
60:ff:7a:0f:ba:d4:d8:c1:0f:c3:2f:fd:71:a4:17:
91:d8:fd:59:02:d6:3b:0b:d2:cc:de:dc:d2:ba:67:
05:7f:af:ed:27:8a:69:3e:61:34:42:19:b7:ab:a4:
ab:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:4D:F5:CE:13:05:F0:6A:19:2E:19:D8:33:28:77:6C:DC:3D:2B:B5
X509v3 Authority Key Identifier:
keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/WE31zhMF8GoZLhnYMyh3bNw9K7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.193.160.0/22
155.193.229.0/24
155.193.248.0/22
158.120.48.0/24
158.120.50.0/24
158.120.52.0/24
158.120.54.0/24
158.120.56.0/24
158.120.58.0/24
158.120.60.0/24
158.120.62.0/24
166.108.20.0-166.108.27.255
192.6.64.0/22
192.6.172.0/22
192.6.252.0/22
192.25.180.0/22
192.25.200.0/22
192.25.208.0/22
192.25.232.0/22
192.25.244.0/22
192.137.24.0/22
198.151.64.0/24
198.151.66.0/24
198.151.68.0/24
198.151.70.0/24
198.151.72.0/24
198.151.74.0/24
198.151.76.0/24
198.151.78.0/24
198.151.80.0/24
198.151.82.0/24
198.151.84.0/24
198.151.86.0/24
198.151.88.0/24
198.151.90.0/24
198.151.92.0/24
198.151.94.0/24
205.149.32.0/19
Signature Algorithm: sha256WithRSAEncryption
6a:35:5f:f5:f0:d4:9d:c7:9d:63:e2:49:b4:ed:b4:d9:e4:1a:
e2:6f:4a:f1:80:f7:87:d8:04:31:f4:8a:0d:0b:44:b7:13:6c:
2b:55:f7:7e:24:7d:38:77:31:b9:c1:a7:00:8a:7a:83:4c:fe:
60:ca:c9:41:41:71:91:5c:a9:0c:fa:5a:83:83:4d:d5:76:08:
24:0c:63:45:be:cc:70:72:72:a8:4d:e0:bf:ca:a4:82:e7:48:
40:9c:62:8c:e4:9d:ea:24:9b:a6:40:a3:f7:44:53:4c:64:6c:
ff:87:dc:6d:00:a0:5c:20:9a:7e:72:6b:05:6f:d1:ed:7c:d9:
d9:10:7f:45:55:85:65:dd:d6:1e:7b:0c:86:c0:31:e6:ad:cd:
3f:4a:9a:8a:2c:55:d1:83:cb:99:dd:e9:20:4f:4b:dc:c3:6f:
18:1d:67:4b:49:59:0f:af:44:02:6a:e1:dd:88:83:bd:ce:02:
6b:86:22:2a:74:e4:d1:b0:b6:ab:33:33:f2:5c:8c:cb:39:c2:
e1:6f:78:2c:38:a3:3a:bc:42:2e:d4:f3:56:0d:e4:80:cb:fc:
08:35:7d:72:96:1f:16:4b:51:00:41:5b:13:aa:f9:f1:d2:66:
45:cb:cd:60:07:0b:a6:fd:13:5a:ae:c4:f7:e9:63:64:69:8c:
09:2a:ee:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 25 19:47:33 2023 by rpki-client on console-ams.rpki-client.org