Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/I6D81cZrgpe3X7sdZYC5HFSxiMk.roa
File: I6D81cZrgpe3X7sdZYC5HFSxiMk.roa (raw, json)
Hash identifier: aQbvnJ0dkKFr8qsdOsQyQMjUci7Zq+vhvf3uuZ1cnsM=
Subject key identifier: 23:A0:FC:D5:C6:6B:82:97:B7:5F:BB:1D:65:80:B9:1C:54:B1:88:C9
Certificate issuer: /CN=d41703db3020cc1ef2fd71091a468f4a649c238f
Certificate serial: 0185813D63130B32F3FD8BBDA222F911E5F0
Authority key identifier: D4:17:03:DB:30:20:CC:1E:F2:FD:71:09:1A:46:8F:4A:64:9C:23:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BcD2zAgzB7y_XEJGkaPSmScI48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/I6D81cZrgpe3X7sdZYC5HFSxiMk.roa
Signing time: Thu 05 Jan 2023 09:22:41 +0000
ROA not before: Thu 05 Jan 2023 09:22:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49544
IP address blocks: 185.41.140.0/22 maxlen: 22
213.179.192.0/19 maxlen: 19
213.179.192.0/22 maxlen: 22
213.179.196.0/22 maxlen: 22
91.216.207.0/24 maxlen: 24
188.122.64.0/19 maxlen: 24
91.198.152.0/24 maxlen: 24
185.52.12.0/22 maxlen: 24
213.163.64.0/19 maxlen: 24
185.50.104.0/22 maxlen: 22
162.245.204.0/22 maxlen: 22
5.200.0.0/19 maxlen: 24
185.179.202.0/23 maxlen: 24
213.179.204.0/22 maxlen: 22
213.179.200.0/22 maxlen: 22
185.179.200.0/23 maxlen: 24
213.179.210.0/23 maxlen: 23
213.179.209.0/24 maxlen: 24
213.179.212.0/22 maxlen: 22
213.179.216.0/22 maxlen: 22
213.179.220.0/22 maxlen: 22
212.19.224.0/22 maxlen: 22
146.247.76.0/22 maxlen: 22
109.200.192.0/19 maxlen: 24
109.200.194.0/23 maxlen: 23
109.200.198.0/24 maxlen: 24
109.200.208.0/22 maxlen: 22
162.244.52.0/22 maxlen: 23
185.197.24.0/22 maxlen: 23
193.43.218.0/23 maxlen: 23
104.153.84.0/22 maxlen: 22
31.204.132.0/22 maxlen: 22
31.204.128.0/19 maxlen: 24
31.204.156.0/23 maxlen: 23
138.128.136.0/22 maxlen: 22
91.195.234.0/23 maxlen: 23
138.128.140.0/22 maxlen: 22
2a01:9580::/32 maxlen: 34
2a04:c600::/29 maxlen: 34
2a00:1630::/29 maxlen: 32
2a00:1631::/32 maxlen: 32
2a00:1637::/32 maxlen: 32
2a00:1d26::/32 maxlen: 34
2a00:1630::/32 maxlen: 48
2a00:1632::/32 maxlen: 32
2a00:1d20::/29 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:81:3d:63:13:0b:32:f3:fd:8b:bd:a2:22:f9:11:e5:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d41703db3020cc1ef2fd71091a468f4a649c238f
Validity
Not Before: Jan 5 09:22:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=23a0fcd5c66b8297b75fbb1d6580b91c54b188c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:48:62:cd:2e:28:e3:db:27:c2:01:70:17:6a:
a1:ef:23:9e:83:30:5f:4b:cc:1f:17:d6:42:97:ac:
dd:90:d2:c4:85:83:b6:fd:68:83:e7:74:3d:eb:5f:
55:3a:27:02:45:4f:ec:c9:0c:5f:bc:e0:92:ad:e8:
bf:c6:b7:60:25:13:e3:62:d5:49:72:34:fa:df:00:
f4:7d:8f:0d:4e:4d:e7:7b:90:72:05:c1:98:3c:23:
61:21:67:c9:e5:19:cf:d4:f8:b4:ca:c8:72:33:dc:
c3:00:f8:90:7e:8f:03:40:69:f6:b0:b0:d4:14:30:
f6:0a:96:3d:d9:17:c6:69:5b:45:f6:fc:ea:15:86:
9b:9c:78:62:dc:e5:50:98:9f:7c:b7:48:54:22:58:
77:bc:e5:17:8f:64:19:3f:60:fa:db:c5:5a:92:a3:
05:4b:14:24:7c:ca:cb:00:87:d5:9b:e7:ea:1f:9b:
aa:f0:f4:f8:21:d4:03:2d:70:1e:aa:c2:f8:52:27:
42:5c:b1:e2:30:ba:c7:7a:a4:cf:d7:a7:67:f6:e6:
3f:bd:28:76:08:bf:81:a9:0f:8b:5f:19:8b:44:10:
6c:f0:dd:2e:1d:80:fa:bc:57:7b:85:a2:2b:b1:24:
2e:b8:e3:d6:c3:40:cb:f0:ae:38:af:cb:1d:7d:b8:
7f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A0:FC:D5:C6:6B:82:97:B7:5F:BB:1D:65:80:B9:1C:54:B1:88:C9
X509v3 Authority Key Identifier:
keyid:D4:17:03:DB:30:20:CC:1E:F2:FD:71:09:1A:46:8F:4A:64:9C:23:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BcD2zAgzB7y_XEJGkaPSmScI48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/I6D81cZrgpe3X7sdZYC5HFSxiMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.200.0.0/19
31.204.128.0/19
91.195.234.0/23
91.198.152.0/24
91.216.207.0/24
104.153.84.0/22
109.200.192.0/19
138.128.136.0/21
146.247.76.0/22
162.244.52.0/22
162.245.204.0/22
185.41.140.0/22
185.50.104.0/22
185.52.12.0/22
185.179.200.0/22
185.197.24.0/22
188.122.64.0/19
193.43.218.0/23
212.19.224.0/22
213.163.64.0/19
213.179.192.0/19
IPv6:
2a00:1630::/29
2a00:1d20::/29
2a01:9580::/32
2a04:c600::/29
Signature Algorithm: sha256WithRSAEncryption
2f:0a:1b:ce:1a:a1:cd:85:bc:ce:57:6f:d7:5b:8e:a0:0a:be:
3e:46:46:e9:d5:69:24:6d:05:d3:56:f2:35:c6:ed:8a:6c:24:
dc:df:05:f8:d3:e8:50:8e:88:88:91:3a:6f:3b:93:ef:2d:ed:
31:66:ac:a8:62:9b:9b:29:17:7c:4c:d4:d4:4a:ed:d8:29:33:
ed:0e:6c:ff:4a:9d:76:62:6c:4c:2e:10:0b:c8:0a:05:c3:22:
26:5b:2a:84:6c:80:00:7c:bf:b8:58:e5:2e:3a:75:d2:ef:ed:
21:c6:a1:b5:ce:26:32:50:b3:d4:6a:bf:df:db:59:f7:f9:20:
8e:be:07:6e:6b:8c:7c:05:d3:5e:55:a1:f9:61:3b:70:fb:36:
fc:c6:45:14:d7:eb:52:f0:20:02:30:a5:4c:74:f9:ec:1b:70:
f5:2a:a5:2f:1d:9a:7a:4a:7c:fc:be:3a:ca:93:f0:24:95:3c:
95:6c:d4:0b:6a:94:8d:2e:9f:68:9f:b8:1a:8c:a7:8f:95:f3:
7b:e8:ba:34:57:54:4b:fe:ed:4f:87:f3:a8:34:10:d4:48:7e:
36:f4:61:9b:5b:13:26:6d:b1:c5:2d:87:46:1f:0a:cf:82:88:
ed:68:08:c7:6b:a8:f2:02:47:51:44:42:c5:a9:aa:72:d5:7d:
9e:ac:45:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:10 2023 by rpki-client on console-fra.rpki-client.org