Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/nbUlwFylkT9ysv2LZKrDqXRd2ao.roa
File: nbUlwFylkT9ysv2LZKrDqXRd2ao.roa (raw, json)
Hash identifier: QDlg7LYYK4kxbqHm3PYXgrbs7BR/ySRwZoeURqyW2P0=
Subject key identifier: 9D:B5:25:C0:5C:A5:91:3F:72:B2:FD:8B:64:AA:C3:A9:74:5D:D9:AA
Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Certificate serial: 01856C1CA372C415A89DA17B4467F0B2777E
Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/nbUlwFylkT9ysv2LZKrDqXRd2ao.roa
Signing time: Sun 01 Jan 2023 06:54:54 +0000
ROA not before: Sun 01 Jan 2023 06:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210906
IP address blocks: 45.113.238.0/24 maxlen: 24
43.245.116.0/23 maxlen: 23
193.36.76.0/24 maxlen: 24
193.36.86.0/24 maxlen: 24
45.141.80.0/22 maxlen: 22
193.200.96.0/23 maxlen: 23
89.47.34.0/24 maxlen: 24
43.245.119.0/24 maxlen: 24
193.36.172.0/24 maxlen: 24
89.33.83.0/24 maxlen: 24
194.26.149.0/24 maxlen: 24
209.35.4.0/23 maxlen: 23
162.218.158.0/24 maxlen: 24
162.218.157.0/24 maxlen: 24
212.102.116.0/24 maxlen: 24
209.35.99.0/24 maxlen: 24
209.35.113.0/24 maxlen: 24
193.148.92.0/23 maxlen: 23
207.244.216.0/22 maxlen: 22
194.29.67.0/24 maxlen: 24
194.29.70.0/24 maxlen: 24
194.29.80.0/24 maxlen: 24
147.185.250.0/24 maxlen: 24
89.32.204.0/24 maxlen: 24
86.104.215.0/24 maxlen: 24
86.104.227.0/24 maxlen: 24
147.185.217.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:1c:a3:72:c4:15:a8:9d:a1:7b:44:67:f0:b2:77:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Validity
Not Before: Jan 1 06:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9db525c05ca5913f72b2fd8b64aac3a9745dd9aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e8:da:b5:e8:82:b3:1f:45:25:d2:05:28:c9:
62:da:64:59:64:72:35:2b:99:69:a2:3e:b9:a1:b9:
25:f7:fe:d7:c5:87:c1:ad:f3:46:f4:b7:b5:fd:e8:
8a:43:9e:82:94:73:04:29:8f:72:30:67:55:a9:22:
7e:5a:06:3d:3c:11:7c:be:02:c8:dc:25:29:73:2b:
7b:a9:e5:25:ae:11:2b:34:14:8d:a9:87:e9:a2:ee:
64:9b:4e:55:b3:06:c5:6c:70:a3:28:07:58:9c:56:
c6:95:74:d4:a5:30:2b:a4:83:b6:f1:dc:6f:f9:7c:
d9:ba:fa:ab:15:2e:fe:06:c3:0f:8d:b6:e9:da:51:
bc:06:be:4a:82:16:58:1b:04:5c:30:8d:f0:d2:79:
84:11:6e:08:c4:9a:e1:75:82:08:7c:71:f1:38:f7:
b3:d0:75:6f:c8:83:4e:3b:69:ae:bb:62:a4:30:7f:
89:eb:b0:ed:0e:2b:02:63:b6:22:70:f9:44:22:65:
dc:fb:cb:b7:6b:cb:77:21:29:d9:1c:95:c0:64:ca:
cb:4b:f0:0d:b3:00:03:80:be:ec:aa:14:51:dd:fb:
d3:d7:ef:61:1c:2b:51:2c:48:cb:d3:4d:b7:82:98:
8b:03:57:33:9f:58:72:ff:9c:ed:ae:21:55:99:0c:
5a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B5:25:C0:5C:A5:91:3F:72:B2:FD:8B:64:AA:C3:A9:74:5D:D9:AA
X509v3 Authority Key Identifier:
keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/nbUlwFylkT9ysv2LZKrDqXRd2ao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.245.116.0/23
43.245.119.0/24
45.113.238.0/24
45.141.80.0/22
86.104.215.0/24
86.104.227.0/24
89.32.204.0/24
89.33.83.0/24
89.47.34.0/24
147.185.217.0/24
147.185.250.0/24
162.218.157.0-162.218.158.255
193.36.76.0/24
193.36.86.0/24
193.36.172.0/24
193.148.92.0/23
193.200.96.0/23
194.26.149.0/24
194.29.67.0/24
194.29.70.0/24
194.29.80.0/24
207.244.216.0/22
209.35.4.0/23
209.35.99.0/24
209.35.113.0/24
212.102.116.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:f7:e0:ff:55:96:9b:6a:6b:ee:da:2e:47:4a:a6:c1:3a:57:
50:64:fe:e0:53:67:62:ae:1b:28:1d:64:d5:8d:4e:1d:3b:12:
e0:23:d5:88:93:c4:68:5a:b0:49:33:41:b9:72:ea:32:c8:7a:
68:6f:f0:74:05:01:b5:ee:77:2d:d9:5d:03:6c:69:e4:cc:be:
29:4f:bd:02:0c:20:d8:14:9d:f0:97:8d:3f:bd:08:6b:99:4d:
fb:99:d3:89:7c:db:21:df:f9:94:dd:b5:64:65:2c:e2:cc:1f:
a4:a6:5c:22:51:50:0c:dd:91:b6:5a:aa:03:c5:b0:03:3f:75:
22:23:18:93:b0:35:e3:10:9f:89:ff:69:71:a8:2a:8b:08:3e:
4a:ae:bf:84:f4:61:8f:d2:79:74:c3:74:ce:d3:15:13:bd:e5:
44:5b:b5:11:5a:06:e6:4d:ea:8a:d9:5d:f3:55:3e:74:db:2a:
a9:87:b1:78:55:84:86:6f:57:50:05:b6:82:59:e5:41:7a:34:
ee:44:de:03:e7:ad:71:ca:a6:5a:1a:91:38:ef:ab:80:40:e5:
66:86:97:7b:90:88:8c:99:81:e8:53:47:bf:73:54:ab:1f:b0:
70:c4:fe:30:3e:e4:14:60:ba:77:cf:55:f0:27:c0:d8:79:d2:
34:73:e8:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:39 2023 by rpki-client on console-fra.rpki-client.org