Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/8WzA4yjlcqezF1QBnq6HCBJ-B4I.roa
File: 8WzA4yjlcqezF1QBnq6HCBJ-B4I.roa (raw, json)
Hash identifier: GEb3uKtlgKaqSii0K2KXSMU7/Xn+kehJ1956VixiwDY=
Subject key identifier: F1:6C:C0:E3:28:E5:72:A7:B3:17:54:01:9E:AE:87:08:12:7E:07:82
Certificate issuer: /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Certificate serial: 0186CB6499D57BCC4921FCE179A36F80332C
Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/8WzA4yjlcqezF1QBnq6HCBJ-B4I.roa
Signing time: Fri 10 Mar 2023 12:00:13 +0000
ROA not before: Fri 10 Mar 2023 12:00:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58061
IP address blocks: 37.252.3.0/24 maxlen: 24
37.252.14.0/23 maxlen: 23
37.252.13.0/24 maxlen: 24
213.142.146.0/23 maxlen: 23
185.238.170.0/23 maxlen: 23
185.238.168.0/23 maxlen: 23
5.45.72.0/22 maxlen: 22
5.45.76.0/22 maxlen: 22
5.45.84.0/22 maxlen: 22
188.116.24.0/24 maxlen: 24
5.45.88.0/22 maxlen: 22
5.45.92.0/22 maxlen: 22
188.116.26.0/24 maxlen: 24
176.97.79.0/24 maxlen: 24
46.102.106.0/24 maxlen: 24
5.45.64.0/21 maxlen: 21
45.136.48.0/22 maxlen: 22
37.1.200.0/21 maxlen: 21
62.197.48.0/23 maxlen: 23
37.1.216.0/21 maxlen: 21
5.61.48.0/22 maxlen: 22
5.61.56.0/22 maxlen: 22
5.61.52.0/22 maxlen: 22
2a02:c6c3::/32 maxlen: 32
2a02:c6c1:2::/48 maxlen: 48
2a02:c6c2::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:cb:64:99:d5:7b:cc:49:21:fc:e1:79:a3:6f:80:33:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Validity
Not Before: Mar 10 12:00:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f16cc0e328e572a7b31754019eae8708127e0782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9a:d4:a8:be:9d:06:08:f2:e7:5e:28:b2:a5:
c6:ee:84:90:f9:e2:4a:8b:96:ea:22:54:4b:4d:ea:
87:2f:56:6a:a6:7f:dd:a3:94:3d:93:4c:5c:c4:49:
ab:e9:15:7d:cb:59:4d:2b:bc:ba:7c:61:76:77:72:
cb:37:23:99:0a:1d:23:fe:07:bf:e4:5c:f7:a9:fc:
36:3e:d9:a2:65:03:20:0c:06:22:05:13:a5:20:14:
07:b1:88:d3:60:6a:5e:21:0d:80:0b:a8:70:59:6e:
74:ea:df:23:82:9c:59:73:c9:6a:f9:b6:9e:9b:1f:
a7:04:ed:59:49:4c:d6:76:e2:d7:f8:db:f2:dd:04:
12:84:19:13:fe:e7:eb:35:de:be:ee:ad:1d:d4:c9:
21:d4:70:48:57:f5:04:3a:62:43:b2:ca:d3:5d:4c:
31:ef:f3:67:39:26:62:b0:c2:c3:54:17:e7:66:c6:
e8:84:e5:45:8b:78:c2:f2:dc:74:e0:5b:2a:7b:5a:
c8:64:28:6c:be:dc:53:86:86:02:82:1e:a4:96:80:
84:f4:2b:b9:01:14:1d:95:1e:26:b1:1d:a8:cf:85:
2e:38:a3:33:41:95:00:e8:c2:a7:b9:43:33:8a:c9:
6c:8a:6d:d7:ab:c7:db:91:77:90:40:3e:3a:10:81:
2c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:6C:C0:E3:28:E5:72:A7:B3:17:54:01:9E:AE:87:08:12:7E:07:82
X509v3 Authority Key Identifier:
keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/8WzA4yjlcqezF1QBnq6HCBJ-B4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.45.64.0/20
5.45.84.0-5.45.95.255
5.61.48.0-5.61.59.255
37.1.200.0/21
37.1.216.0/21
37.252.3.0/24
37.252.13.0-37.252.15.255
45.136.48.0/22
46.102.106.0/24
62.197.48.0/23
176.97.79.0/24
185.238.168.0/22
188.116.24.0/24
188.116.26.0/24
213.142.146.0/23
IPv6:
2a02:c6c1:2::/48
2a02:c6c2::/31
Signature Algorithm: sha256WithRSAEncryption
b7:f2:0c:cf:e6:af:cb:fd:6e:c1:9f:52:19:02:c9:48:46:18:
e3:be:66:da:3c:6e:a0:8b:33:03:98:34:3d:70:1b:9f:b7:63:
3f:8e:a9:44:f4:39:6d:6d:89:c8:9f:8e:35:1e:9a:d6:61:31:
77:c3:f1:7b:01:71:61:f2:45:60:47:09:5f:5e:83:6a:8f:75:
79:44:a0:94:c6:6e:46:08:20:36:57:88:cd:c0:2d:ee:e2:37:
a7:ad:6a:6a:1d:2a:73:03:d8:3a:a4:41:48:1a:13:b6:ec:cf:
c7:c8:df:13:68:f4:74:18:bf:53:42:3e:27:f0:86:ea:e3:97:
cb:33:5a:31:d1:4c:13:50:44:c4:2e:9c:9d:86:bf:3e:cf:22:
2e:76:94:40:7c:5b:fb:8c:a9:78:53:6c:7b:f4:20:c4:36:9b:
5d:b2:b7:72:ce:c1:5c:a8:8e:c3:d9:93:43:63:b5:9b:12:f0:
9b:e0:c2:fc:e8:ca:3a:e3:98:00:13:26:4d:28:d0:dd:00:9b:
f4:7f:dd:21:11:5c:a5:fe:fe:c6:fb:98:cc:b2:7e:8a:f7:f0:
8a:7a:3d:92:78:cd:59:f3:9b:42:f8:eb:b7:9b:98:16:8c:86:
5d:c2:de:85:b7:5f:32:67:e1:05:ef:22:af:ec:62:f0:55:40:
08:90:69:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:35 2023 by rpki-client on console-ams.rpki-client.org