Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/Ua6YWIqcRbb1zV7agkY95alSwDg.roa
File: Ua6YWIqcRbb1zV7agkY95alSwDg.roa (raw, json)
Hash identifier: VVePGwQdcIdEcjTLQRMLGVpnuprkY+ZbZQNkulkVgXE=
Subject key identifier: 51:AE:98:58:8A:9C:45:B6:F5:CD:5E:DA:82:46:3D:E5:A9:52:C0:38
Certificate issuer: /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Certificate serial: 01856F26DAB62E7C5D3E95297CFE3ABAC275
Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/Ua6YWIqcRbb1zV7agkY95alSwDg.roa
Signing time: Sun 01 Jan 2023 21:04:55 +0000
ROA not before: Sun 01 Jan 2023 21:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58061
IP address blocks: 37.252.3.0/24 maxlen: 24
37.252.14.0/23 maxlen: 23
37.252.13.0/24 maxlen: 24
213.142.146.0/23 maxlen: 23
185.238.170.0/23 maxlen: 23
185.238.168.0/23 maxlen: 23
37.1.200.0/21 maxlen: 21
37.1.216.0/21 maxlen: 21
5.45.72.0/22 maxlen: 22
5.45.76.0/22 maxlen: 22
5.45.84.0/22 maxlen: 22
5.45.88.0/22 maxlen: 22
5.45.92.0/22 maxlen: 22
46.102.106.0/24 maxlen: 24
5.61.48.0/22 maxlen: 22
5.61.56.0/22 maxlen: 22
5.61.52.0/22 maxlen: 22
5.45.64.0/21 maxlen: 21
45.136.48.0/22 maxlen: 22
2a02:c6c3::/32 maxlen: 32
2a02:c6c1:2::/48 maxlen: 48
2a02:c6c2::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:26:da:b6:2e:7c:5d:3e:95:29:7c:fe:3a:ba:c2:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Validity
Not Before: Jan 1 21:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=51ae98588a9c45b6f5cd5eda82463de5a952c038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:55:ce:31:fe:6f:9a:0f:f7:35:69:98:5d:4e:
4c:e3:8b:54:04:74:fb:b9:07:bd:c1:e5:b0:d0:c3:
d9:47:d0:21:e9:2e:42:a2:66:6a:07:b6:67:27:24:
b8:ae:4b:84:2b:aa:39:36:21:59:4f:e9:00:ce:9c:
d9:64:c0:b4:ac:e0:d9:a6:ad:c1:30:07:37:d4:04:
5e:50:a0:f1:5b:b7:e2:01:1a:5c:94:34:2f:28:08:
9e:cd:18:bb:60:1c:ba:07:e2:b6:1a:d3:e2:3a:33:
36:8b:4e:d3:c5:5d:43:c0:20:f1:bd:61:5e:4d:7d:
a6:65:c3:f0:fc:44:61:44:42:a1:ed:00:3c:b3:9b:
f8:9e:43:81:29:96:e9:25:c3:f8:52:58:43:46:73:
c9:3f:b5:d5:23:cd:6e:cc:29:e7:6b:f5:e1:bd:be:
73:7d:fd:82:09:e7:48:81:1c:ee:3a:44:90:2d:d8:
85:f7:b1:63:bf:41:ce:8c:eb:a9:4a:88:a3:d3:31:
0e:fa:be:42:d3:9d:56:7f:53:a1:9e:2a:3f:da:32:
0f:78:28:b9:df:5a:da:ae:07:27:44:4a:ca:e1:9f:
b2:94:37:57:ee:c9:eb:2c:34:91:47:30:e6:59:8a:
e3:33:84:ac:78:99:46:f3:39:89:f7:01:ec:0b:ae:
57:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:AE:98:58:8A:9C:45:B6:F5:CD:5E:DA:82:46:3D:E5:A9:52:C0:38
X509v3 Authority Key Identifier:
keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/Ua6YWIqcRbb1zV7agkY95alSwDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.45.64.0/20
5.45.84.0-5.45.95.255
5.61.48.0-5.61.59.255
37.1.200.0/21
37.1.216.0/21
37.252.3.0/24
37.252.13.0-37.252.15.255
45.136.48.0/22
46.102.106.0/24
185.238.168.0/22
213.142.146.0/23
IPv6:
2a02:c6c1:2::/48
2a02:c6c2::/31
Signature Algorithm: sha256WithRSAEncryption
77:e2:ba:38:83:9f:62:19:c1:38:3d:f7:66:d0:42:2a:b8:fb:
7c:0e:4f:6d:c6:15:69:17:e3:8d:ae:1f:96:4e:5f:25:b3:bc:
a0:62:44:91:d4:1e:03:dc:81:dd:b7:66:e6:76:33:20:1c:2e:
a2:ce:a8:33:a3:76:12:f5:46:1a:c0:7a:f4:70:7e:25:69:06:
58:69:04:1d:f4:a7:d8:93:f7:8d:0a:d6:b7:6f:f2:8a:96:44:
5b:01:95:ba:cf:f3:64:15:52:a0:6b:d0:4d:3b:b4:ae:fc:66:
08:21:3a:20:4c:8b:e7:6f:0f:bd:ff:6a:b1:03:00:43:ce:a7:
5f:97:a2:bd:40:2d:6b:94:67:5a:ac:9c:c0:5c:f7:93:35:23:
46:25:e0:01:a9:b3:f5:4e:89:2d:c3:8f:8f:8c:b4:fa:ae:f1:
db:dc:73:6c:86:4a:64:fd:9d:cf:4d:12:47:f6:ae:2a:b3:a6:
5f:96:c1:ef:72:80:8b:20:33:af:fd:ae:92:4d:a6:3a:23:6b:
ed:04:73:c8:74:9a:c8:4e:10:00:ba:7a:75:36:9e:0d:d9:03:
7d:3c:a2:42:eb:87:f5:4b:b8:79:d1:64:9b:ce:4f:67:7e:a1:
76:31:31:03:d9:07:11:cc:3a:4d:99:27:30:5c:cd:55:36:0b:
e5:07:b4:e3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:57 2023 by rpki-client on console-fra.rpki-client.org