Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d2e43d-1faa-40b3-b012-ee64c6e71bfb/1/Ow9yCaqFvL4xImRwluwa5S-cOFw.roa
File: Ow9yCaqFvL4xImRwluwa5S-cOFw.roa (raw, json)
Hash identifier: pgn274dG2WEPjB1iTNz58qETPNPHxvymGBTxCkhUZfg=
Subject key identifier: 3B:0F:72:09:AA:85:BC:BE:31:22:64:70:96:EC:1A:E5:2F:9C:38:5C
Certificate issuer: /CN=fccca62cbe743328555483a857e521863f953b41
Certificate serial: 0185725579152B594D2BE490D87258B38627
Authority key identifier: FC:CC:A6:2C:BE:74:33:28:55:54:83:A8:57:E5:21:86:3F:95:3B:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_MymLL50MyhVVIOoV-Uhhj-VO0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/d2e43d-1faa-40b3-b012-ee64c6e71bfb/1/Ow9yCaqFvL4xImRwluwa5S-cOFw.roa
Signing time: Mon 02 Jan 2023 11:54:42 +0000
ROA not before: Mon 02 Jan 2023 11:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39232
IP address blocks: 5.134.50.0/23 maxlen: 23
5.134.48.0/21 maxlen: 21
5.134.48.0/22 maxlen: 22
5.134.48.0/23 maxlen: 23
5.134.48.0/20 maxlen: 20
5.134.56.0/21 maxlen: 21
5.134.56.0/22 maxlen: 22
5.134.56.0/23 maxlen: 23
5.134.54.0/23 maxlen: 23
5.134.52.0/23 maxlen: 23
5.134.52.0/22 maxlen: 22
5.134.58.0/23 maxlen: 23
5.134.62.0/23 maxlen: 23
5.134.60.0/23 maxlen: 23
5.134.60.0/22 maxlen: 22
185.40.156.0/22 maxlen: 22
185.40.156.0/23 maxlen: 23
185.40.158.0/23 maxlen: 23
188.227.208.0/21 maxlen: 21
188.227.208.0/20 maxlen: 20
188.227.216.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:55:79:15:2b:59:4d:2b:e4:90:d8:72:58:b3:86:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fccca62cbe743328555483a857e521863f953b41
Validity
Not Before: Jan 2 11:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b0f7209aa85bcbe3122647096ec1ae52f9c385c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7c:ad:d8:c1:c8:77:62:9c:09:20:37:43:a5:
27:f6:84:e6:62:22:94:1b:ab:02:01:43:89:e8:f8:
a2:8d:4e:c1:7f:ee:1e:20:74:88:4e:6f:fc:46:8b:
7a:33:52:7c:9f:4a:34:01:0b:d6:5e:5f:d9:d4:8c:
79:c9:50:df:03:10:dd:dc:1a:48:f6:2b:af:8d:40:
e1:d5:f1:fa:a9:b6:50:7f:01:13:e9:52:0c:06:4a:
46:03:43:c7:1e:bd:48:67:ca:ef:ff:f8:62:9a:49:
a4:32:7b:fd:43:b3:80:65:c1:b6:d4:c9:76:97:15:
86:47:e1:06:02:2c:41:19:12:a7:27:db:8a:76:cf:
f3:e3:cd:2c:9d:ff:16:7d:24:ab:fd:49:68:81:fe:
c6:b5:1a:8d:e2:ef:b6:d7:4b:f6:d9:1d:1b:9a:2f:
59:3a:3b:d7:56:8f:2e:2b:ab:cb:fe:f7:76:34:69:
c9:a4:b7:99:16:26:4c:b9:e9:ef:82:3a:49:37:c2:
e3:b8:d8:fb:96:c4:e3:72:91:93:bd:05:42:b9:ee:
24:7c:ce:56:19:82:f1:22:48:d4:28:89:69:76:c1:
ac:66:b9:2f:d3:7f:12:eb:25:ad:f7:71:db:0c:7e:
64:ca:4e:9e:83:08:d4:13:a4:d9:c6:0c:8b:69:7f:
f8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:0F:72:09:AA:85:BC:BE:31:22:64:70:96:EC:1A:E5:2F:9C:38:5C
X509v3 Authority Key Identifier:
keyid:FC:CC:A6:2C:BE:74:33:28:55:54:83:A8:57:E5:21:86:3F:95:3B:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_MymLL50MyhVVIOoV-Uhhj-VO0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d2e43d-1faa-40b3-b012-ee64c6e71bfb/1/Ow9yCaqFvL4xImRwluwa5S-cOFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d2e43d-1faa-40b3-b012-ee64c6e71bfb/1/_MymLL50MyhVVIOoV-Uhhj-VO0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.134.48.0/20
185.40.156.0/22
188.227.208.0/20
Signature Algorithm: sha256WithRSAEncryption
67:e5:94:21:c0:ca:f6:e4:4f:1f:81:47:71:a7:13:cf:06:34:
71:00:21:d1:89:e6:2e:2b:48:24:3f:8f:a4:cd:09:53:51:92:
a5:15:ba:3d:d9:ff:b4:d5:60:f3:7a:5c:32:c5:42:cd:d3:08:
d5:83:33:14:69:f6:8a:df:ec:1b:d0:c8:ab:4c:61:7e:f0:e1:
f3:ee:12:1b:77:e5:77:5e:9b:c7:41:7f:65:14:d2:97:7e:1e:
e1:01:c7:91:ca:9e:81:63:6c:ad:02:06:20:e4:8b:13:81:6d:
53:a3:e3:06:11:52:34:6f:d2:76:dd:99:0f:f2:5c:b2:8e:cd:
6b:e3:cd:21:fb:3e:57:aa:32:9b:4f:5e:68:03:a0:36:3b:b0:
d4:ca:26:9d:bd:73:b0:c5:6a:9a:3d:a8:0b:b1:fc:76:0e:79:
e8:37:45:f9:a5:21:92:73:9e:ee:e0:47:ef:e8:31:39:9d:8b:
ab:15:15:94:4e:51:10:07:23:28:0a:74:b2:cd:7a:fc:5c:c8:
6a:ba:e0:7c:19:9a:f7:a6:0e:da:ac:fb:ed:b3:00:ea:96:63:
bf:7f:5f:56:cc:fc:6f:82:b1:0f:e2:74:67:76:98:8c:3b:76:
40:fa:5d:b3:a1:c9:94:ad:d0:44:d8:d5:cd:7d:43:b0:57:e4:
51:5f:68:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:14:27 2024 by rpki-client on console-ams.rpki-client.org