Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/CiJpXO4CvV1FrxnVoD1nPyysXPs.roa
File: CiJpXO4CvV1FrxnVoD1nPyysXPs.roa (raw, json)
Hash identifier: J1EEbXn5ukgBRCeCTA1tGMcV2GBvq2aLZgOJvQst8z8=
Subject key identifier: 0A:22:69:5C:EE:02:BD:5D:45:AF:19:D5:A0:3D:67:3F:2C:AC:5C:FB
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 018ACCFEFC09A6E53B351F32A3DED7898E9F
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/CiJpXO4CvV1FrxnVoD1nPyysXPs.roa
Signing time: Mon 25 Sep 2023 15:39:37 +0000
ROA not before: Mon 25 Sep 2023 15:39:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197343
IP address blocks: 5.57.34.0/24 maxlen: 24
5.57.36.0/24 maxlen: 24
5.57.35.0/24 maxlen: 24
185.212.48.0/24 maxlen: 24
185.212.49.0/24 maxlen: 24
178.239.156.0/23 maxlen: 23
178.239.156.0/22 maxlen: 22
5.56.128.0/22 maxlen: 22
37.32.42.0/24 maxlen: 24
37.32.41.0/24 maxlen: 24
37.32.40.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:cc:fe:fc:09:a6:e5:3b:35:1f:32:a3:de:d7:89:8e:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Sep 25 15:39:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a22695cee02bd5d45af19d5a03d673f2cac5cfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4a:b7:04:a5:77:28:b8:84:fe:e1:c2:e6:20:
dd:68:e0:3e:81:80:7a:44:c2:dd:cb:48:8f:74:a6:
f9:3d:b1:5e:e3:a2:ab:83:7d:a5:f6:e9:cc:a6:49:
e7:19:11:bf:c8:20:ab:8a:56:0a:8d:e9:40:9e:68:
ff:9e:9e:3c:45:59:5d:2f:28:23:87:0b:29:c0:9f:
aa:65:70:d5:2e:2f:b3:45:a8:18:06:4f:6f:fd:4a:
33:69:ff:ba:59:1b:9a:7f:ab:59:49:9f:71:f6:ca:
0f:5a:10:c9:99:e3:06:97:85:07:2f:dd:b1:41:02:
3e:e6:a3:a7:00:34:5e:f2:f9:76:59:2a:8c:ea:d7:
71:d5:12:d0:84:f4:12:98:14:36:6c:d9:80:15:f3:
fa:49:88:df:c8:d2:a5:6f:1b:fd:4f:c3:58:d3:a2:
18:0e:36:1a:0c:f7:52:02:cf:cf:81:0b:e4:df:1e:
40:56:78:6d:70:1a:89:5a:d5:fa:38:64:a1:b0:b0:
d6:ad:0a:50:63:09:61:7c:31:6c:be:52:01:4e:fa:
de:16:6b:03:24:fc:7d:49:98:b1:aa:7a:db:0e:bb:
6b:32:cc:f4:68:ef:52:76:ec:5f:e8:e1:07:24:12:
7d:eb:33:48:b2:f0:f3:a2:25:34:4f:83:8b:b1:86:
27:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:22:69:5C:EE:02:BD:5D:45:AF:19:D5:A0:3D:67:3F:2C:AC:5C:FB
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/CiJpXO4CvV1FrxnVoD1nPyysXPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.128.0/22
5.57.34.0-5.57.36.255
37.32.40.0/22
178.239.156.0/22
185.212.48.0/23
Signature Algorithm: sha256WithRSAEncryption
21:55:d4:0e:01:f9:f8:eb:0c:25:39:6d:33:b8:de:12:1b:f7:
79:b7:5c:aa:46:41:de:0d:89:ac:87:85:5d:31:59:35:07:5e:
77:9c:a0:11:a3:11:78:84:59:44:9e:5e:d2:3c:25:fa:2b:56:
3a:0a:fe:db:f3:b7:16:4b:9e:fe:c9:65:c2:39:f8:ab:7e:fd:
5c:49:21:0e:bd:80:f1:13:78:d3:c0:1f:3d:c4:ff:f4:86:31:
6a:98:61:08:cb:f9:59:64:8d:64:e3:7a:55:ea:8f:84:26:74:
6d:05:96:ee:b9:5c:e2:1d:45:8a:cc:76:f1:96:1c:27:1b:0c:
ec:e8:ba:31:16:04:88:3c:c8:9a:35:c9:69:d9:52:41:fa:28:
43:ad:91:55:1e:66:4e:dc:ba:bc:74:5c:2e:50:39:7e:6e:2b:
f7:03:73:24:7c:a4:a3:7a:cf:1d:18:f4:34:30:c9:12:9b:a8:
6b:5e:8b:51:51:c2:04:ad:51:54:29:e3:f3:2c:6e:13:ac:c2:
02:a6:82:6b:51:58:ee:38:17:e2:e9:04:2d:78:14:e2:2e:b5:
08:e7:2d:e7:f6:28:ff:25:35:78:f8:e7:cc:69:fd:ca:6c:2e:
18:95:3f:44:d5:2f:dc:79:06:89:6c:91:23:52:bb:87:f5:93:
e8:a8:bc:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 22 11:07:02 2023 by rpki-client on console-ams.rpki-client.org