Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/5wzlBqXanNWBi_uR58RoLBO_qDY.roa
File: 5wzlBqXanNWBi_uR58RoLBO_qDY.roa (raw, json)
Hash identifier: hfsLAXn4PBA78k9SXEbgaCxeIehIPXI0tOr7oiTgXqE=
Subject key identifier: E7:0C:E5:06:A5:DA:9C:D5:81:8B:FB:91:E7:C4:68:2C:13:BF:A8:36
Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Certificate serial: 018C89AEB83FD1D637B3FAE2C196DA3DC5B4
Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/5wzlBqXanNWBi_uR58RoLBO_qDY.roa
Signing time: Thu 21 Dec 2023 00:02:58 +0000
ROA not before: Thu 21 Dec 2023 00:02:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 185.236.232.0/22 maxlen: 24
185.236.232.0/24 maxlen: 24
45.120.176.0/22 maxlen: 24
195.149.87.0/24 maxlen: 24
89.221.225.0/24 maxlen: 24
89.221.224.0/24 maxlen: 24
91.194.161.0/24 maxlen: 24
185.242.84.0/24 maxlen: 24
185.242.85.0/24 maxlen: 24
185.242.87.0/24 maxlen: 24
185.242.86.0/24 maxlen: 24
103.106.0.0/22 maxlen: 24
185.250.150.0/24 maxlen: 24
185.250.149.0/24 maxlen: 24
185.250.148.0/24 maxlen: 24
185.250.151.0/24 maxlen: 24
103.35.188.0/22 maxlen: 24
193.203.202.0/24 maxlen: 24
80.92.205.0/24 maxlen: 24
80.92.204.0/24 maxlen: 24
74.119.192.0/24 maxlen: 24
80.92.206.0/24 maxlen: 24
91.225.218.0/24 maxlen: 24
91.225.217.0/24 maxlen: 24
91.225.219.0/24 maxlen: 24
74.119.195.0/24 maxlen: 24
74.119.194.0/24 maxlen: 24
74.119.193.0/24 maxlen: 24
176.120.64.0/24 maxlen: 24
176.120.64.0/22 maxlen: 24
176.120.72.0/22 maxlen: 24
103.113.68.0/22 maxlen: 24
45.67.231.0/24 maxlen: 24
45.67.230.0/24 maxlen: 24
45.67.229.0/24 maxlen: 24
45.67.228.0/24 maxlen: 24
194.246.115.0/24 maxlen: 24
194.246.114.0/24 maxlen: 24
2a09:7c44::/32 maxlen: 32
2a09:7c45::/32 maxlen: 32
2a09:7c47::/32 maxlen: 32
2a09:7c41::/32 maxlen: 32
2a09:7c42::/32 maxlen: 32
2a09:7c43::/32 maxlen: 32
2a09:7c40::/32 maxlen: 32
2a09:7c46::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:89:ae:b8:3f:d1:d6:37:b3:fa:e2:c1:96:da:3d:c5:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Validity
Not Before: Dec 21 00:02:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e70ce506a5da9cd5818bfb91e7c4682c13bfa836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cc:49:f7:5a:a9:5e:7c:a7:39:b0:65:b2:cf:
c2:12:82:a0:94:16:4e:83:20:23:10:4d:42:71:42:
f2:20:f7:59:99:6a:43:49:31:dd:9b:a9:5d:a5:dd:
99:ba:61:27:ba:85:4a:1a:25:20:c0:20:18:a9:3f:
a6:b1:9a:ac:ef:ee:2f:95:73:1b:d9:1a:de:46:fd:
50:2f:25:a8:fb:5b:3c:e2:a3:eb:75:9f:a1:ed:15:
3d:c7:67:77:7c:0b:0d:83:a2:d7:e0:19:b6:39:72:
5a:05:b9:6b:1b:81:5f:6d:d9:e0:0b:8e:14:af:57:
b6:08:c9:2b:08:ea:34:4a:73:a4:b2:b4:3e:14:0e:
a7:50:89:4b:70:7c:75:66:ed:c4:13:b7:6e:fc:52:
c4:06:e0:03:12:7a:fd:18:fe:fe:ac:59:04:e5:87:
7b:8a:99:5c:51:37:61:ee:ba:c5:9b:19:94:26:8b:
21:4e:af:e9:e1:cb:99:85:8a:bb:f7:54:a8:79:9e:
ed:ca:ef:c7:da:4d:e8:bd:53:9e:82:44:f5:02:2f:
4a:51:58:f1:fc:8f:70:b5:5b:e5:58:53:c1:55:87:
95:5c:a4:20:d1:4e:6a:14:72:85:17:41:ef:ed:b9:
8d:d4:b6:dd:49:f7:e8:65:ea:7a:90:61:c6:25:4f:
61:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:0C:E5:06:A5:DA:9C:D5:81:8B:FB:91:E7:C4:68:2C:13:BF:A8:36
X509v3 Authority Key Identifier:
keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/5wzlBqXanNWBi_uR58RoLBO_qDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.228.0/22
45.120.176.0/22
74.119.192.0/22
80.92.204.0-80.92.206.255
89.221.224.0/23
91.194.161.0/24
91.225.217.0-91.225.219.255
103.35.188.0/22
103.106.0.0/22
103.113.68.0/22
176.120.64.0/22
176.120.72.0/22
185.236.232.0/22
185.242.84.0/22
185.250.148.0/22
193.203.202.0/24
194.246.114.0/23
195.149.87.0/24
IPv6:
2a09:7c40::/29
Signature Algorithm: sha256WithRSAEncryption
47:4f:10:e3:5b:41:d9:a4:c5:ba:35:c8:da:3e:dc:2c:b5:03:
87:39:db:ec:fa:c7:d6:e4:49:9a:d2:b5:d8:7d:7f:ac:68:8e:
fe:f6:32:bf:9f:1f:9f:24:86:ac:3b:52:bf:1b:a9:33:bb:9e:
7a:c8:9a:fa:18:e7:53:75:67:c7:dc:ed:7f:57:7b:72:16:72:
41:9f:8f:16:55:e6:0b:f4:51:18:1a:c8:91:08:6b:e7:5b:91:
3d:3b:74:19:9d:e5:ce:9b:ed:f8:8f:e2:b7:c5:b5:9d:3f:9f:
01:7a:f4:4b:8b:61:95:4e:8a:43:0e:cb:ea:a0:4f:5b:42:d7:
70:fe:0b:92:51:b2:e2:62:e0:f1:15:68:a4:98:d5:e4:ee:92:
35:17:4a:21:d8:79:5d:37:f9:1b:ee:21:55:78:c1:1d:06:c3:
0d:63:df:a2:6d:d9:e0:b8:9e:98:3c:69:c7:bc:32:97:8a:34:
02:58:43:92:a5:db:02:01:24:8e:7a:17:00:13:68:92:25:16:
e5:c7:fc:c9:5a:ee:70:46:b5:6f:92:62:8e:28:fb:60:be:c6:
45:1f:31:27:40:c2:b4:8b:a9:e9:8c:c2:65:eb:f6:4e:a4:9e:
b0:24:64:36:87:c4:47:34:47:99:75:fe:ff:c0:8c:34:74:98:
6a:5c:74:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 24 18:09:27 2023 by rpki-client on console-ams.rpki-client.org