Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/5QLOCkKacIk34CUOQGsEcGH7ObY.roa
File: 5QLOCkKacIk34CUOQGsEcGH7ObY.roa (raw, json)
Hash identifier: LIEoRSvW4aArjTagQmLBFPdKVOBA+KnI19ni6RNg2oM=
Subject key identifier: E5:02:CE:0A:42:9A:70:89:37:E0:25:0E:40:6B:04:70:61:FB:39:B6
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018C6C968704E276DE6131486D97BB48F2C0
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/5QLOCkKacIk34CUOQGsEcGH7ObY.roa
Signing time: Fri 15 Dec 2023 08:27:33 +0000
ROA not before: Fri 15 Dec 2023 08:27:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 85.208.105.0/24 maxlen: 24
45.66.152.0/24 maxlen: 24
45.66.154.0/24 maxlen: 24
45.66.155.0/24 maxlen: 24
5.180.32.0/22 maxlen: 24
5.180.51.0/24 maxlen: 24
5.180.48.0/24 maxlen: 24
5.180.50.0/24 maxlen: 24
85.208.107.0/24 maxlen: 24
85.208.113.0/24 maxlen: 24
85.208.115.0/24 maxlen: 24
45.8.184.0/24 maxlen: 24
45.8.192.0/22 maxlen: 24
45.8.188.0/22 maxlen: 24
45.8.199.0/24 maxlen: 24
45.8.198.0/24 maxlen: 24
45.8.197.0/24 maxlen: 24
45.8.203.0/24 maxlen: 24
193.168.208.0/22 maxlen: 24
5.180.80.0/24 maxlen: 24
5.180.235.0/24 maxlen: 24
85.209.160.0/24 maxlen: 24
5.253.44.0/24 maxlen: 24
5.253.39.0/24 maxlen: 24
45.8.252.0/24 maxlen: 24
45.8.253.0/24 maxlen: 24
5.253.47.0/24 maxlen: 24
5.253.45.0/24 maxlen: 24
45.9.4.0/24 maxlen: 24
45.8.255.0/24 maxlen: 24
45.9.1.0/24 maxlen: 24
45.9.0.0/24 maxlen: 24
45.9.6.0/24 maxlen: 24
45.9.7.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6c:96:87:04:e2:76:de:61:31:48:6d:97:bb:48:f2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Dec 15 08:27:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e502ce0a429a708937e0250e406b047061fb39b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:bd:d5:ab:f9:1a:98:7e:f4:a5:ca:9f:24:5b:
55:4f:f8:c3:bf:0e:f4:0a:0c:50:b2:69:95:ef:a7:
2f:71:1a:10:fe:6b:7f:81:2d:99:67:4d:92:98:4e:
c9:61:93:22:b6:ab:d1:23:ba:7f:01:3a:ae:67:91:
e4:db:d3:e2:8e:14:f9:71:8f:e1:ac:91:2b:17:40:
be:d4:8d:7b:3d:08:51:16:26:c8:e2:2b:37:69:7f:
a4:93:36:5d:ee:37:21:aa:12:6a:51:c4:66:45:05:
f4:46:15:6b:03:8f:8f:41:4a:82:56:95:55:85:39:
54:42:95:5c:73:19:ef:8c:fa:99:0d:59:63:a8:fb:
e3:67:ab:0c:4a:62:53:38:ec:25:54:b7:7a:ba:c3:
0a:92:ea:7b:22:97:39:9a:4c:0a:b9:cd:a5:79:0b:
4d:f3:d6:8d:41:fe:60:e4:0e:17:94:82:a2:70:0f:
f6:d2:a0:f2:8e:f5:a3:fd:7e:e1:f3:7b:72:e1:a6:
de:2e:0a:2e:ec:06:27:f2:c2:83:ce:9d:3f:cc:b6:
cb:dd:23:80:70:52:e5:22:c8:fd:8f:ff:e9:73:08:
af:05:69:58:ee:40:ca:be:44:82:76:ca:02:6c:7a:
34:0b:1b:b8:a0:50:b6:e4:98:2f:4b:5d:d6:9e:30:
7f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:02:CE:0A:42:9A:70:89:37:E0:25:0E:40:6B:04:70:61:FB:39:B6
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/5QLOCkKacIk34CUOQGsEcGH7ObY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.32.0/22
5.180.48.0/24
5.180.50.0/23
5.180.80.0/24
5.180.235.0/24
5.253.39.0/24
5.253.44.0/23
5.253.47.0/24
45.8.184.0/24
45.8.188.0-45.8.195.255
45.8.197.0-45.8.199.255
45.8.203.0/24
45.8.252.0/23
45.8.255.0-45.9.1.255
45.9.4.0/24
45.9.6.0/23
45.66.152.0/24
45.66.154.0/23
85.208.105.0/24
85.208.107.0/24
85.208.113.0/24
85.208.115.0/24
85.209.160.0/24
193.168.208.0/22
Signature Algorithm: sha256WithRSAEncryption
91:95:a3:dc:2c:60:1e:c8:07:f0:be:ed:ab:be:26:fe:c5:e2:
18:35:d8:38:0c:fe:14:42:aa:4e:49:c3:44:94:d0:58:80:09:
9a:a1:cc:75:cc:f9:9e:68:bb:f5:20:34:17:db:42:cd:21:10:
f7:a5:82:f1:cf:98:82:f3:ef:8e:33:ba:5d:78:6f:6f:b8:08:
9d:44:0f:6d:65:2f:2b:d4:46:12:0b:53:fc:5f:fa:73:e7:e4:
18:b3:a2:ba:61:a8:08:ed:c2:55:0c:db:89:48:a0:af:17:57:
7d:48:22:8f:82:74:59:9c:11:eb:88:5a:8a:12:c3:be:be:e8:
bb:b6:b9:b9:5c:bf:ee:47:fc:fb:ef:91:84:0b:8b:db:e4:ae:
80:57:4e:4d:a5:13:19:1f:64:6f:c1:ff:96:3b:50:8d:67:01:
24:ea:e3:7f:f4:b2:aa:6e:60:b7:c1:92:23:28:60:a7:aa:fc:
12:80:fa:d1:8e:f7:3c:43:28:a5:6e:55:75:cb:d9:8f:fb:39:
95:23:f8:86:0d:c1:b3:25:ab:da:cd:fa:65:e0:da:35:51:c4:
c4:f7:ac:2e:4d:a0:3c:41:fe:89:2e:5f:bf:d8:01:0a:93:ba:
d5:97:30:0b:95:73:9e:68:17:ef:84:0a:7b:fc:19:6b:1b:3f:
fe:64:7f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 16 16:31:02 2023 by rpki-client on console-fra.rpki-client.org