Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/F5J4Fwi9fUlRFpXf-hG9niU3LFc.roa
File: F5J4Fwi9fUlRFpXf-hG9niU3LFc.roa (raw, json)
Hash identifier: iU0QLea6u3e3VhDDMnT0OxyTvb9zVlruBccTpMZeHg0=
Subject key identifier: 17:92:78:17:08:BD:7D:49:51:16:95:DF:FA:11:BD:9E:25:37:2C:57
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0187104C94F9C0644CB184568C30259F00BD
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/F5J4Fwi9fUlRFpXf-hG9niU3LFc.roa
Signing time: Thu 23 Mar 2023 21:07:46 +0000
ROA not before: Thu 23 Mar 2023 21:07:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 85.208.105.0/24 maxlen: 24
45.66.152.0/22 maxlen: 24
5.180.32.0/22 maxlen: 24
5.180.51.0/24 maxlen: 24
5.180.48.0/24 maxlen: 24
5.180.50.0/24 maxlen: 24
5.180.49.0/24 maxlen: 24
85.208.112.0/22 maxlen: 24
45.8.184.0/22 maxlen: 24
45.8.192.0/22 maxlen: 24
45.8.188.0/22 maxlen: 24
45.8.199.0/24 maxlen: 24
45.8.198.0/24 maxlen: 24
45.8.197.0/24 maxlen: 24
45.8.203.0/24 maxlen: 24
193.168.208.0/22 maxlen: 24
5.180.82.0/24 maxlen: 24
5.180.80.0/24 maxlen: 24
5.180.232.0/22 maxlen: 24
85.209.160.0/22 maxlen: 24
85.209.163.0/24 maxlen: 24
5.253.36.0/22 maxlen: 24
5.253.44.0/24 maxlen: 24
45.8.252.0/22 maxlen: 24
5.253.46.0/24 maxlen: 24
5.253.47.0/24 maxlen: 24
5.253.45.0/24 maxlen: 24
45.9.0.0/22 maxlen: 24
45.9.4.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:10:4c:94:f9:c0:64:4c:b1:84:56:8c:30:25:9f:00:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Mar 23 21:07:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1792781708bd7d49511695dffa11bd9e25372c57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ad:5e:9e:89:59:bc:83:eb:2c:60:d4:b3:0b:
92:8a:45:fd:8e:57:c0:64:b0:92:99:21:7e:8e:25:
cb:96:4d:7f:b6:c1:82:2f:75:38:7a:e6:21:63:fd:
cc:63:46:1d:c4:f7:14:bf:5f:ec:9e:aa:a1:e9:03:
72:c5:0f:de:e1:71:2b:cd:e9:c8:36:74:25:57:aa:
93:c6:5c:d1:7f:e7:da:59:77:31:31:49:da:6e:6d:
ef:22:f0:65:30:54:e6:55:f0:76:7f:7b:e5:ad:2e:
a6:23:3f:94:d1:5b:45:8d:29:08:7b:73:ce:16:2f:
c7:5e:c9:1f:72:74:ee:dd:3c:9c:2d:4d:e3:b4:02:
1f:73:36:6a:6f:71:aa:67:8a:b7:e5:50:3b:cf:14:
22:ca:3a:57:fb:e1:78:c2:d1:4d:85:65:4a:89:a1:
e0:94:20:e7:c5:af:e1:1a:89:a7:0f:c6:0d:a1:07:
4d:44:c4:e2:e4:4b:ff:30:56:2a:8e:3f:e7:31:9c:
b7:b7:fc:d1:0e:23:7a:27:15:52:f1:29:83:e5:66:
66:aa:3f:e3:be:6d:ff:8d:3f:eb:58:2f:42:66:83:
17:cc:26:23:11:68:81:3e:31:2d:72:03:a4:7d:f4:
59:c3:55:b6:3f:4d:16:99:34:3f:df:93:0b:97:65:
e0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:92:78:17:08:BD:7D:49:51:16:95:DF:FA:11:BD:9E:25:37:2C:57
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/F5J4Fwi9fUlRFpXf-hG9niU3LFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.32.0/22
5.180.48.0/22
5.180.80.0/24
5.180.82.0/24
5.180.232.0/22
5.253.36.0/22
5.253.44.0/22
45.8.184.0-45.8.195.255
45.8.197.0-45.8.199.255
45.8.203.0/24
45.8.252.0-45.9.7.255
45.66.152.0/22
85.208.105.0/24
85.208.112.0/22
85.209.160.0/22
193.168.208.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:9d:87:17:23:f8:bf:33:f2:b5:31:55:33:6f:22:c5:66:42:
e7:d1:25:c4:f7:a5:ba:4c:be:30:a8:49:ff:f9:f0:51:f6:b4:
99:ba:6e:dd:00:cc:4a:ba:06:07:d8:40:8e:3a:c8:87:e4:29:
bd:7b:ec:5b:a8:66:34:db:fc:05:41:a5:84:20:0d:51:b2:b8:
32:fa:d3:1d:6c:47:36:a3:12:c9:f9:ae:4e:d5:cc:62:c4:ba:
e3:e5:ad:ed:4f:8e:29:ca:5f:ab:d0:25:da:12:1b:ca:dc:87:
6d:d9:92:de:5d:e4:6e:e8:45:8d:94:61:13:3d:a9:8f:a5:6a:
55:9b:a1:42:f7:3b:78:1f:6f:fc:eb:46:d9:58:0e:21:9c:4a:
ce:3f:6a:0c:17:86:5f:3a:5a:1d:08:36:2f:0b:87:ca:a9:4d:
ac:be:ae:9b:68:66:b6:ec:43:80:b7:7a:0d:c0:5a:20:92:04:
a1:a3:84:94:c3:31:73:4d:9a:73:4b:aa:2c:a6:ea:23:82:0a:
4e:32:27:90:7b:35:55:21:29:6e:2f:f6:9d:38:33:1e:d5:c2:
4a:e4:a3:04:bc:b8:6a:1f:84:73:9b:bc:68:ce:71:73:81:ec:
5d:36:24:c8:6c:95:81:ec:dd:1b:d4:51:d2:b0:54:eb:de:b3:
76:84:a0:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:22 2023 by rpki-client on console-ams.rpki-client.org