Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/mx-wiP_CGoeDUaYpBblOd2r5qFY.roa
File: mx-wiP_CGoeDUaYpBblOd2r5qFY.roa (raw, json)
Hash identifier: CQ9DtxbIjW03Tqa5yHLUOLlOuYhE4SoanxUJtcfVXkw=
Subject key identifier: 9B:1F:B0:88:FF:C2:1A:87:83:51:A6:29:05:B9:4E:77:6A:F9:A8:56
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01888FEE817BDACF0842723123AF436AD574
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/mx-wiP_CGoeDUaYpBblOd2r5qFY.roa
Signing time: Tue 06 Jun 2023 08:59:12 +0000
ROA not before: Tue 06 Jun 2023 08:59:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 85.208.105.0/24 maxlen: 24
45.66.152.0/24 maxlen: 24
45.66.154.0/24 maxlen: 24
45.66.155.0/24 maxlen: 24
5.180.32.0/22 maxlen: 24
5.180.51.0/24 maxlen: 24
5.180.48.0/24 maxlen: 24
5.180.50.0/24 maxlen: 24
85.208.113.0/24 maxlen: 24
85.208.115.0/24 maxlen: 24
45.8.184.0/22 maxlen: 24
45.8.192.0/22 maxlen: 24
45.8.188.0/22 maxlen: 24
45.8.199.0/24 maxlen: 24
45.8.198.0/24 maxlen: 24
45.8.197.0/24 maxlen: 24
45.8.203.0/24 maxlen: 24
193.168.208.0/22 maxlen: 24
5.180.80.0/24 maxlen: 24
5.180.235.0/24 maxlen: 24
5.180.234.0/24 maxlen: 24
85.209.162.0/24 maxlen: 24
85.209.161.0/24 maxlen: 24
85.209.160.0/24 maxlen: 24
5.253.44.0/24 maxlen: 24
5.253.39.0/24 maxlen: 24
45.8.252.0/24 maxlen: 24
45.8.253.0/24 maxlen: 24
5.253.46.0/24 maxlen: 24
5.253.47.0/24 maxlen: 24
5.253.45.0/24 maxlen: 24
45.9.3.0/24 maxlen: 24
45.9.4.0/24 maxlen: 24
45.8.255.0/24 maxlen: 24
45.9.1.0/24 maxlen: 24
45.9.0.0/24 maxlen: 24
45.9.6.0/24 maxlen: 24
45.9.7.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8f:ee:81:7b:da:cf:08:42:72:31:23:af:43:6a:d5:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jun 6 08:59:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b1fb088ffc21a878351a62905b94e776af9a856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:19:b0:6f:cb:af:54:96:9c:4b:f4:f3:d4:20:
3d:22:37:74:a9:9d:20:5f:b5:71:12:45:d7:18:ed:
17:13:56:19:79:a5:0c:98:01:06:90:3f:28:63:0d:
04:16:ca:2c:00:d6:a6:a4:9a:26:b5:df:05:87:12:
b0:89:40:98:b0:06:5a:21:76:b6:c3:14:d9:7e:5f:
6a:99:f1:ce:17:e9:68:09:06:b2:1a:4b:80:ef:82:
ae:0f:a0:76:05:37:ca:78:ef:c4:17:3c:17:cb:da:
dc:61:76:63:bf:68:c4:fa:52:23:f0:fc:d5:b7:d7:
89:03:b3:29:9d:e6:63:11:b0:09:fa:ab:84:0c:07:
be:12:9d:9d:1d:0e:35:80:4d:c7:75:fc:37:94:56:
5a:da:70:d0:c0:bc:08:5a:73:2f:15:51:ed:e2:7d:
bc:1a:0c:80:2a:cb:60:fd:a6:5a:9a:35:cf:05:5e:
68:fa:b0:e5:79:00:64:1c:c5:d4:07:17:80:b4:28:
b0:67:84:80:26:83:29:02:20:6a:3a:9d:55:1c:22:
e5:18:bc:63:d5:92:66:c7:b4:22:56:af:f5:7c:c7:
83:a3:9c:28:5b:d6:41:5a:96:d4:7a:cc:d1:f2:78:
63:28:f3:26:45:bc:fd:60:1d:0a:26:60:86:35:08:
5d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:1F:B0:88:FF:C2:1A:87:83:51:A6:29:05:B9:4E:77:6A:F9:A8:56
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/mx-wiP_CGoeDUaYpBblOd2r5qFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.32.0/22
5.180.48.0/24
5.180.50.0/23
5.180.80.0/24
5.180.234.0/23
5.253.39.0/24
5.253.44.0/22
45.8.184.0-45.8.195.255
45.8.197.0-45.8.199.255
45.8.203.0/24
45.8.252.0/23
45.8.255.0-45.9.1.255
45.9.3.0-45.9.4.255
45.9.6.0/23
45.66.152.0/24
45.66.154.0/23
85.208.105.0/24
85.208.113.0/24
85.208.115.0/24
85.209.160.0-85.209.162.255
193.168.208.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:19:48:3d:d3:80:9d:db:73:65:0d:c8:dd:35:b5:3d:56:06:
17:b4:9b:20:3a:e4:f7:da:a0:ad:df:81:a3:ac:72:6c:f0:dc:
8a:31:3a:1a:ca:63:52:a7:b0:07:a3:ed:28:3e:51:50:34:af:
51:cb:d5:94:8a:09:9b:26:89:84:3b:4c:e1:c1:f1:2e:36:91:
53:8d:87:c2:1b:2f:c2:17:af:e0:b0:ea:28:81:01:29:1b:68:
4e:7a:38:e9:8d:8a:0f:3b:b7:88:fb:db:ee:83:71:65:4e:f1:
de:f6:8a:51:04:79:2d:10:58:f7:62:a9:1d:16:cb:12:10:64:
c9:50:a0:d8:3f:49:cd:bc:be:08:05:1d:f3:9b:7d:88:35:39:
52:7c:3e:a7:ab:a4:59:ae:9a:20:42:20:48:84:27:70:ce:b9:
0d:68:72:99:93:1c:56:e1:2e:7c:12:1d:5c:e2:bf:44:7c:a2:
94:e5:3f:16:46:95:3d:3a:b4:5f:e1:81:d4:5a:8b:b1:ed:db:
de:01:4c:ec:ce:2b:a7:50:53:c7:83:4a:e0:84:8c:9b:9d:6a:
36:4b:db:5e:92:41:fb:82:59:a3:91:c7:f8:13:5e:37:f0:2a:
1d:d3:f2:dc:35:82:75:ad:95:4f:ac:9f:27:7a:ee:8b:fd:c7:
fd:27:16:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:29 2023 by rpki-client on console-fra.rpki-client.org