Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/iSbvzn71UaoNf4EwWS8-UAQ_lgc.roa
File: iSbvzn71UaoNf4EwWS8-UAQ_lgc.roa (raw, json)
Hash identifier: kCRcKNj7q+uKMsphTYrMQSUupn31LLArDnvgmpy33UY=
Subject key identifier: 89:26:EF:CE:7E:F5:51:AA:0D:7F:81:30:59:2F:3E:50:04:3F:96:07
Certificate issuer: /CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
Certificate serial: 0189FD8AE218382D52BF4AC1BF058B82D3A7
Authority key identifier: B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/iSbvzn71UaoNf4EwWS8-UAQ_lgc.roa
Signing time: Wed 16 Aug 2023 08:51:24 +0000
ROA not before: Wed 16 Aug 2023 08:51:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6718
IP address blocks: 91.208.75.0/24 maxlen: 24
193.93.142.0/23 maxlen: 23
128.0.34.0/24 maxlen: 24
128.0.33.0/24 maxlen: 24
128.0.36.0/24 maxlen: 24
91.239.230.0/24 maxlen: 24
185.36.252.0/24 maxlen: 24
5.154.224.0/24 maxlen: 24
5.154.171.0/24 maxlen: 24
5.154.186.0/24 maxlen: 24
2a05:1c04::/32 maxlen: 32
2a05:1c00::/32 maxlen: 32
2a05:1c02::/32 maxlen: 32
2a00:ece0::/32 maxlen: 32
2a05:1c03::/32 maxlen: 32
2a04:6c80::/48 maxlen: 48
2a05:1c01::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:fd:8a:e2:18:38:2d:52:bf:4a:c1:bf:05:8b:82:d3:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
Validity
Not Before: Aug 16 08:51:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8926efce7ef551aa0d7f8130592f3e50043f9607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c7:36:a9:86:f9:02:25:67:ad:05:76:c5:ce:
a3:91:7e:dc:93:62:62:64:31:f1:49:72:d2:56:84:
07:4a:4b:77:77:7c:04:d1:13:c8:ee:79:ea:c4:7d:
b1:a8:56:5a:1c:3e:15:dd:7b:65:23:37:64:a7:75:
97:67:54:a4:2e:d0:ab:b7:0f:34:c1:57:a2:9c:fe:
99:4e:2f:ca:90:7b:b0:ff:3e:28:5c:3d:0a:e1:76:
20:72:ad:57:d2:ce:8d:2b:0c:f8:00:3f:02:c2:fb:
f5:1b:11:09:b3:53:47:75:7f:f4:9c:15:71:bb:81:
b1:90:9a:02:00:f8:49:ea:ab:d7:1c:31:46:b5:a8:
a9:7b:e2:c9:67:ac:c3:94:42:36:d8:6c:3f:0f:12:
19:89:ae:16:ca:e6:40:1a:0a:4e:42:a2:f1:cc:64:
43:a6:56:24:27:e3:bc:c4:d7:11:19:2f:d2:2f:9f:
6d:64:df:be:c8:c7:4a:a7:88:27:e9:22:8a:99:84:
d6:0d:94:19:cc:a7:79:3a:0b:58:e7:80:1f:e9:15:
57:4a:f1:b4:09:25:22:91:61:74:8f:0f:2e:0f:9b:
65:ee:91:f2:fa:5b:db:64:5f:ec:fa:10:3b:5c:38:
84:7f:d0:9e:db:25:08:d8:cb:65:83:e3:e2:ea:93:
ec:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:26:EF:CE:7E:F5:51:AA:0D:7F:81:30:59:2F:3E:50:04:3F:96:07
X509v3 Authority Key Identifier:
keyid:B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/iSbvzn71UaoNf4EwWS8-UAQ_lgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.171.0/24
5.154.186.0/24
5.154.224.0/24
91.208.75.0/24
91.239.230.0/24
128.0.33.0-128.0.34.255
128.0.36.0/24
185.36.252.0/24
193.93.142.0/23
IPv6:
2a00:ece0::/32
2a04:6c80::/48
2a05:1c00::-2a05:1c04:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
82:96:d8:ab:d0:f7:e6:d6:68:df:a1:b0:df:07:61:39:e4:24:
bd:41:d3:65:28:d6:43:74:26:59:51:34:bb:20:e0:03:c0:b4:
d7:3d:63:fb:05:ac:4d:5f:e1:dc:19:5a:18:6e:ee:c5:c4:7d:
3c:1e:78:9d:e9:0d:36:5d:70:86:d5:fa:39:f7:ec:4a:9c:73:
6f:74:2b:c8:ed:ae:ea:05:40:65:f0:9f:7a:41:f9:52:8e:9c:
7d:01:cd:01:9c:f7:e3:10:bd:60:29:07:ee:8f:da:73:5d:44:
5f:ee:6b:a5:a1:64:42:eb:6a:31:f0:c4:b4:a4:70:75:b6:e0:
48:45:02:5f:cf:bc:2e:dd:f0:6e:d7:5d:d2:16:af:14:4f:da:
e8:57:e6:51:7c:da:02:f1:54:03:3d:68:19:15:7c:af:d5:26:
0c:b1:2f:82:cb:79:cc:66:5d:7b:98:82:ec:14:fe:4c:aa:dd:
2e:a0:09:e6:a7:2a:d7:86:73:da:c2:b2:86:a0:37:1d:18:0d:
cc:3c:ee:1f:bf:78:67:cb:21:67:20:b2:96:17:c0:9c:74:ea:
40:75:66:96:5c:6c:eb:25:c2:77:1a:57:05:ac:f3:f7:53:90:
8a:27:4f:46:7c:48:db:35:6d:89:69:9f:8e:6a:14:c1:0e:ff:
54:da:0b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 21 10:26:41 2023 by rpki-client on console-fra.rpki-client.org