Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/sdnX5VDDIR_ZeAwL8aiqsFX6k7U.roa
File: sdnX5VDDIR_ZeAwL8aiqsFX6k7U.roa (raw, json)
Hash identifier: u74iIK0w1qVM9LbDp/YNHrf0DA6oTjdVyqeENAw44fo=
Subject key identifier: B1:D9:D7:E5:50:C3:21:1F:D9:78:0C:0B:F1:A8:AA:B0:55:FA:93:B5
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 01859BAA8B236300FD568967C670C19604BC
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/sdnX5VDDIR_ZeAwL8aiqsFX6k7U.roa
Signing time: Tue 10 Jan 2023 12:32:03 +0000
ROA not before: Tue 10 Jan 2023 12:32:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200462
IP address blocks: 94.247.43.0/24 maxlen: 32
5.180.192.0/23 maxlen: 24
2.58.52.0/23 maxlen: 32
45.86.124.0/23 maxlen: 24
2a09:e1c0::/32 maxlen: 128
2a07:6fc0:10::/44 maxlen: 48
2a0e:de80::/29 maxlen: 48
2a00:f826:8::/48 maxlen: 48
2a0c:8900::/29 maxlen: 128
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9b:aa:8b:23:63:00:fd:56:89:67:c6:70:c1:96:04:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Jan 10 12:32:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b1d9d7e550c3211fd9780c0bf1a8aab055fa93b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2e:9b:11:60:3a:86:20:f3:b4:82:f3:16:a0:
73:4b:44:2d:05:82:67:8e:28:7d:80:b0:ab:67:76:
40:cb:4b:9a:18:61:39:2c:65:60:8d:45:ff:d6:00:
56:ad:1a:ac:d2:46:d8:eb:01:a6:16:76:4a:aa:7c:
d2:e2:8e:eb:e4:27:54:78:3d:0b:5a:b1:db:99:7d:
cc:7a:d5:9c:1e:29:1a:cf:1a:f7:1c:d7:a9:74:49:
1a:99:5d:12:c3:09:66:31:09:98:d5:e5:f5:76:de:
eb:f7:f0:d0:0a:d3:9c:48:97:4c:57:68:39:83:5c:
d3:04:19:0a:8a:da:c5:00:1a:b5:1e:9c:00:b5:25:
4d:fe:8d:f9:92:41:67:f6:27:86:82:d3:10:67:1a:
dd:b6:e8:30:bd:4b:34:05:0f:87:bb:ea:80:cf:e9:
0a:10:49:98:9f:cc:ee:9b:cf:c1:e3:1e:be:22:13:
d6:f9:48:62:96:95:66:05:0d:6c:54:ed:a6:76:f0:
f4:09:af:44:be:56:7f:a8:67:3e:0d:00:96:7e:a1:
74:b1:ec:0a:1e:b4:0a:66:01:95:70:55:39:92:55:
7d:aa:3e:eb:68:a3:33:9b:ae:e7:bc:f4:3a:95:10:
df:a4:cb:7a:01:be:31:f2:76:fc:f8:34:2f:8d:81:
10:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D9:D7:E5:50:C3:21:1F:D9:78:0C:0B:F1:A8:AA:B0:55:FA:93:B5
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/sdnX5VDDIR_ZeAwL8aiqsFX6k7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.52.0/23
5.180.192.0/23
45.86.124.0/23
94.247.43.0/24
IPv6:
2a00:f826:8::/48
2a07:6fc0:10::/44
2a09:e1c0::/32
2a0c:8900::/29
2a0e:de80::/29
Signature Algorithm: sha256WithRSAEncryption
4d:e3:7e:0e:f6:c3:a5:61:8e:13:11:15:75:b7:31:1b:95:88:
15:c3:95:e0:bd:c7:49:d5:57:b5:b0:d8:72:28:54:f9:0c:ba:
f4:06:9e:b7:b6:2d:45:33:60:f0:60:49:06:5f:23:fa:98:98:
8d:1e:97:f7:59:7b:c8:90:fd:f0:a9:51:66:4e:2b:62:b9:1e:
0f:5b:c0:0a:4f:a3:c1:ab:31:ce:b5:ad:3b:10:26:1e:a7:a5:
7d:75:07:0a:46:ea:c5:bf:3f:5b:c0:76:10:f7:af:95:d9:c7:
ef:7d:dd:7a:84:e7:35:64:f0:a6:8d:81:18:fb:41:79:a1:69:
fe:a3:a5:b5:f1:8f:51:96:83:a0:a6:c4:47:de:77:64:3f:94:
72:33:fd:b4:63:92:f7:1e:20:5d:a3:d0:cb:71:2b:40:92:a3:
03:4d:4e:9d:65:b3:88:88:8d:7a:7d:d2:a4:2b:1c:9a:bd:46:
e2:f7:87:62:6f:59:0d:3d:fb:51:4c:cc:b9:e3:09:fb:c5:08:
50:2a:b8:e4:c1:da:c4:ab:0d:79:ff:90:6c:a3:75:56:eb:fe:
00:b6:eb:1b:6c:52:7d:3b:70:c9:59:24:d4:84:91:96:2c:ab:
72:b5:6f:75:60:5c:63:36:bf:a5:a3:b3:0e:23:a3:01:2c:7b:
7e:7a:fa:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:17 2023 by rpki-client on console-fra.rpki-client.org