Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/A67XmyVesG429EE5O1rxOtElRD8.roa
File: A67XmyVesG429EE5O1rxOtElRD8.roa (raw, json)
Hash identifier: exRqqfx2nvtVQ/3/Q9SRc8q0gQzKgW/uzn2QroxXIO8=
Subject key identifier: 03:AE:D7:9B:25:5E:B0:6E:36:F4:41:39:3B:5A:F1:3A:D1:25:44:3F
Certificate issuer: /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Certificate serial: 0186945AD2D0E038384AEBE377F8828669E3
Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/A67XmyVesG429EE5O1rxOtElRD8.roa
Signing time: Mon 27 Feb 2023 19:30:25 +0000
ROA not before: Mon 27 Feb 2023 19:30:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203020
IP address blocks: 171.22.248.0/23 maxlen: 23
171.22.251.0/24 maxlen: 24
171.22.250.0/24 maxlen: 24
45.146.206.0/23 maxlen: 23
45.146.204.0/23 maxlen: 23
45.135.16.0/23 maxlen: 23
45.82.223.0/24 maxlen: 24
45.135.18.0/23 maxlen: 24
85.208.32.0/23 maxlen: 23
85.208.34.0/23 maxlen: 23
5.183.94.0/24 maxlen: 24
185.244.8.0/23 maxlen: 23
185.244.10.0/24 maxlen: 24
185.244.11.0/24 maxlen: 24
193.42.226.0/23 maxlen: 23
194.116.250.0/23 maxlen: 23
193.42.224.0/23 maxlen: 23
194.116.248.0/23 maxlen: 23
2.58.12.0/23 maxlen: 24
45.89.210.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:94:5a:d2:d0:e0:38:38:4a:eb:e3:77:f8:82:86:69:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Validity
Not Before: Feb 27 19:30:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=03aed79b255eb06e36f441393b5af13ad125443f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6f:f5:74:81:e5:2c:4d:77:5b:00:83:32:89:
09:7d:a4:e5:d0:03:2f:9e:75:6a:f9:84:90:fd:36:
8b:cd:3b:d6:ba:60:18:61:cf:e7:53:d6:54:0f:96:
e3:a5:f8:01:f0:96:25:0c:00:73:23:1f:c4:29:1c:
e1:92:25:d4:87:ff:52:b5:c5:24:14:d4:91:20:16:
20:7e:78:16:bc:5a:e4:60:ab:68:b6:9b:ce:53:e3:
72:45:44:67:21:2e:2f:00:ca:2b:6b:27:c1:5d:99:
cd:2c:6f:58:b8:91:d7:09:eb:5c:8a:19:bc:58:85:
56:aa:c4:36:70:6e:f3:bc:f8:60:7d:99:4b:5c:ec:
ba:b2:d9:45:f9:0b:ae:9c:10:a3:35:d6:2d:f5:5a:
01:a0:b9:53:99:0a:69:2c:6b:2f:d2:5a:db:cb:4a:
a8:d8:0c:ae:7d:7c:51:3f:0a:27:0b:05:f5:2c:6f:
37:1d:9c:6c:2b:c2:65:fb:a0:ca:8f:e2:61:d3:3a:
17:d6:4f:73:8e:97:4b:8c:ea:ff:e0:12:d1:8f:29:
ec:20:1c:67:47:0f:44:90:08:84:ee:a0:2c:c9:d6:
b0:03:cd:93:b2:8f:60:fe:1e:bd:35:23:92:d9:ab:
f7:40:44:b1:97:ad:0c:37:fc:1a:8b:44:37:4d:bb:
a3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:AE:D7:9B:25:5E:B0:6E:36:F4:41:39:3B:5A:F1:3A:D1:25:44:3F
X509v3 Authority Key Identifier:
keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/A67XmyVesG429EE5O1rxOtElRD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.12.0/23
5.183.94.0/24
45.82.223.0/24
45.89.210.0/23
45.135.16.0/22
45.146.204.0/22
85.208.32.0/22
171.22.248.0/22
185.244.8.0/22
193.42.224.0/22
194.116.248.0/22
Signature Algorithm: sha256WithRSAEncryption
c9:c9:37:67:b5:b2:36:ba:72:b1:7d:59:7e:da:d9:d0:4b:2c:
ff:bc:f7:2e:3a:10:c6:82:5c:4c:ef:89:11:df:a6:b5:22:13:
cf:12:82:f2:32:50:a6:8f:5c:30:7e:f4:95:d9:92:14:89:85:
49:74:e0:3e:4c:27:f1:51:77:85:5c:0f:01:8f:b3:92:8e:d6:
4d:d8:21:dd:f4:73:87:d3:88:ae:62:62:ce:a1:1a:ed:40:2a:
9a:f3:17:7a:2a:44:9a:76:5b:74:0f:19:e5:71:6e:05:16:c2:
d1:75:07:71:b4:d0:ee:81:90:25:3d:15:a6:80:2a:52:08:bf:
2d:9d:92:1a:73:76:b2:b3:f6:1b:16:89:3a:29:95:71:60:c8:
d5:9a:8a:ba:80:7d:20:9b:99:5c:02:0a:77:85:61:4d:1a:c7:
32:36:63:2d:26:b4:e5:cc:b7:bb:c6:36:ce:59:d4:63:16:fb:
e2:17:04:e9:59:02:2a:86:a2:09:87:6d:3f:03:f9:f3:71:08:
7e:7b:99:33:88:b6:7f:3e:0a:e6:11:cc:78:df:1d:c5:b6:93:
9b:4a:36:a4:ed:a7:e5:31:fb:f9:00:f8:3c:db:39:eb:6c:41:
d6:b5:c0:71:00:6f:d8:95:3d:22:91:0b:ad:c7:17:fb:e1:3a:
b1:d5:9c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:10 2023 by rpki-client on console-ams.rpki-client.org