Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/WJVxqC50k_78qIzKPm7DH7xP3NA.roa
File: WJVxqC50k_78qIzKPm7DH7xP3NA.roa (raw, json)
Hash identifier: iFWg7u+qvxihEATLocsw+kc2RXu15FmkSp3q5HPLl2Y=
Subject key identifier: 58:95:71:A8:2E:74:93:FE:FC:A8:8C:CA:3E:6E:C3:1F:BC:4F:DC:D0
Certificate issuer: /CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Certificate serial: 018C6717DC4069D2A011F8FE352AACC425EB
Authority key identifier: E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/WJVxqC50k_78qIzKPm7DH7xP3NA.roa
Signing time: Thu 14 Dec 2023 06:51:06 +0000
ROA not before: Thu 14 Dec 2023 06:51:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204548
IP address blocks: 81.28.6.0/24 maxlen: 24
83.229.84.0/24 maxlen: 24
83.229.85.0/24 maxlen: 24
83.229.86.0/24 maxlen: 24
83.229.87.0/24 maxlen: 24
103.13.211.0/24 maxlen: 24
185.139.230.0/24 maxlen: 24
194.36.88.0/24 maxlen: 24
63.250.59.0/24 maxlen: 24
63.250.60.0/24 maxlen: 24
195.238.122.0/24 maxlen: 24
45.83.41.0/24 maxlen: 24
185.237.97.0/24 maxlen: 24
185.237.96.0/24 maxlen: 24
185.53.210.0/24 maxlen: 24
185.237.14.0/24 maxlen: 24
185.237.15.0/24 maxlen: 24
185.47.174.0/24 maxlen: 24
2a06:c5c0:1100::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:67:17:dc:40:69:d2:a0:11:f8:fe:35:2a:ac:c4:25:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Validity
Not Before: Dec 14 06:51:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=589571a82e7493fefca88cca3e6ec31fbc4fdcd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9d:78:16:82:80:c6:10:3f:f0:d9:33:7d:e2:
49:13:5b:bc:b0:20:5b:45:fe:b7:43:cf:89:d4:06:
95:01:8d:41:06:5e:32:72:01:96:37:9f:34:b3:ac:
44:38:2f:8e:7a:47:f9:63:11:66:52:31:3b:9a:b1:
b8:76:b1:12:b5:5f:e7:13:df:79:ab:f3:8c:46:42:
36:64:84:a2:12:c8:da:d5:a7:e8:c9:9d:45:1a:28:
d7:cb:8f:16:d2:c4:21:36:38:33:74:0a:fa:16:e7:
e3:f0:d0:60:10:bd:b2:90:57:7e:e4:44:fb:35:ef:
1b:cd:22:b4:01:c2:16:35:b9:00:e5:99:89:3a:b3:
ad:ed:71:25:a9:4d:f7:ea:79:fe:a8:79:11:fa:c2:
f0:cc:6b:e1:c0:de:1b:eb:93:34:2f:1e:6e:20:ce:
83:fc:7b:ad:37:a4:54:02:7c:f0:56:14:e7:2c:70:
90:f2:a9:83:4a:2b:09:8c:0e:ad:69:80:61:eb:d2:
4f:5c:df:6d:d7:49:fe:ea:94:42:ed:cb:41:13:41:
75:0b:f5:1a:70:50:14:86:a8:2b:95:79:dd:12:3b:
25:9f:7c:b7:78:bd:65:95:d5:6e:36:31:eb:2c:65:
10:0e:72:9a:1f:be:0a:dd:60:59:49:8a:e2:ac:f7:
92:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:95:71:A8:2E:74:93:FE:FC:A8:8C:CA:3E:6E:C3:1F:BC:4F:DC:D0
X509v3 Authority Key Identifier:
keyid:E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/WJVxqC50k_78qIzKPm7DH7xP3NA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.41.0/24
63.250.59.0-63.250.60.255
81.28.6.0/24
83.229.84.0/22
103.13.211.0/24
185.47.174.0/24
185.53.210.0/24
185.139.230.0/24
185.237.14.0/23
185.237.96.0/23
194.36.88.0/24
195.238.122.0/24
IPv6:
2a06:c5c0:1100::/48
Signature Algorithm: sha256WithRSAEncryption
82:ee:64:81:fb:8b:b1:02:dc:e5:ef:d6:d3:a9:0f:41:ac:28:
98:02:4a:88:5b:ca:c4:3e:f9:71:5b:61:f1:92:a5:0e:fe:78:
cc:a7:fd:30:84:74:c5:dc:e0:cb:30:c6:8a:31:de:12:a7:a5:
93:60:d5:e6:e9:32:2f:ee:54:9a:15:f8:7c:1a:24:3d:35:21:
7e:7f:be:a3:11:e8:ec:27:d4:9a:aa:a6:23:96:8e:b9:6a:b6:
c1:94:98:6b:fd:24:08:80:45:87:7c:e7:35:05:6a:9f:7a:56:
10:b1:77:f8:5f:d7:e9:eb:89:25:7d:ca:4c:2a:90:d0:d0:5f:
2e:9f:f4:b5:90:d9:e2:b1:2b:28:3b:f6:79:5b:e3:2a:f0:5d:
28:71:61:47:33:7e:27:70:d4:84:97:6d:18:71:30:34:7a:46:
c3:09:8d:f8:f4:ce:b9:01:af:c0:e7:54:a1:19:5f:4e:f1:87:
54:3c:d7:c5:12:6d:3d:42:a9:94:f6:a0:98:84:23:28:c7:9e:
9a:d9:a4:72:99:3d:4c:c2:ac:bc:00:ac:b7:13:c2:d4:14:5a:
99:88:25:1e:1a:6a:90:08:f5:d1:55:d6:33:f6:6c:1a:29:28:
f9:29:de:ee:2c:77:ec:23:f8:84:2e:05:3c:51:e8:68:4d:d1:
89:f2:e2:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 14 12:03:15 2023 by rpki-client on console-ams.rpki-client.org