Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/WVVxTynu59oRTTvDWX2LC37ei3g.roa
File: WVVxTynu59oRTTvDWX2LC37ei3g.roa (raw, json)
Hash identifier: 6GBmiDJdxAO0BezWFy92eLzXBTfcn/213cSluKSJYgw=
Subject key identifier: 59:55:71:4F:29:EE:E7:DA:11:4D:3B:C3:59:7D:8B:0B:7E:DE:8B:78
Certificate issuer: /CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Certificate serial: 0187407E937117D79294E648DA2B07F41F39
Authority key identifier: E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/WVVxTynu59oRTTvDWX2LC37ei3g.roa
Signing time: Sun 02 Apr 2023 05:44:09 +0000
ROA not before: Sun 02 Apr 2023 05:44:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210329
IP address blocks: 81.28.4.0/24 maxlen: 24
83.229.68.0/24 maxlen: 24
83.229.69.0/24 maxlen: 24
83.229.75.0/24 maxlen: 24
81.28.5.0/24 maxlen: 24
194.146.24.0/24 maxlen: 24
103.241.64.0/24 maxlen: 24
63.250.58.0/24 maxlen: 24
195.238.123.0/24 maxlen: 24
45.91.170.0/24 maxlen: 24
185.127.17.0/24 maxlen: 24
185.127.16.0/24 maxlen: 24
185.237.98.0/24 maxlen: 24
185.127.18.0/24 maxlen: 24
185.127.19.0/24 maxlen: 24
91.223.236.0/24 maxlen: 24
185.237.99.0/24 maxlen: 24
185.237.12.0/24 maxlen: 24
185.237.13.0/24 maxlen: 24
194.146.25.0/24 maxlen: 24
212.86.104.0/24 maxlen: 24
212.86.105.0/24 maxlen: 24
2a06:c5c0:600::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:40:7e:93:71:17:d7:92:94:e6:48:da:2b:07:f4:1f:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Validity
Not Before: Apr 2 05:44:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5955714f29eee7da114d3bc3597d8b0b7ede8b78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0b:d7:d4:9e:45:33:4a:76:b6:4f:68:12:50:
6a:44:c4:1f:e2:16:d8:01:cb:c3:3c:0e:50:63:00:
19:fc:53:f3:dd:2e:54:92:4d:49:c9:29:fe:27:f6:
70:20:3c:96:56:73:1d:20:e6:10:78:b4:98:54:32:
00:36:54:7d:5b:a9:bb:c2:e2:4e:7b:6c:4b:d1:48:
dd:33:80:67:b0:e3:7e:a5:fa:f5:d0:ea:69:20:f9:
63:2e:84:fd:34:2b:66:b5:0b:e1:7f:e5:13:58:ee:
16:b3:da:03:66:3e:21:70:45:d4:32:53:3e:69:ab:
65:1d:a0:0f:2e:ed:ef:a1:1f:00:82:49:0a:98:39:
c7:d7:47:eb:ac:4e:e5:90:25:67:dc:a0:50:e5:dd:
fa:3b:34:d2:dc:63:73:d1:c5:15:16:8f:7f:0f:52:
57:fc:3a:ea:19:c0:1c:5f:fe:25:84:9a:64:d3:d8:
16:7a:31:c7:23:9e:28:f3:40:78:bf:70:c0:8d:61:
71:5f:86:7b:48:fe:3d:5c:46:bb:53:b7:6b:56:74:
9d:85:28:7d:cb:b1:fb:b4:1a:6a:ce:a5:1c:d1:cc:
2c:73:f8:fc:31:4d:72:a7:37:c2:26:f4:56:bd:62:
01:de:0c:20:9b:9f:77:2f:ad:f5:04:ba:93:0d:52:
85:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:55:71:4F:29:EE:E7:DA:11:4D:3B:C3:59:7D:8B:0B:7E:DE:8B:78
X509v3 Authority Key Identifier:
keyid:E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/WVVxTynu59oRTTvDWX2LC37ei3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.170.0/24
63.250.58.0/24
81.28.4.0/23
83.229.68.0/23
83.229.75.0/24
91.223.236.0/24
103.241.64.0/24
185.127.16.0/22
185.237.12.0/23
185.237.98.0/23
194.146.24.0/23
195.238.123.0/24
212.86.104.0/23
IPv6:
2a06:c5c0:600::/48
Signature Algorithm: sha256WithRSAEncryption
64:b6:42:59:45:a8:f1:c8:89:90:7a:09:d4:bb:76:d0:60:87:
a8:54:a4:be:28:b8:64:6b:3b:ef:b5:c1:c3:a2:0e:61:a8:61:
7b:0c:c7:46:dc:16:f1:02:3e:03:62:7e:e0:8f:50:e3:fb:c6:
82:b4:76:79:9d:f4:97:65:40:24:c1:43:f6:3e:63:d9:35:91:
a5:84:d7:9c:62:9f:c6:c0:75:fa:2a:e7:5e:95:d5:de:18:f3:
9b:9c:4f:e3:c2:00:5a:7b:2c:52:11:08:53:cd:3c:f1:e0:da:
61:a6:8d:dd:49:79:5d:5b:21:54:b6:23:de:ec:0d:73:69:9e:
9d:52:4c:cb:ea:ae:73:14:b1:61:7f:7e:b1:a6:16:88:2b:f6:
be:5b:41:21:44:ba:d7:82:03:27:39:34:3e:a0:42:e3:7c:17:
7e:56:7c:f6:7e:5f:82:d3:51:c1:92:1a:c7:60:3a:da:cd:4d:
71:c0:8e:ab:b1:19:98:d7:50:b0:ee:1f:0f:ed:7b:fc:ce:61:
87:93:65:ea:9f:56:de:8a:d2:c9:0a:7b:ec:be:e5:ae:ec:5f:
96:45:8b:ea:bf:f5:07:e6:5f:36:c4:8d:87:24:b2:c4:7f:5b:
40:e8:5d:8f:c8:19:60:7b:a0:dd:c7:d6:2f:88:8a:dd:3e:d4:
da:97:91:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:31 2023 by rpki-client on console-fra.rpki-client.org