Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/_XkuhpSKUvIAVUseXuD9t2shBVo.roa
File: _XkuhpSKUvIAVUseXuD9t2shBVo.roa (raw, json)
Hash identifier: fkUxno/Uo3d8RltWX8UVMrQWp8q+idd+4FTGPPkXafQ=
Subject key identifier: FD:79:2E:86:94:8A:52:F2:00:55:4B:1E:5E:E0:FD:B7:6B:21:05:5A
Certificate issuer: /CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Certificate serial: 0189C52BEF35D70F2100D5935F1728BB74F4
Authority key identifier: E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/_XkuhpSKUvIAVUseXuD9t2shBVo.roa
Signing time: Sat 05 Aug 2023 10:08:58 +0000
ROA not before: Sat 05 Aug 2023 10:08:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 36007
IP address blocks: 45.91.171.0/24 maxlen: 24
185.53.209.0/24 maxlen: 24
103.13.211.0/24 maxlen: 24
103.241.66.0/24 maxlen: 24
103.45.245.0/24 maxlen: 24
103.45.246.0/24 maxlen: 24
185.47.172.0/24 maxlen: 24
91.223.169.0/24 maxlen: 24
91.202.170.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c5:2b:ef:35:d7:0f:21:00:d5:93:5f:17:28:bb:74:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Validity
Not Before: Aug 5 10:08:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd792e86948a52f200554b1e5ee0fdb76b21055a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c9:1f:0c:f9:b0:7a:3e:63:54:21:f0:7d:44:
06:a2:db:33:26:ff:fe:c5:ef:79:f1:13:b4:9c:52:
34:92:f1:30:d0:28:8f:13:17:c5:40:09:6b:f5:7b:
4e:49:23:8f:1d:6c:d6:8f:ce:c5:d5:fe:d2:67:0c:
1f:b4:57:af:4d:6f:52:c2:bc:28:e2:64:e9:83:56:
09:66:c1:c0:cc:34:11:3a:05:8a:d9:19:91:c0:e0:
a9:6a:9c:6e:89:47:74:be:3d:4a:ad:9d:35:83:b0:
8f:18:79:96:b4:60:22:b4:69:91:a5:03:44:52:f1:
db:de:e8:ad:dc:9c:06:52:0b:0e:3d:79:0e:9f:81:
a2:38:cb:79:53:dc:36:9a:e8:dc:9d:a9:71:33:e8:
25:ab:18:94:80:ba:88:95:15:95:e7:d0:29:7c:c1:
4f:94:a2:c2:bf:a3:c7:c1:87:2e:b5:c3:55:cf:b4:
1d:24:85:d8:0f:64:65:9c:33:6e:c9:3b:09:5d:24:
4a:eb:ed:0a:66:c8:ea:1b:fa:5c:30:12:75:84:b1:
ad:7a:ce:fa:6d:92:56:ea:e4:56:60:f2:16:a4:b3:
bc:f4:a0:39:a1:07:05:e8:64:b3:ce:4b:ea:62:c6:
a8:ee:70:38:7c:93:ba:69:26:fd:82:36:7f:81:aa:
a8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:79:2E:86:94:8A:52:F2:00:55:4B:1E:5E:E0:FD:B7:6B:21:05:5A
X509v3 Authority Key Identifier:
keyid:E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/_XkuhpSKUvIAVUseXuD9t2shBVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.171.0/24
91.202.170.0/24
91.223.169.0/24
103.13.211.0/24
103.45.245.0-103.45.246.255
103.241.66.0/24
185.47.172.0/24
185.53.209.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:c5:da:e3:2f:2b:b4:df:8e:9d:10:74:b6:f7:13:fe:c5:37:
cb:c0:3c:65:cd:87:34:e0:d1:c0:8b:62:5b:d3:8a:62:1f:29:
1a:00:6a:42:a4:41:75:d9:db:b7:cd:af:24:fa:1d:fb:53:1e:
2e:0a:59:8e:02:c6:85:75:fd:0d:30:76:76:94:38:68:97:54:
a6:d7:de:f1:56:ac:71:51:95:be:68:b2:37:8e:c3:b3:61:a2:
b8:e5:ac:84:b5:a9:fc:5a:25:cc:02:7f:d8:a3:6b:01:c9:9e:
78:30:e7:d5:41:b8:12:c3:b6:32:8e:0f:32:ea:5f:1c:bd:58:
9b:56:eb:c1:57:37:5c:e6:a1:dd:a8:39:9c:85:96:9e:74:eb:
ff:42:00:5c:69:93:54:8b:95:89:d3:35:a7:6b:1b:2e:04:f1:
fa:93:a4:7b:2b:bc:3b:f3:98:3c:ce:ef:95:d1:cd:6c:72:a3:
b9:45:a4:29:07:a8:a3:fc:e2:3d:f9:e6:5f:aa:ec:8a:dc:f7:
ff:5f:e6:8e:bb:16:2b:75:4d:46:44:32:1a:a6:b2:36:9a:96:
e6:df:7c:ac:e0:af:ac:a7:e4:1a:40:7a:2f:14:0d:e1:de:36:
96:30:11:17:de:3a:65:c5:4d:d2:85:df:81:0a:52:d2:ef:a6:
05:f6:36:1a
-----BEGIN CERTIFICATE-----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Generated at Tue Aug 15 11:18:14 2023 by rpki-client on console-ams.rpki-client.org