Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/g4SjYG-oKTpPYeDyUzvNNIn29fM.roa
File: g4SjYG-oKTpPYeDyUzvNNIn29fM.roa (raw, json)
Hash identifier: O1X7HQuTsqYs4nh/uWc5T2r7VdqO2z3S81LPWegxKs4=
Subject key identifier: 83:84:A3:60:6F:A8:29:3A:4F:61:E0:F2:53:3B:CD:34:89:F6:F5:F3
Certificate issuer: /CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Certificate serial: 01856EB8E4B637BDECB4B3D50D01608D3CE7
Authority key identifier: E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/g4SjYG-oKTpPYeDyUzvNNIn29fM.roa
Signing time: Sun 01 Jan 2023 19:04:48 +0000
ROA not before: Sun 01 Jan 2023 19:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210329
IP address blocks: 81.28.4.0/24 maxlen: 24
83.229.68.0/24 maxlen: 24
83.229.69.0/24 maxlen: 24
83.229.75.0/24 maxlen: 24
81.28.5.0/24 maxlen: 24
194.146.24.0/24 maxlen: 24
63.250.58.0/24 maxlen: 24
45.91.170.0/24 maxlen: 24
185.127.17.0/24 maxlen: 24
185.127.16.0/24 maxlen: 24
185.237.98.0/24 maxlen: 24
185.127.18.0/24 maxlen: 24
185.127.19.0/24 maxlen: 24
91.223.236.0/24 maxlen: 24
185.237.99.0/24 maxlen: 24
185.237.12.0/24 maxlen: 24
185.237.13.0/24 maxlen: 24
194.146.25.0/24 maxlen: 24
212.86.104.0/24 maxlen: 24
212.86.105.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:b8:e4:b6:37:bd:ec:b4:b3:d5:0d:01:60:8d:3c:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Validity
Not Before: Jan 1 19:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8384a3606fa8293a4f61e0f2533bcd3489f6f5f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d2:7e:42:73:f6:de:43:77:7c:1c:fc:16:0b:
70:78:c0:05:96:d3:27:24:e8:fc:24:c4:4b:71:83:
4b:15:a8:ea:ef:9e:94:3c:6c:c5:1f:25:77:c8:37:
67:50:d4:dd:a3:7d:b2:8d:9e:03:f2:65:09:ab:46:
3b:1d:a4:38:d3:16:ea:85:63:3b:11:f2:cb:cf:54:
57:f7:d5:ae:c2:69:c1:ae:77:f2:a9:26:ba:5b:76:
3c:74:29:c1:47:f9:46:99:58:69:87:23:fa:57:5e:
6a:4c:ae:2f:94:0c:02:99:11:56:b1:6e:62:53:0f:
06:32:01:50:cb:98:5c:fd:c8:c8:37:06:cb:fd:2a:
cb:93:32:b0:6b:a5:c5:94:15:b5:62:96:00:d7:7a:
7f:4b:95:4d:af:bb:6e:50:57:32:76:fa:65:59:fd:
a7:05:cc:12:62:3b:9f:67:32:60:fa:7e:3a:da:67:
0d:18:49:fd:84:2f:84:d0:48:04:9d:58:b7:aa:d3:
78:06:b7:2a:1e:27:8f:c4:46:da:b7:be:e8:3d:4b:
2b:98:9e:94:c2:63:59:52:8b:c3:77:25:6a:56:c8:
fa:ca:7e:f4:85:23:b5:ff:33:83:67:a0:07:bd:81:
ca:1e:d7:2b:fd:4c:8c:88:79:6e:64:7e:a6:b9:e6:
dd:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:84:A3:60:6F:A8:29:3A:4F:61:E0:F2:53:3B:CD:34:89:F6:F5:F3
X509v3 Authority Key Identifier:
keyid:E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/g4SjYG-oKTpPYeDyUzvNNIn29fM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.170.0/24
63.250.58.0/24
81.28.4.0/23
83.229.68.0/23
83.229.75.0/24
91.223.236.0/24
185.127.16.0/22
185.237.12.0/23
185.237.98.0/23
194.146.24.0/23
212.86.104.0/23
Signature Algorithm: sha256WithRSAEncryption
61:5a:8e:10:92:ab:67:d0:45:7a:ce:43:2d:6e:80:bf:8f:43:
b2:78:60:74:a2:14:70:ff:5f:7e:44:b5:b8:3b:96:ae:56:5e:
ec:18:90:57:a6:18:a7:e4:5f:c9:d1:29:cc:cc:c9:6e:fc:88:
22:83:e0:11:ee:ad:69:7d:58:6e:05:cf:58:82:ca:89:db:27:
a6:a7:1c:64:23:64:d7:f0:92:9c:35:ae:5c:5b:30:be:01:a0:
6e:73:ff:1a:f4:bc:24:e8:cc:7e:f5:71:5d:ad:fc:19:51:1e:
2f:93:89:35:82:d4:ad:56:a4:1d:4c:38:cb:4a:5c:4f:78:be:
f2:c9:a8:d4:c8:ca:d9:a2:de:b5:77:a6:b2:62:c4:d3:55:b3:
cf:e1:44:51:53:79:d8:cb:df:90:e5:66:52:c1:66:68:e2:08:
d8:60:08:71:6e:67:b1:8a:39:54:15:52:02:37:2e:e3:16:b0:
c7:2a:d5:37:95:73:59:e2:46:43:33:0e:21:26:7f:da:eb:1c:
0b:d7:ce:fa:7c:ad:69:ee:6e:c6:42:cd:40:d6:86:40:89:6d:
08:75:41:04:ca:4e:1f:61:e5:1b:47:b5:bc:c2:31:68:85:77:
d2:a4:02:ee:ae:ba:20:25:bc:f3:60:55:64:7d:36:42:6c:4c:
68:4d:44:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:25 2023 by rpki-client on console-ams.rpki-client.org