Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/GO16sjnWUqFCHED2T3ah81Ltdm0.roa
File: GO16sjnWUqFCHED2T3ah81Ltdm0.roa (raw, json)
Hash identifier: hfgnEhi9uGvQ+OLXPP8kTog/Ix+summiyNriYpcldCU=
Subject key identifier: 18:ED:7A:B2:39:D6:52:A1:42:1C:40:F6:4F:76:A1:F3:52:ED:76:6D
Certificate issuer: /CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
Certificate serial: 01856D94206EDB030C6706C0F8E39E7DB929
Authority key identifier: F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/GO16sjnWUqFCHED2T3ah81Ltdm0.roa
Signing time: Sun 01 Jan 2023 13:45:02 +0000
ROA not before: Sun 01 Jan 2023 13:45:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205585
IP address blocks: 185.220.226.0/24 maxlen: 24
185.220.227.0/24 maxlen: 24
185.143.232.0/24 maxlen: 24
185.143.232.0/22 maxlen: 24
185.143.233.0/24 maxlen: 24
185.143.234.0/24 maxlen: 24
185.143.235.0/24 maxlen: 24
2a0c:a7c0::/48 maxlen: 48
2a0c:a7c0:3::/48 maxlen: 48
2a0c:a7c0::/46 maxlen: 48
2a0c:a7c0:1::/48 maxlen: 48
2a0c:a7c0:2::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:94:20:6e:db:03:0c:67:06:c0:f8:e3:9e:7d:b9:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
Validity
Not Before: Jan 1 13:45:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=18ed7ab239d652a1421c40f64f76a1f352ed766d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:12:e2:c7:9d:37:cb:7c:dc:d0:d4:37:06:a2:
a7:bd:ad:98:b5:84:3f:fb:6c:56:46:f6:e1:d9:2c:
c5:23:c1:0e:ea:df:b1:3d:63:a3:aa:59:69:16:72:
5d:78:59:44:28:48:85:3a:dd:16:19:e4:81:7b:fb:
4a:ed:bd:36:d6:db:a3:fc:9d:7e:79:bb:dc:c7:32:
97:f7:13:0c:f9:18:ad:58:27:6e:09:da:45:46:d4:
d3:fd:3d:96:fa:94:5f:ee:78:4b:b0:0b:40:7c:a1:
12:19:69:38:1f:41:a7:a3:ea:04:44:3e:c2:9c:4f:
18:41:a1:cb:8f:f1:82:d4:72:e0:39:92:4d:92:81:
a5:e4:65:db:40:e6:c0:7f:99:7d:fa:45:6b:76:99:
d8:60:8d:e3:a6:74:d5:0b:c6:cd:9f:fa:6d:ed:20:
c5:79:bc:19:1c:a5:fa:2b:53:67:8c:5f:3f:af:90:
04:1f:17:6a:a1:4d:25:f9:52:bc:4b:ba:2e:0c:1e:
b6:91:00:ed:92:f9:43:19:3a:c8:b7:3c:a4:00:2a:
ec:4a:97:ed:69:4e:63:f5:39:98:0b:93:8e:4c:48:
95:7d:ca:57:fa:76:19:41:cc:44:db:15:74:f8:e7:
59:fe:61:a8:9d:25:5d:6f:b8:6f:13:c7:05:1f:c3:
5c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:ED:7A:B2:39:D6:52:A1:42:1C:40:F6:4F:76:A1:F3:52:ED:76:6D
X509v3 Authority Key Identifier:
keyid:F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/GO16sjnWUqFCHED2T3ah81Ltdm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.143.232.0/22
185.220.226.0/23
IPv6:
2a0c:a7c0::/46
Signature Algorithm: sha256WithRSAEncryption
9d:14:98:00:c6:37:1b:cd:c4:61:32:e7:33:57:a1:70:4c:04:
e5:f5:76:be:81:e8:c1:7a:69:4c:2b:6b:e9:eb:2f:af:6f:84:
44:38:4e:88:da:f6:93:60:15:29:f4:d0:e4:82:ec:c3:77:61:
d5:1c:23:c6:19:58:49:9c:d2:43:43:81:e6:c1:b9:04:33:a9:
5b:ed:e0:2e:6f:4e:61:ee:a8:f7:57:98:d8:a7:66:eb:47:91:
79:86:c7:56:c7:6f:04:68:ec:75:42:4a:1c:b9:b5:15:7d:79:
5e:62:51:f7:ea:be:41:97:f9:c0:8a:ad:70:b6:10:35:f3:58:
af:0c:33:ca:d7:da:43:89:1f:9d:94:2c:d4:fb:96:98:16:f3:
da:84:83:27:44:f8:2f:98:22:4a:29:ef:76:4d:44:63:14:db:
7f:9e:33:14:7c:36:4c:f1:56:e9:af:95:2d:48:e1:7d:c2:53:
69:31:16:c8:b2:7b:8c:37:27:7d:3f:01:16:50:76:09:09:3c:
14:e9:4a:87:69:7b:c8:37:a8:af:c6:cf:fd:64:e7:80:d1:da:
b2:7c:50:70:aa:b7:ea:21:83:b6:7c:8e:cd:5b:fc:11:02:3b:
78:2e:df:c8:87:c8:f9:a6:68:91:a4:21:72:ce:57:47:98:99:
1b:33:b4:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:32 2023 by rpki-client on console-fra.rpki-client.org