Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/0V23tHkDyh19YRftTfaLrYyLbz4.roa
File: 0V23tHkDyh19YRftTfaLrYyLbz4.roa (raw, json)
Hash identifier: S6vfLopzD8BRvh3mCM73TOyRg0ExUJ7H87zxDfJ8PJA=
Subject key identifier: D1:5D:B7:B4:79:03:CA:1D:7D:61:17:ED:4D:F6:8B:AD:8C:8B:6F:3E
Certificate issuer: /CN=af801984cc38f0a4fc5afe1adeab680c1b89e95b
Certificate serial: 0186A2EE91DE19FA7021992DF70469A56950
Authority key identifier: AF:80:19:84:CC:38:F0:A4:FC:5A:FE:1A:DE:AB:68:0C:1B:89:E9:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/0V23tHkDyh19YRftTfaLrYyLbz4.roa
Signing time: Thu 02 Mar 2023 15:26:29 +0000
ROA not before: Thu 02 Mar 2023 15:26:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5430
IP address blocks: 194.97.46.0/23 maxlen: 24
194.97.58.0/24 maxlen: 24
194.97.0.0/18 maxlen: 18
194.97.120.0/23 maxlen: 23
194.97.119.0/24 maxlen: 24
62.104.56.0/24 maxlen: 24
62.104.66.0/23 maxlen: 23
194.97.160.0/19 maxlen: 19
62.104.95.0/24 maxlen: 24
62.104.96.0/22 maxlen: 22
62.104.96.0/21 maxlen: 22
194.97.164.0/22 maxlen: 22
62.104.104.0/22 maxlen: 22
62.104.0.0/16 maxlen: 16
62.104.8.0/21 maxlen: 21
62.104.10.0/23 maxlen: 23
62.104.12.0/22 maxlen: 22
62.104.16.0/24 maxlen: 24
62.104.17.0/24 maxlen: 24
62.104.20.0/24 maxlen: 24
62.104.20.0/23 maxlen: 23
62.104.18.0/23 maxlen: 23
62.104.18.0/24 maxlen: 24
194.97.96.0/24 maxlen: 24
194.97.96.0/19 maxlen: 19
194.97.102.0/24 maxlen: 24
62.104.48.0/23 maxlen: 23
194.97.118.0/24 maxlen: 24
62.104.50.0/24 maxlen: 24
62.104.46.0/23 maxlen: 23
62.104.45.0/24 maxlen: 24
89.49.127.0/24 maxlen: 24
89.49.126.0/24 maxlen: 24
89.48.0.0/13 maxlen: 24
195.4.70.0/24 maxlen: 24
195.4.71.0/24 maxlen: 24
195.4.104.0/22 maxlen: 22
195.4.234.0/23 maxlen: 24
195.4.176.0/24 maxlen: 24
62.104.164.0/24 maxlen: 24
62.104.164.0/22 maxlen: 22
62.104.168.0/22 maxlen: 22
62.104.172.0/23 maxlen: 23
62.104.174.0/24 maxlen: 24
62.104.175.0/24 maxlen: 24
62.104.176.0/22 maxlen: 22
62.104.182.0/24 maxlen: 24
194.97.192.0/18 maxlen: 18
195.4.0.0/16 maxlen: 16
195.4.16.0/24 maxlen: 24
195.4.16.0/22 maxlen: 22
195.4.28.0/23 maxlen: 23
195.4.27.0/24 maxlen: 24
195.4.43.0/24 maxlen: 24
2001:748::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a2:ee:91:de:19:fa:70:21:99:2d:f7:04:69:a5:69:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af801984cc38f0a4fc5afe1adeab680c1b89e95b
Validity
Not Before: Mar 2 15:26:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d15db7b47903ca1d7d6117ed4df68bad8c8b6f3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:86:62:09:e9:24:64:24:92:17:11:2e:26:4b:
9c:5c:82:e4:c6:99:a6:4f:93:78:4c:96:b7:26:c7:
4d:fd:de:65:32:9b:d5:a0:c7:1c:9d:1d:f8:9c:c8:
eb:47:a7:2c:13:34:23:d9:4f:32:74:89:9d:f6:95:
82:48:3f:e5:59:a8:ee:48:69:74:1e:60:65:54:14:
3c:9b:5c:51:68:2c:af:2c:53:da:75:4f:0b:13:4d:
6d:2d:f9:e3:2b:11:86:78:f2:da:08:ff:6c:8e:31:
a1:9d:3e:49:16:ff:da:38:6a:aa:da:5c:3c:9d:ee:
0f:7f:72:d1:fb:39:67:53:7f:c2:f7:c6:95:e7:18:
1a:cf:a0:51:bc:b7:af:16:c0:67:d6:e6:a3:d4:44:
3b:bc:56:c5:88:d9:bd:74:b5:64:61:07:16:83:f6:
e7:01:45:60:c9:60:51:96:f3:0a:b3:5c:9d:83:21:
5e:8c:4d:4f:37:00:12:5d:c6:a2:65:d3:59:6c:25:
b1:7f:d6:43:53:ba:d2:53:3c:03:f5:18:c2:69:f9:
73:d3:cc:ff:96:01:00:e8:86:39:09:08:36:47:9f:
fd:0f:89:a0:57:8d:ef:91:ea:8a:bd:f4:db:4c:5f:
22:f1:79:c0:5b:46:2e:97:9f:cf:a7:bd:c9:76:46:
de:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:5D:B7:B4:79:03:CA:1D:7D:61:17:ED:4D:F6:8B:AD:8C:8B:6F:3E
X509v3 Authority Key Identifier:
keyid:AF:80:19:84:CC:38:F0:A4:FC:5A:FE:1A:DE:AB:68:0C:1B:89:E9:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/0V23tHkDyh19YRftTfaLrYyLbz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.104.0.0/16
89.48.0.0/13
194.97.0.0/18
194.97.96.0/19
194.97.160.0-194.97.255.255
195.4.0.0/16
IPv6:
2001:748::/32
Signature Algorithm: sha256WithRSAEncryption
61:0e:dc:40:0b:b3:84:6c:b5:da:98:49:68:40:07:c4:37:8d:
33:74:4b:2f:60:2a:0f:0c:63:30:4e:6e:f1:4d:32:5c:40:98:
f3:6e:c4:03:b3:c8:76:0c:42:7b:25:37:5b:b1:44:03:f6:9b:
d7:45:88:2b:45:86:03:a4:4e:cd:4b:95:96:c7:50:bd:63:16:
85:53:59:3e:06:25:87:fe:a8:69:e9:ff:eb:c9:27:12:d6:96:
19:87:51:ac:1b:4e:d7:ba:4a:98:6b:0c:27:15:b0:1c:c7:66:
68:dc:87:90:14:35:ff:90:3d:a9:39:f1:7b:d5:c7:0f:5c:cd:
c9:61:62:62:39:4a:a3:ce:88:17:4c:16:69:97:68:d4:7e:5b:
ba:a5:2d:6c:9f:20:21:19:a4:a1:6f:85:99:d7:3e:8f:28:56:
32:b3:16:be:84:20:da:0a:9c:cb:02:7a:82:87:9a:ad:8e:00:
25:b2:8b:4a:cb:3c:e7:69:03:85:2b:f7:74:32:d3:b6:c9:db:
91:b9:9d:fb:60:b1:e6:6e:52:0d:1a:fa:ba:b9:01:b6:e8:e3:
dc:47:39:b0:47:fb:2c:09:39:1d:4b:16:4c:61:6d:c4:01:5b:
17:14:0b:c3:b3:e5:47:4f:79:6a:dd:17:3c:57:33:1a:f0:e2:
e3:cc:9f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:30 2023 by rpki-client on console-ams.rpki-client.org