Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/6N0x_GM91hPwWz9sxvDZmOErK3c.roa
File: 6N0x_GM91hPwWz9sxvDZmOErK3c.roa (raw, json)
Hash identifier: z4j5p8bqDc0HUF000QkhHmfE40tYd9KreL2OjHL+6ac=
Subject key identifier: E8:DD:31:FC:63:3D:D6:13:F0:5B:3F:6C:C6:F0:D9:98:E1:2B:2B:77
Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Certificate serial: 018722A7D2312F1C25271F86122FD6943A3B
Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/6N0x_GM91hPwWz9sxvDZmOErK3c.roa
Signing time: Mon 27 Mar 2023 10:40:36 +0000
ROA not before: Mon 27 Mar 2023 10:40:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203020
IP address blocks: 45.144.88.0/22 maxlen: 24
87.239.254.0/24 maxlen: 32
45.149.28.0/22 maxlen: 24
89.44.205.0/24 maxlen: 32
91.228.216.0/24 maxlen: 24
185.36.254.0/24 maxlen: 32
185.217.64.0/22 maxlen: 22
185.166.84.0/24 maxlen: 32
86.105.183.0/24 maxlen: 32
185.188.61.0/24 maxlen: 24
185.188.62.0/24 maxlen: 24
185.188.63.0/24 maxlen: 24
94.46.206.0/24 maxlen: 32
185.201.188.0/24 maxlen: 32
185.184.228.0/24 maxlen: 32
89.40.24.0/24 maxlen: 32
185.152.248.0/22 maxlen: 32
5.154.174.0/24 maxlen: 24
80.246.30.0/24 maxlen: 32
45.156.224.0/22 maxlen: 32
185.153.151.0/24 maxlen: 32
188.119.154.0/24 maxlen: 32
185.160.44.0/22 maxlen: 32
185.96.162.0/24 maxlen: 32
77.246.152.0/22 maxlen: 22
45.95.24.0/22 maxlen: 32
185.152.36.0/22 maxlen: 32
89.35.249.0/24 maxlen: 32
185.108.104.0/24 maxlen: 32
185.108.105.0/24 maxlen: 32
195.47.194.0/24 maxlen: 32
2a06:4a00::/29 maxlen: 32
2a05:28c0::/29 maxlen: 32
2a06:5700::/29 maxlen: 32
2a01:4740::/32 maxlen: 32
2a06:46c0::/29 maxlen: 32
2a06:5000::/29 maxlen: 32
2a05:f4c0::/29 maxlen: 29
2a06:3040::/29 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:22:a7:d2:31:2f:1c:25:27:1f:86:12:2f:d6:94:3a:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Validity
Not Before: Mar 27 10:40:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e8dd31fc633dd613f05b3f6cc6f0d998e12b2b77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8f:a1:46:dc:df:42:79:46:44:2a:e1:12:46:
7b:d2:35:ed:1c:e6:5a:02:a6:8a:ee:31:6b:51:7c:
98:0c:82:63:9c:68:a8:48:34:31:08:45:96:64:87:
e2:60:a2:30:13:c0:fd:2a:28:0f:48:fa:81:88:db:
8d:16:e0:38:f7:81:1f:7e:95:99:31:b3:4f:79:c4:
ad:4c:c1:d0:dc:2d:e2:cd:58:60:b2:20:84:fc:28:
cd:eb:c3:d0:0b:a4:58:d6:0d:ab:25:b4:2e:30:a3:
ec:31:01:f6:3b:58:10:bb:33:eb:41:8f:05:a4:d8:
40:e1:b3:41:b8:b9:3a:bb:ef:dc:0f:3f:01:48:c8:
f8:18:1c:c9:c2:bd:7d:37:08:b8:00:68:b0:17:8b:
2a:28:73:19:03:4b:96:0a:60:c9:99:92:46:a7:52:
b3:af:10:b3:f8:0f:f3:75:0b:0a:05:19:d5:cb:43:
31:54:0e:a9:2a:1b:95:77:b8:54:fe:7d:43:5d:37:
0d:7b:5e:94:57:64:f5:a6:e7:e5:9e:06:81:03:4a:
b8:62:a3:9a:26:92:5f:ff:31:ce:c5:e0:52:3f:b2:
4d:12:57:46:6f:6a:85:f7:20:79:af:92:05:86:35:
d2:14:8c:8d:03:2c:fd:c2:a2:7a:fa:f5:9e:dc:01:
59:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:DD:31:FC:63:3D:D6:13:F0:5B:3F:6C:C6:F0:D9:98:E1:2B:2B:77
X509v3 Authority Key Identifier:
keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/6N0x_GM91hPwWz9sxvDZmOErK3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.174.0/24
45.95.24.0/22
45.144.88.0/22
45.149.28.0/22
45.156.224.0/22
77.246.152.0/22
80.246.30.0/24
86.105.183.0/24
87.239.254.0/24
89.35.249.0/24
89.40.24.0/24
89.44.205.0/24
91.228.216.0/24
94.46.206.0/24
185.36.254.0/24
185.96.162.0/24
185.108.104.0/23
185.152.36.0/22
185.152.248.0/22
185.153.151.0/24
185.160.44.0/22
185.166.84.0/24
185.184.228.0/24
185.188.61.0-185.188.63.255
185.201.188.0/24
185.217.64.0/22
188.119.154.0/24
195.47.194.0/24
IPv6:
2a01:4740::/32
2a05:28c0::/29
2a05:f4c0::/29
2a06:3040::/29
2a06:46c0::/29
2a06:4a00::/29
2a06:5000::/29
2a06:5700::/29
Signature Algorithm: sha256WithRSAEncryption
ab:bd:c2:b5:74:04:9b:ed:79:fb:a1:39:45:25:f1:81:15:69:
26:93:f0:6f:7d:aa:b4:28:3a:c1:b3:5d:f7:d7:51:9e:10:6c:
f6:ed:4e:f3:29:5e:96:a2:39:da:8e:1c:e5:35:a2:6e:34:e8:
27:5a:1e:6b:06:52:ce:06:30:40:7b:08:61:ec:10:2e:df:3e:
8e:cb:24:c3:95:df:7b:94:4e:a1:6d:81:9e:46:2f:ab:bc:0b:
33:0d:d4:b9:d9:cf:42:d8:f6:33:d2:8d:f1:d9:7d:71:be:a0:
01:db:2e:69:cb:c0:16:09:02:41:7d:bf:aa:74:02:8b:4b:5a:
7c:8d:13:39:5d:8d:44:4b:3d:70:88:f9:04:62:8c:f0:e6:5a:
9b:f1:ff:e0:c5:91:22:e3:17:b4:b9:6c:26:1b:f6:d2:4b:a1:
38:46:7b:c6:7c:09:62:d3:38:e2:80:41:5e:a5:2b:c4:a5:70:
90:5c:d8:e9:08:5e:e8:bd:d3:5b:fc:80:78:12:01:1b:79:a1:
57:ab:12:d1:98:84:ed:5d:cb:9c:cf:c6:da:14:13:36:53:59:
93:94:70:14:f9:82:91:c9:dd:fc:e8:95:2c:fe:32:29:c9:0b:
38:7f:f5:18:63:34:b5:40:73:ad:ec:32:39:39:05:34:ad:76:
1c:06:58:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:22 2023 by rpki-client on console-ams.rpki-client.org