Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/rWIlSCFMcscvCU-3GV8f2TqHyT0.roa
File: rWIlSCFMcscvCU-3GV8f2TqHyT0.roa (raw, json)
Hash identifier: CXMS83JW5yHTbUrF0XG7bPygL0i4SP0eZZdeKyTas/o=
Subject key identifier: AD:62:25:48:21:4C:72:C7:2F:09:4F:B7:19:5F:1F:D9:3A:87:C9:3D
Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Certificate serial: 01872D46D39E369C88BFAF4A7627BCBDF403
Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/rWIlSCFMcscvCU-3GV8f2TqHyT0.roa
Signing time: Wed 29 Mar 2023 12:10:29 +0000
ROA not before: Wed 29 Mar 2023 12:10:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207990
IP address blocks: 194.53.70.0/24 maxlen: 32
45.156.224.0/22 maxlen: 32
194.124.240.0/24 maxlen: 32
194.124.239.0/24 maxlen: 32
194.124.248.0/24 maxlen: 32
194.124.247.0/24 maxlen: 32
193.228.58.0/23 maxlen: 32
188.119.154.0/24 maxlen: 32
45.66.176.0/22 maxlen: 32
45.154.192.0/22 maxlen: 32
193.254.27.0/24 maxlen: 32
193.254.28.0/24 maxlen: 32
45.82.96.0/22 maxlen: 32
45.84.228.0/22 maxlen: 32
139.28.120.0/22 maxlen: 32
185.36.254.0/24 maxlen: 32
185.223.248.0/22 maxlen: 32
63.141.36.0/23 maxlen: 32
194.0.133.0/24 maxlen: 32
194.0.136.0/24 maxlen: 32
Validation: Failed, certificate revoked on Tue 04 Apr 2023 06:16:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:2d:46:d3:9e:36:9c:88:bf:af:4a:76:27:bc:bd:f4:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Validity
Not Before: Mar 29 12:10:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad622548214c72c72f094fb7195f1fd93a87c93d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:83:91:01:82:c7:65:3a:ee:67:75:43:d3:83:
42:b5:fe:e4:c5:61:c2:22:d3:b1:18:01:c1:78:d9:
5f:ba:77:12:a9:6d:87:37:98:ff:91:c5:27:81:ae:
8d:22:bb:a3:d8:14:af:be:c2:b9:84:d4:d1:12:e0:
0c:48:d5:2c:f3:58:d1:80:95:d6:d2:50:66:1f:43:
51:64:90:b7:5b:1d:b9:5b:3e:ec:fe:16:99:2f:98:
ed:cf:85:b0:07:a0:c0:19:25:ca:58:6b:8d:3b:58:
8f:ba:3a:fb:db:67:ca:c2:ad:8e:10:73:e8:e5:29:
bc:0c:b8:d0:83:08:84:f3:1c:bc:68:eb:dd:27:68:
59:cc:20:68:0f:0c:4d:31:8a:a5:ba:2d:2a:9e:00:
0a:20:89:02:1e:0c:24:55:0f:55:72:fb:51:20:02:
e4:96:6b:3f:37:e8:91:99:24:58:fc:e8:22:f2:85:
88:a1:af:49:4d:71:bd:00:88:ce:21:e2:46:d1:9c:
46:57:91:ac:5b:84:43:b9:8d:aa:30:38:39:ed:4c:
86:e6:15:c9:79:8c:e5:45:d3:08:69:d7:7f:5d:76:
e3:0e:87:83:43:a0:52:18:bc:14:a6:cc:9d:78:f7:
bc:4e:97:58:b3:ac:40:4a:53:82:3f:3d:2c:a5:dc:
36:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:62:25:48:21:4C:72:C7:2F:09:4F:B7:19:5F:1F:D9:3A:87:C9:3D
X509v3 Authority Key Identifier:
keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/rWIlSCFMcscvCU-3GV8f2TqHyT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.176.0/22
45.82.96.0/22
45.84.228.0/22
45.154.192.0/22
45.156.224.0/22
63.141.36.0/23
139.28.120.0/22
185.36.254.0/24
185.223.248.0/22
188.119.154.0/24
193.228.58.0/23
193.254.27.0-193.254.28.255
194.0.133.0/24
194.0.136.0/24
194.53.70.0/24
194.124.239.0-194.124.240.255
194.124.247.0-194.124.248.255
Signature Algorithm: sha256WithRSAEncryption
1d:56:c6:09:19:81:b3:ad:92:8f:20:a7:6b:4c:83:43:fe:f7:
28:4b:ca:4a:5b:e3:16:ea:a3:95:52:f5:46:fe:b6:1e:02:2f:
ec:95:a0:40:97:b9:74:3a:c8:d3:af:b0:42:42:40:4c:3c:df:
ea:fb:2b:fc:f8:f8:e3:bb:e5:78:77:5c:a2:d9:b4:12:97:59:
a9:cb:3f:e2:13:9a:75:61:46:2a:cd:40:cc:89:3d:f1:8f:af:
86:63:d0:be:78:5d:06:e6:32:e4:11:5f:70:08:5e:48:c8:6a:
74:18:18:3a:50:33:bb:da:5a:c6:d0:15:d4:ea:ad:ce:bf:df:
cf:9f:c6:ef:d4:a6:5d:6d:70:84:d0:96:1f:6e:4c:4e:27:3d:
62:e4:ed:ea:a2:09:0f:c8:38:6c:83:d2:fa:d6:1b:6c:87:65:
03:3d:d4:57:d5:6a:d7:26:9d:cd:34:c2:d4:0f:c0:ad:51:27:
7f:f4:a1:f6:b1:db:52:e8:73:c0:9c:a8:8b:1f:82:f3:c2:7a:
d5:2f:a0:9c:7b:ad:0f:c6:1d:40:bf:6e:06:c3:d4:d5:a4:43:
0e:da:00:29:6b:38:93:5a:78:2e:33:35:a5:87:54:db:a3:48:
54:68:9c:b2:43:b0:74:0d:43:cb:89:1f:ed:80:42:6a:6c:60:
5f:d6:ef:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:47 2024 by rpki-client on console-ams.rpki-client.org