Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/_0UDEaaUinMAXy0n7w0ZWidUreM.roa
File: _0UDEaaUinMAXy0n7w0ZWidUreM.roa (raw, json)
Hash identifier: 5uN4uuU7rjAyOu6LhnAkfJlWiNfFl1opOb/xmP+twM0=
Subject key identifier: FF:45:03:11:A6:94:8A:73:00:5F:2D:27:EF:0D:19:5A:27:54:AD:E3
Certificate issuer: /CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Certificate serial: 0187E0C24F2FDF528560B42E47D2D571A66A
Authority key identifier: D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/_0UDEaaUinMAXy0n7w0ZWidUreM.roa
Signing time: Wed 03 May 2023 08:37:23 +0000
ROA not before: Wed 03 May 2023 08:37:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206487
IP address blocks: 89.140.16.0/23 maxlen: 24
5.40.106.0/24 maxlen: 24
62.82.158.0/24 maxlen: 24
5.40.136.0/24 maxlen: 24
5.40.138.0/24 maxlen: 24
5.40.149.0/24 maxlen: 24
5.40.156.0/24 maxlen: 24
5.40.80.0/23 maxlen: 24
5.40.85.0/24 maxlen: 24
62.174.66.0/24 maxlen: 24
62.175.252.0/24 maxlen: 24
62.175.253.0/24 maxlen: 24
95.39.61.0/24 maxlen: 24
5.40.18.0/24 maxlen: 24
62.82.50.0/24 maxlen: 24
5.40.244.0/24 maxlen: 24
5.40.41.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e0:c2:4f:2f:df:52:85:60:b4:2e:47:d2:d5:71:a6:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Validity
Not Before: May 3 08:37:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff450311a6948a73005f2d27ef0d195a2754ade3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:28:b2:66:a4:8b:49:4d:40:f7:33:9a:38:cb:
92:a6:a0:61:6e:33:80:d1:f5:4c:ce:af:d5:7f:ea:
be:65:fd:4e:be:20:1f:90:6f:21:45:ce:09:5f:f4:
8d:1b:c0:b7:53:e6:9a:56:7b:6f:d4:ab:2f:1a:7e:
e9:d2:66:40:ca:d5:73:28:a3:b1:04:b1:8e:b1:1b:
76:d0:08:49:e9:15:d3:0e:10:fa:00:ee:1e:80:f6:
59:7b:ba:c9:29:c4:c8:bf:d8:bc:22:59:8c:55:a5:
fc:51:98:d8:4a:68:86:b8:aa:f4:d6:fd:0e:46:f9:
e3:da:e1:15:71:9f:49:a1:da:0a:3f:ba:3f:63:e0:
38:da:27:b1:93:83:42:a3:e3:0f:4c:b5:2a:fc:55:
44:f8:43:3b:0a:eb:16:f7:34:3b:b5:14:ec:fb:0a:
0a:53:4b:76:df:ac:0e:bb:3a:b3:99:f0:0e:ae:b9:
ed:ae:a9:4f:cb:06:71:48:20:43:39:28:35:e0:a4:
b4:16:a8:43:b3:f7:f6:a7:84:61:0c:f7:3e:0e:d3:
99:ec:ff:dd:af:d1:08:4e:11:4c:8a:6d:22:b2:2f:
5b:1e:4e:39:50:63:19:eb:b9:ca:c6:fb:db:b6:d0:
49:26:50:d4:52:de:ce:4b:c9:58:40:31:f1:79:94:
11:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:45:03:11:A6:94:8A:73:00:5F:2D:27:EF:0D:19:5A:27:54:AD:E3
X509v3 Authority Key Identifier:
keyid:D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/_0UDEaaUinMAXy0n7w0ZWidUreM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.40.18.0/24
5.40.41.0/24
5.40.80.0/23
5.40.85.0/24
5.40.106.0/24
5.40.136.0/24
5.40.138.0/24
5.40.149.0/24
5.40.156.0/24
5.40.244.0/24
62.82.50.0/24
62.82.158.0/24
62.174.66.0/24
62.175.252.0/23
89.140.16.0/23
95.39.61.0/24
Signature Algorithm: sha256WithRSAEncryption
59:b7:f4:a0:10:60:5d:88:aa:30:42:c9:1b:29:ec:cf:0b:8b:
d3:e2:d3:46:33:09:70:dc:2c:32:4c:0c:7a:93:75:43:7e:f4:
81:9e:e1:09:f6:90:7a:0f:47:b9:e0:e9:75:b5:b0:6c:b6:4e:
06:16:c8:9e:af:27:0f:ff:d3:b1:4a:ac:9a:2f:f0:18:c9:46:
1a:cf:64:77:2d:fc:39:db:08:2f:6f:3f:e9:62:18:05:2f:bb:
36:e0:fa:ae:8d:9e:ee:35:86:4d:76:d3:0e:58:d9:fa:73:8d:
bf:38:ea:b2:7a:ca:a4:50:90:a5:e3:b3:8f:27:42:a0:49:57:
7f:76:e8:70:25:e5:cb:e9:d0:01:02:cd:68:75:a2:71:d7:d1:
11:2c:c5:c6:1f:5f:d9:e7:be:b8:ab:e6:96:60:40:f8:71:e2:
13:c1:c8:d0:e6:d8:3d:7a:e1:25:da:54:9a:67:0a:b4:90:2e:
a7:5c:09:5c:79:8b:84:f3:c5:5d:0f:c9:c4:f3:6f:94:a5:b5:
65:56:3d:d8:1d:7a:8c:e0:47:94:40:cc:43:1d:38:fb:9d:18:
bc:2c:dc:78:d8:d7:3e:dd:76:54:de:b2:eb:94:9d:69:ed:54:
23:e4:12:f8:14:fd:b7:22:82:4c:07:96:35:d3:b7:07:c2:6f:
c2:1a:25:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:48 2023 by rpki-client on console-ams.rpki-client.org