Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/22FynIAX-_p31lKobzEd-ZqiVMw.roa
File: 22FynIAX-_p31lKobzEd-ZqiVMw.roa (raw, json)
Hash identifier: 9ZmX37KaIt+T4tfnfYDvcEJn/BGvOKN0M/QMFVND0T0=
Subject key identifier: DB:61:72:9C:80:17:FB:FA:77:D6:52:A8:6F:31:1D:F9:9A:A2:54:CC
Certificate issuer: /CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Certificate serial: 01870D9FC34875F84A8FAEA56F805D7A44E8
Authority key identifier: 46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/22FynIAX-_p31lKobzEd-ZqiVMw.roa
Signing time: Thu 23 Mar 2023 08:39:46 +0000
ROA not before: Thu 23 Mar 2023 08:39:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202423
IP address blocks: 185.239.50.0/24 maxlen: 24
185.239.51.0/24 maxlen: 24
185.142.97.0/24 maxlen: 24
185.142.96.0/24 maxlen: 24
185.142.98.0/24 maxlen: 24
194.187.123.0/24 maxlen: 24
91.200.150.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0d:9f:c3:48:75:f8:4a:8f:ae:a5:6f:80:5d:7a:44:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Validity
Not Before: Mar 23 08:39:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=db61729c8017fbfa77d652a86f311df99aa254cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:61:7d:bc:94:6c:63:fe:2c:18:7e:c2:ef:ca:
b3:5f:ec:91:7a:a9:4f:c3:ca:d5:bc:81:29:c7:b8:
4e:57:5b:21:7f:e9:21:6d:e8:71:45:97:d2:77:5b:
e7:4b:f5:65:65:f9:27:24:13:90:e4:df:fd:e9:2b:
ff:b3:26:13:39:b4:4a:72:14:80:f8:56:22:40:a4:
9b:a2:f0:79:2b:9c:f8:68:7e:3d:16:7b:81:e0:5b:
c0:8e:07:c1:64:4f:3d:16:ab:ea:e9:c9:f1:78:c9:
3b:74:85:1a:d8:d6:da:7a:8e:13:d3:67:c6:d5:48:
81:45:b5:96:66:80:51:6a:06:fd:f8:e7:a3:42:e3:
6d:62:fd:be:17:89:5c:72:e7:8d:53:e0:20:9f:ff:
f3:24:86:be:04:18:1c:7c:b2:d4:f6:49:4c:d0:99:
3a:6d:f8:c1:b9:0b:a7:c8:b3:09:58:ca:05:b7:b4:
51:9d:b3:bd:ac:19:d7:23:f3:4b:ae:c7:4b:9d:f9:
a2:13:21:ce:d4:72:39:02:31:ad:13:e2:8e:03:47:
0b:48:31:11:86:fb:61:c0:bc:95:8e:a0:39:12:00:
a0:0a:99:11:32:d8:99:6c:6d:78:de:4a:2b:c3:17:
e0:25:63:68:bd:50:82:c4:78:df:e2:5d:e3:23:4f:
ac:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:61:72:9C:80:17:FB:FA:77:D6:52:A8:6F:31:1D:F9:9A:A2:54:CC
X509v3 Authority Key Identifier:
keyid:46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/22FynIAX-_p31lKobzEd-ZqiVMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.150.0/24
185.142.96.0-185.142.98.255
185.239.50.0/23
194.187.123.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:f2:1e:6d:9b:bf:39:d2:89:6e:c4:c1:a3:ee:4c:de:14:32:
ca:36:55:c1:32:08:37:d7:e3:5b:bf:1c:22:c8:01:3f:da:2b:
c0:58:f4:df:e1:5a:90:5a:78:b4:44:36:4d:32:f9:0d:13:99:
e5:86:92:a5:3c:58:c7:b3:5c:96:fb:c7:9c:5c:a4:36:3c:d3:
24:84:75:7b:5e:5d:11:ce:65:2f:7a:43:c7:b4:40:46:ce:14:
78:a6:ee:bb:b1:80:54:53:82:f3:06:52:a1:45:00:a7:c6:16:
5d:89:17:4d:8e:8c:96:4b:1a:84:44:99:df:8c:75:41:06:a4:
3a:8c:9f:5a:3d:09:12:15:c4:81:71:1e:50:0e:6c:7a:c6:70:
71:c8:60:c1:60:86:37:5f:76:53:e2:4c:59:8a:56:44:aa:21:
94:84:ca:9c:bb:40:27:9f:7b:25:4e:bc:01:7e:fe:74:31:10:
80:10:60:b6:3f:ad:86:30:eb:6f:bd:2c:9a:ea:40:99:21:b7:
49:ef:cc:de:d2:5c:d1:5b:ee:c7:94:fc:6b:0d:29:8b:c9:f5:
df:95:28:c9:ae:4d:41:28:66:03:fa:6a:22:7f:2e:4f:db:96:
3b:01:a7:dc:40:fc:71:b8:55:e9:d8:14:62:98:aa:0e:6d:f2:
e6:0e:fb:57
-----BEGIN CERTIFICATE-----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Generated at Fri Jul 21 09:18:23 2023 by rpki-client on console-fra.rpki-client.org