Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/6s6W9SH_lhsgjAvrYiXczBfJNAo.roa
File: 6s6W9SH_lhsgjAvrYiXczBfJNAo.roa (raw, json)
Hash identifier: B+b1N9se07vJ5Mm7Mu+m1dtLKKnQPxl4GkrCN/oWP1U=
Subject key identifier: EA:CE:96:F5:21:FF:96:1B:20:8C:0B:EB:62:25:DC:CC:17:C9:34:0A
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 01857246BDF73059D6A4B5F3F2E582158D3E
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/6s6W9SH_lhsgjAvrYiXczBfJNAo.roa
Signing time: Mon 02 Jan 2023 11:38:36 +0000
ROA not before: Mon 02 Jan 2023 11:38:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34927
IP address blocks: 45.134.88.0/24 maxlen: 24
45.134.91.0/24 maxlen: 24
45.134.89.0/24 maxlen: 24
193.148.251.0/24 maxlen: 24
193.148.250.0/24 maxlen: 24
193.148.249.0/24 maxlen: 24
193.148.248.0/24 maxlen: 24
2a0c:9a40:1024::/48 maxlen: 48
2a0c:9a40:1002::/48 maxlen: 48
2a0c:9a44::/48 maxlen: 48
2a0c:9a40:1000::/44 maxlen: 48
2a0c:9a40:1080::/44 maxlen: 48
2a0c:9a40:1058::/48 maxlen: 48
2a0c:9a40:1::/48 maxlen: 48
2a0c:9a40:1001::/48 maxlen: 48
2a0c:9a40:1055::/48 maxlen: 48
2a0c:9a40:1070::/48 maxlen: 48
2a0c:9a40:1050::/48 maxlen: 48
2a0c:9a40:1054::/48 maxlen: 48
2a0c:9a40:1057::/48 maxlen: 48
2a0c:9a40:1072::/48 maxlen: 48
2a0c:9a40:1070::/44 maxlen: 48
2a0c:9a40:1090::/44 maxlen: 48
2a0c:9a40:1030::/44 maxlen: 48
2a0c:9a40:1051::/48 maxlen: 48
2a0c:9a40:2600::/40 maxlen: 48
2a0c:9a40:2c00::/40 maxlen: 48
2a0c:9a40:2700::/40 maxlen: 40
2a0c:9a40:2a00::/40 maxlen: 40
2a0c:9a40:2200::/40 maxlen: 40
2a0c:9a40:2100::/40 maxlen: 40
2a0c:9a40:2800::/40 maxlen: 40
2a0c:9a40:2500::/40 maxlen: 40
2a0c:9a40:2400::/40 maxlen: 40
2a0c:9a40:1080::/48 maxlen: 48
2a0c:9a40:1060::/48 maxlen: 48
2a0c:9a40:2900::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:bd:f7:30:59:d6:a4:b5:f3:f2:e5:82:15:8d:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 2 11:38:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eace96f521ff961b208c0beb6225dccc17c9340a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:93:78:98:1c:27:58:12:98:25:80:db:49:79:
f8:38:9a:90:f5:d1:64:eb:30:dd:f5:47:27:f9:d3:
3d:53:4c:2d:37:20:8f:c9:07:ee:ad:a5:bb:cc:57:
dc:c4:76:ce:46:07:d7:d6:66:67:7a:83:46:3f:96:
d5:23:69:12:21:c6:6e:75:ee:89:9e:c6:2b:3e:af:
ee:25:40:39:c9:8b:27:05:8b:53:78:75:05:f7:b2:
b6:d0:04:10:89:ab:a2:c8:fe:ce:60:7f:43:5c:27:
78:7d:dc:cf:b1:c1:4c:bb:ce:31:fc:18:7a:26:2f:
e0:8a:12:d1:00:4f:14:75:41:2b:f0:ee:27:9f:ad:
18:83:1c:54:b2:ad:d2:e4:c0:01:4e:bf:b0:52:a1:
be:46:b2:ea:c8:50:98:b2:a8:cc:fc:cd:e9:7d:25:
1e:d7:46:a6:3b:16:42:60:03:f2:83:46:c6:b0:6a:
c9:bf:c4:66:62:f8:a3:f0:51:03:f4:33:34:21:52:
0e:b3:c3:12:fa:08:bc:d0:98:fa:be:e3:e6:82:54:
d9:a3:a9:4f:c9:8b:8f:d3:50:41:de:e6:9d:73:60:
9b:71:bc:56:47:29:27:65:a0:dc:5e:52:91:31:49:
82:e7:a5:6d:09:e1:52:74:61:3c:f1:69:0b:c0:2d:
79:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:CE:96:F5:21:FF:96:1B:20:8C:0B:EB:62:25:DC:CC:17:C9:34:0A
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/6s6W9SH_lhsgjAvrYiXczBfJNAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.88.0/23
45.134.91.0/24
193.148.248.0/22
IPv6:
2a0c:9a40:1::/48
2a0c:9a40:1000::/44
2a0c:9a40:1024::/48
2a0c:9a40:1030::/44
2a0c:9a40:1050::/47
2a0c:9a40:1054::/47
2a0c:9a40:1057::-2a0c:9a40:1058:ffff:ffff:ffff:ffff:ffff
2a0c:9a40:1060::/48
2a0c:9a40:1070::-2a0c:9a40:109f:ffff:ffff:ffff:ffff:ffff
2a0c:9a40:2100::-2a0c:9a40:22ff:ffff:ffff:ffff:ffff:ffff
2a0c:9a40:2400::-2a0c:9a40:2900:ffff:ffff:ffff:ffff:ffff
2a0c:9a40:2a00::/40
2a0c:9a40:2c00::/40
2a0c:9a44::/48
Signature Algorithm: sha256WithRSAEncryption
78:2a:df:d1:a9:13:e2:d0:79:fa:1c:ba:6d:18:37:1c:7a:e3:
72:f7:1a:79:d3:c4:11:ae:65:69:73:d0:89:3a:a6:09:d8:f7:
2d:c6:cf:fb:ac:53:5e:90:89:13:a9:44:d1:96:1d:87:09:e5:
0a:02:a8:83:d9:32:38:f4:09:42:8d:dc:30:6f:c2:00:e6:16:
de:a8:57:3c:51:77:1d:e5:ea:c2:5b:f1:5e:cd:d8:6f:9c:c3:
79:98:33:07:37:af:97:fb:fb:cb:0d:f1:06:db:ad:23:d6:24:
94:f9:d9:17:19:98:88:f7:d3:46:06:0e:eb:cf:ca:4d:a1:25:
3e:ff:b5:f0:e2:2d:e4:72:30:7c:75:d7:38:c3:e1:00:89:0e:
da:2c:26:3b:66:4b:92:5d:73:65:a1:9d:1a:fb:ba:0f:9c:5b:
f6:8d:6e:4a:0f:4e:d8:da:8b:45:bd:52:28:38:6e:2b:86:b4:
80:c0:57:e0:07:4f:16:2b:c2:e4:ee:95:95:aa:4b:e8:d0:12:
25:1d:dd:9d:95:cf:ae:b3:f2:49:ee:4e:7e:4d:33:09:5a:69:
ab:72:a1:b3:df:06:47:c3:d0:13:d9:2f:9b:f2:b6:5b:98:11:
54:ea:54:b1:c7:81:3e:e9:ca:68:38:f9:47:cb:e5:f5:a9:0f:
aa:6e:ff:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:33 2023 by rpki-client on console-fra.rpki-client.org