Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0KH8KoL6ARC2ELiR-9u7WPqN0Ec.roa
File: 0KH8KoL6ARC2ELiR-9u7WPqN0Ec.roa (raw, json)
Hash identifier: 48uFR7VPntYSJVvUc6tCrC0/hRjoDwjhmgXL7vCkoXY=
Subject key identifier: D0:A1:FC:2A:82:FA:01:10:B6:10:B8:91:FB:DB:BB:58:FA:8D:D0:47
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018A4F5CED6DF67A9B24FB69EEA5E7B48888
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0KH8KoL6ARC2ELiR-9u7WPqN0Ec.roa
Signing time: Fri 01 Sep 2023 06:10:04 +0000
ROA not before: Fri 01 Sep 2023 06:10:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8100
IP address blocks: 94.156.2.0/24 maxlen: 24
91.92.16.0/24 maxlen: 24
87.120.192.0/23 maxlen: 24
91.92.26.0/23 maxlen: 24
193.58.121.0/24 maxlen: 24
193.58.123.0/24 maxlen: 24
185.147.100.0/22 maxlen: 24
87.121.38.0/24 maxlen: 24
94.156.152.0/24 maxlen: 24
45.8.92.0/24 maxlen: 24
94.156.154.0/23 maxlen: 24
87.121.60.0/22 maxlen: 24
91.92.67.0/24 maxlen: 24
45.139.123.0/24 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.173.0/24 maxlen: 24
212.87.205.0/24 maxlen: 24
94.156.237.0/24 maxlen: 24
194.55.226.0/24 maxlen: 24
94.156.238.0/24 maxlen: 24
87.121.146.0/23 maxlen: 24
93.123.76.0/22 maxlen: 24
141.98.5.0/24 maxlen: 24
87.121.163.0/24 maxlen: 24
93.123.80.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
94.156.178.0/24 maxlen: 24
193.47.62.0/24 maxlen: 24
94.156.180.0/23 maxlen: 24
87.121.104.0/24 maxlen: 24
93.123.24.0/24 maxlen: 24
87.121.103.0/24 maxlen: 24
93.123.26.0/23 maxlen: 24
87.121.114.0/23 maxlen: 24
93.123.112.0/22 maxlen: 24
93.123.119.0/24 maxlen: 24
5.253.58.0/23 maxlen: 24
193.25.219.0/24 maxlen: 24
5.253.56.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4f:5c:ed:6d:f6:7a:9b:24:fb:69:ee:a5:e7:b4:88:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 1 06:10:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d0a1fc2a82fa0110b610b891fbdbbb58fa8dd047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3f:f5:cf:a7:37:d4:0d:4e:00:4f:e6:77:d7:
3a:a7:6e:2a:d7:9c:9f:39:b0:5b:19:21:bc:42:51:
96:fe:cc:dd:be:d0:1d:7c:d8:ce:9b:ab:92:6f:34:
b8:70:c8:86:1a:92:7e:3c:e9:ae:32:f3:65:9f:fc:
eb:f2:d9:5f:2c:a6:34:78:05:53:56:18:a5:b7:b3:
27:0b:ce:23:32:5a:a7:8b:84:93:63:87:14:ae:0e:
37:ef:fc:8c:22:8e:f6:5d:24:13:45:2d:1a:80:d8:
28:dc:3e:33:56:09:67:57:93:c2:a8:16:54:23:a1:
9e:8c:65:55:41:c9:4d:da:b9:f7:f7:c6:3a:75:31:
32:1a:fd:46:5a:8f:ed:71:9d:b4:60:c7:38:f1:70:
14:59:51:6c:aa:f1:82:71:26:64:71:16:32:bf:ec:
ab:44:de:e6:30:21:36:fb:5c:98:07:ee:10:ea:8d:
0b:54:cc:74:1a:c5:d1:6f:cb:d7:7d:d5:bc:2c:bd:
d4:e8:14:fa:db:05:12:b1:93:f1:c0:58:06:d9:0f:
23:59:ce:ea:09:f0:75:b3:20:62:71:48:d8:f6:e9:
9e:d3:45:02:fb:65:2c:9b:da:b0:f1:e7:b0:0b:c0:
af:03:b7:91:d4:ad:81:2b:09:f4:cc:03:41:78:a0:
22:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:A1:FC:2A:82:FA:01:10:B6:10:B8:91:FB:DB:BB:58:FA:8D:D0:47
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0KH8KoL6ARC2ELiR-9u7WPqN0Ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.56.0/22
45.8.92.0/24
45.139.123.0/24
87.120.192.0/23
87.121.38.0/24
87.121.60.0/22
87.121.103.0-87.121.104.255
87.121.114.0/23
87.121.146.0/23
87.121.163.0/24
91.92.16.0/24
91.92.26.0/23
91.92.67.0/24
93.123.24.0/24
93.123.26.0/23
93.123.76.0-93.123.80.255
93.123.112.0/22
93.123.119.0/24
94.154.160.0/23
94.154.173.0/24
94.156.2.0/24
94.156.152.0/24
94.156.154.0/23
94.156.178.0/24
94.156.180.0/23
94.156.237.0-94.156.238.255
141.98.5.0/24
185.147.100.0/22
185.252.177.0/24
193.25.219.0/24
193.47.62.0/24
193.58.121.0/24
193.58.123.0/24
194.55.226.0/24
212.87.205.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:df:8e:28:d4:00:e2:a4:c8:fb:d3:6f:67:f5:86:23:73:c6:
33:90:68:05:5e:d5:03:0a:40:71:4c:7c:d1:be:90:e4:da:56:
47:68:d2:dc:5e:a2:6d:66:bb:26:d9:a7:96:a6:c0:3d:a5:c4:
8b:e2:e9:95:f9:5f:49:80:06:0c:66:0f:14:72:59:51:f9:8b:
96:b6:99:35:f6:eb:53:f0:13:26:9a:32:57:04:69:b3:fc:fc:
24:23:30:3d:6f:fe:23:1a:c0:85:ba:6e:12:be:b6:e9:6a:11:
1b:62:2a:af:54:92:09:e6:0e:d8:61:db:87:cd:45:fa:93:db:
4e:96:ad:81:c2:46:18:90:21:1c:1c:99:9e:9d:57:1c:9f:d8:
36:23:ab:51:1d:d6:7a:8f:63:34:39:80:a9:4c:16:d9:30:7b:
c9:f1:9b:91:7c:a1:05:ac:64:69:fc:ff:c4:c1:62:3f:63:bc:
6e:fb:88:ab:be:73:72:7e:c9:f6:2e:7e:71:f6:99:5f:b5:d9:
13:9a:16:01:2d:7f:c5:3c:de:6f:84:0f:e7:1d:92:de:7f:d8:
1b:64:4a:a9:92:fc:81:f2:b1:09:2a:42:16:1c:c5:2f:5c:ae:
44:70:b1:3f:0e:ec:53:19:e0:78:e7:1a:39:6e:3a:f8:3b:36:
8c:69:17:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 11 09:46:20 2023 by rpki-client on console-ams.rpki-client.org