Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-hBI_Pb7-Rv_g8WtzOczVINLXxg.roa
File: 1-hBI_Pb7-Rv_g8WtzOczVINLXxg.roa (raw, json)
Hash identifier: jHelJ3z7A3pPGar0YbiNP2ny97cq4cONQmKtQX+MPC8=
Subject key identifier: FA:10:48:FC:F6:FB:F9:1B:FF:83:C5:AD:CC:E7:33:54:83:4B:5F:18
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018BD755D443228F792AED0C7167F09049E5
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-hBI_Pb7-Rv_g8WtzOczVINLXxg.roa
Signing time: Thu 16 Nov 2023 08:53:28 +0000
ROA not before: Thu 16 Nov 2023 08:53:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197450
IP address blocks: 87.120.166.0/24 maxlen: 24
87.121.44.0/24 maxlen: 24
87.121.46.0/24 maxlen: 24
178.215.239.0/24 maxlen: 24
85.31.47.0/24 maxlen: 24
45.128.233.0/24 maxlen: 24
94.156.79.0/24 maxlen: 24
185.221.64.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d7:55:d4:43:22:8f:79:2a:ed:0c:71:67:f0:90:49:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 16 08:53:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa1048fcf6fbf91bff83c5adcce73354834b5f18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e6:a9:4e:14:62:b9:91:64:5d:7d:2f:4a:b7:
65:f1:84:83:c0:fd:c9:16:76:f3:6f:b3:da:40:5a:
94:0c:59:fb:ce:55:c3:8e:7a:5a:07:14:e8:cc:f0:
93:34:4a:f3:33:9d:67:d0:1e:ef:b5:6d:ae:df:0c:
6a:1a:21:94:50:73:c1:c8:44:e2:b0:66:21:52:20:
0f:85:f6:d1:74:b0:7c:ba:dd:dc:17:21:07:66:cc:
9a:4f:7c:e7:15:6e:fe:21:b8:97:34:c2:52:f0:74:
3f:ed:c4:0a:ca:70:c5:52:1d:5a:ff:a5:d0:85:e8:
f9:79:da:43:b0:90:e1:de:ae:20:22:02:8f:e3:45:
69:8c:f0:f1:fb:5c:4c:ce:49:4b:22:b7:25:f3:19:
b4:c4:48:0b:d9:0a:30:e0:eb:40:45:bb:7c:67:a0:
f0:cd:ef:b7:d0:c9:77:54:bc:cb:38:67:eb:db:39:
cc:b4:63:69:11:2d:29:f8:9c:85:ca:b1:ba:bd:44:
d7:94:48:57:06:58:69:6f:49:59:3d:6e:91:03:77:
08:a4:35:a4:2d:fd:20:17:4e:ff:53:58:d0:ca:d8:
ca:5e:31:69:80:c4:30:ec:c9:26:ac:45:03:f6:c9:
99:81:59:19:0b:eb:1f:4f:f4:6a:dd:51:9f:08:95:
20:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:10:48:FC:F6:FB:F9:1B:FF:83:C5:AD:CC:E7:33:54:83:4B:5F:18
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-hBI_Pb7-Rv_g8WtzOczVINLXxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.233.0/24
85.31.47.0/24
87.120.166.0/24
87.121.44.0/24
87.121.46.0/24
94.156.79.0/24
178.215.239.0/24
185.221.64.0/24
Signature Algorithm: sha256WithRSAEncryption
72:ae:11:c3:e0:7b:6a:33:1f:14:de:48:bb:59:2d:71:9c:17:
89:6e:db:06:76:7d:37:1b:aa:60:6e:00:de:b1:68:07:ba:b3:
0b:34:ca:11:d4:c7:96:c3:0f:47:c4:26:a1:fb:17:ad:15:5e:
5d:9f:7d:39:3c:57:82:49:18:fc:d0:74:79:2a:54:e3:fa:07:
d6:5a:94:da:45:d9:ad:cd:30:28:4d:2a:50:40:c1:39:78:1c:
52:68:2d:e6:91:cb:b9:8e:45:97:51:53:11:ae:3d:ce:56:5e:
99:6d:e7:5c:2b:6a:87:1e:0a:8d:dd:40:d5:cb:c5:39:33:75:
3e:65:72:6a:1a:2e:7d:c8:e8:0b:82:89:75:36:96:c0:16:2e:
56:6a:ac:3c:b1:55:a8:cd:81:06:18:09:fb:99:82:fa:6c:05:
ee:76:d3:ed:91:6f:e0:ed:59:a2:7a:e3:a5:d2:75:af:40:79:
e0:34:4e:86:f2:56:23:32:97:21:d0:cb:56:76:1e:2b:a7:4d:
99:30:eb:8c:85:e7:cb:0a:a0:91:de:84:3b:8b:ea:41:13:5d:
c0:1c:99:c9:b0:2d:af:56:02:ca:bf:7e:20:14:d2:26:fc:dd:
80:ee:1a:ca:c3:b6:2c:bb:3a:74:a2:08:f5:ff:74:41:15:67:
c7:b1:c9:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 22 13:12:40 2023 by rpki-client on console-ams.rpki-client.org