Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1FRiQWRR-vHEeUNK8yaTgpS22ic.roa
File: 1FRiQWRR-vHEeUNK8yaTgpS22ic.roa (raw, json)
Hash identifier: KrnGJznqYEk+z6MVqvctNw7dxmm1gTXkPvzpyCSisgQ=
Subject key identifier: D4:54:62:41:64:51:FA:F1:C4:79:43:4A:F3:26:93:82:94:B6:DA:27
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018B93EBF6A089AE9D3203FA94FA923B36FD
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1FRiQWRR-vHEeUNK8yaTgpS22ic.roa
Signing time: Fri 03 Nov 2023 06:43:16 +0000
ROA not before: Fri 03 Nov 2023 06:43:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61302
IP address blocks: 45.9.156.0/24 maxlen: 24
45.12.255.0/24 maxlen: 24
147.78.100.0/23 maxlen: 24
87.120.130.0/24 maxlen: 24
185.246.223.0/24 maxlen: 24
92.249.48.0/24 maxlen: 24
194.180.39.0/24 maxlen: 24
45.139.104.0/24 maxlen: 24
82.115.210.0/24 maxlen: 24
45.129.84.0/24 maxlen: 24
45.129.86.0/24 maxlen: 24
94.154.172.0/24 maxlen: 24
193.35.19.0/24 maxlen: 24
37.139.130.0/24 maxlen: 24
93.123.39.0/24 maxlen: 24
171.22.31.0/24 maxlen: 24
81.161.230.0/24 maxlen: 24
87.121.124.0/23 maxlen: 24
81.161.239.0/24 maxlen: 24
178.215.226.0/24 maxlen: 24
91.200.192.0/22 maxlen: 24
94.156.250.0/24 maxlen: 24
178.215.238.0/24 maxlen: 24
94.156.248.0/24 maxlen: 24
87.121.162.0/24 maxlen: 24
94.156.160.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
171.22.17.0/24 maxlen: 24
171.22.18.0/24 maxlen: 24
79.110.61.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
193.25.216.0/24 maxlen: 24
87.121.220.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:93:eb:f6:a0:89:ae:9d:32:03:fa:94:fa:92:3b:36:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 3 06:43:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d45462416451faf1c479434af326938294b6da27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:77:f4:6f:3e:57:0f:99:be:3c:f7:b4:b6:82:
19:52:66:00:01:e6:8a:ac:95:5c:c2:af:8e:b7:91:
87:e3:3c:12:43:ab:9c:df:e2:07:1f:d9:ef:ed:4c:
7d:71:25:9e:8c:e9:23:91:9e:3e:db:d1:f6:bf:c2:
8b:c1:63:67:f6:56:dd:b3:b3:f1:7f:17:ab:d2:46:
d5:5a:5a:48:f4:50:f0:15:82:df:28:e6:6e:78:5a:
d6:cb:8f:6a:cd:32:f3:9a:e2:0d:d3:00:58:fc:6d:
08:dd:31:02:6f:74:ba:0e:e0:c5:17:2f:89:13:2c:
23:ee:ca:10:16:75:6a:36:b9:3e:4e:d3:cd:65:4d:
4d:78:91:ac:7f:a0:8e:c7:3a:c6:04:d1:cc:86:f2:
7c:b4:e8:21:d4:5d:92:03:75:42:e5:db:66:58:3a:
b3:76:a0:95:04:46:14:7f:af:ec:6e:88:12:0d:23:
26:84:e4:ca:da:5b:9a:6d:23:39:6a:02:ab:c8:7d:
3f:91:cb:c1:df:27:52:53:e4:5e:67:c6:74:5c:d3:
70:2c:43:5f:f9:18:3c:e7:2c:ba:3f:4b:57:97:79:
ff:00:c2:04:ad:61:8d:14:ca:16:80:63:6e:71:29:
f1:e9:c3:e9:de:94:39:cf:2e:be:fb:f4:61:01:47:
9c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:54:62:41:64:51:FA:F1:C4:79:43:4A:F3:26:93:82:94:B6:DA:27
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1FRiQWRR-vHEeUNK8yaTgpS22ic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.130.0/24
45.9.156.0/24
45.12.255.0/24
45.129.84.0/24
45.129.86.0/24
45.139.104.0/24
45.141.158.0/24
79.110.61.0/24
81.161.230.0/24
81.161.239.0/24
82.115.210.0/24
83.219.97.0/24
87.120.130.0/24
87.121.124.0/23
87.121.162.0/24
87.121.220.0/24
91.200.192.0/22
92.249.48.0/24
93.123.39.0/24
94.154.172.0/24
94.156.160.0/24
94.156.248.0/24
94.156.250.0/24
147.78.100.0/23
171.22.17.0-171.22.18.255
171.22.31.0/24
178.215.226.0/24
178.215.238.0/24
185.246.223.0/24
193.25.216.0/24
193.35.19.0/24
194.180.39.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:73:c8:18:72:b7:b0:95:05:a0:b1:b7:aa:09:fc:b5:d8:ec:
57:04:26:56:47:40:5f:1a:56:1b:c0:03:ed:a8:d9:6c:06:e2:
9f:21:34:d6:65:4b:d9:72:3d:72:81:40:68:4b:25:69:4e:0a:
8b:cb:11:2e:cc:1c:31:80:f8:2d:24:c6:37:59:ce:ea:ba:2c:
bc:e4:9b:e8:d8:05:8f:9d:53:3a:7d:4e:39:da:86:b9:d5:9b:
14:8c:40:81:d4:99:67:cd:ff:e6:34:bb:af:06:ab:cd:0b:af:
fd:dc:36:2d:4b:49:ff:29:93:8a:43:01:59:a2:0a:29:58:78:
bc:88:7c:ff:cb:e0:e5:99:b7:ea:6d:c8:75:d6:61:5f:54:44:
4e:6c:c0:af:3a:f7:4b:34:02:4d:48:20:00:57:d5:ba:82:d8:
da:33:e2:9b:36:5b:a0:f8:10:f6:d3:3e:53:0b:89:d3:60:4c:
5c:c8:bc:61:12:1a:91:2c:ab:4c:b4:e5:02:fa:93:71:90:ee:
38:c3:e6:26:ce:bf:44:32:7b:9c:6e:c9:70:8c:38:fc:1a:c0:
d4:29:83:9f:19:aa:89:dc:33:54:92:94:a4:b5:b1:bd:9f:9c:
55:b7:41:a6:01:17:ef:f2:e1:78:dd:14:e1:ff:f2:7e:c0:07:
a1:a7:e7:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 6 13:15:58 2023 by rpki-client on console-ams.rpki-client.org