Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/23jSsslZoLd-BxzcBBGxQdbx-7s.roa
File: 23jSsslZoLd-BxzcBBGxQdbx-7s.roa (raw, json)
Hash identifier: +JuoYvE4NtGuUWo0DP4x++wAQynkANXD7oNNf/UxlGk=
Subject key identifier: DB:78:D2:B2:C9:59:A0:B7:7E:07:1C:DC:04:11:B1:41:D6:F1:FB:BB
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0188344EE3F6C89BF14EF9EA8E9EF711A0E3
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/23jSsslZoLd-BxzcBBGxQdbx-7s.roa
Signing time: Fri 19 May 2023 13:59:25 +0000
ROA not before: Fri 19 May 2023 13:59:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204843
IP address blocks: 94.156.11.0/24 maxlen: 24
45.81.241.0/24 maxlen: 24
94.156.239.0/24 maxlen: 24
94.156.236.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
37.221.121.0/24 maxlen: 24
37.221.122.0/24 maxlen: 24
37.221.123.0/24 maxlen: 24
37.221.120.0/24 maxlen: 24
94.156.176.0/24 maxlen: 24
193.149.2.0/24 maxlen: 24
193.149.3.0/24 maxlen: 24
45.144.153.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:34:4e:e3:f6:c8:9b:f1:4e:f9:ea:8e:9e:f7:11:a0:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 19 13:59:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=db78d2b2c959a0b77e071cdc0411b141d6f1fbbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:31:5f:89:15:cd:fd:67:e5:d0:61:53:16:2c:
93:53:56:6f:71:0a:76:ac:f0:3a:29:80:83:b5:a5:
19:e8:ae:42:7a:ef:70:f8:18:b8:e0:03:ed:bb:56:
46:74:4f:19:0b:59:0b:83:eb:8c:72:cb:d9:d3:17:
f6:87:6e:ab:98:05:18:61:11:e7:21:a1:3d:f2:1d:
6d:13:8b:16:10:e9:e5:b4:8a:11:8a:1a:1b:fd:63:
26:2a:86:28:ab:74:52:9f:69:9b:42:67:0b:4d:6c:
98:b3:f1:4f:99:25:5f:77:9c:c6:70:ca:d0:00:7e:
38:d8:75:51:81:9d:de:5e:a6:84:75:73:58:d8:cb:
30:88:44:ff:4e:52:68:15:1f:87:9e:18:ca:e2:85:
91:9e:74:a1:57:c5:88:96:f6:2c:96:7e:84:3b:ce:
58:24:f6:84:7d:5c:38:69:7e:8a:b3:7d:73:19:83:
cb:65:10:17:1d:af:98:47:69:41:8b:89:5f:29:f2:
3c:e8:04:9f:fb:8a:a1:26:db:33:aa:22:63:de:52:
75:40:4f:4e:60:e3:e1:3f:31:78:0c:19:33:2b:3e:
92:12:d4:81:17:d6:8a:29:74:65:6c:ec:70:f3:6a:
2d:8f:32:64:76:05:bc:d2:98:91:86:73:31:63:bd:
72:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:78:D2:B2:C9:59:A0:B7:7E:07:1C:DC:04:11:B1:41:D6:F1:FB:BB
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/23jSsslZoLd-BxzcBBGxQdbx-7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.120.0/22
45.81.241.0/24
45.144.153.0/24
94.156.11.0/24
94.156.176.0/24
94.156.236.0/24
94.156.239.0/24
141.98.1.0/24
193.149.2.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:9c:d3:f7:21:21:54:80:0a:e8:87:e2:2b:50:a3:ab:42:52:
36:03:29:90:e4:d0:dc:b2:84:16:91:dc:22:f0:80:b5:3a:5c:
87:64:87:67:20:dc:e7:5b:37:47:e8:77:2a:b3:6b:1d:2d:53:
67:44:97:14:95:b1:52:0e:c3:37:6a:9e:1e:bf:6d:12:81:88:
c9:60:73:46:8c:b6:0f:ef:cf:80:df:fb:f1:26:55:86:e9:39:
d0:5b:04:2e:51:b4:6b:a6:b4:75:67:fe:7c:f2:d9:fd:d2:67:
d8:2e:2c:29:19:2c:fd:c4:1d:72:2a:85:ff:4e:60:1e:00:44:
99:d7:d2:1d:a7:e8:63:e3:2b:3b:50:82:5c:10:06:42:2f:51:
0b:42:bd:f8:3a:b2:87:77:6a:a6:a6:b6:2d:6d:f2:da:90:b2:
c5:ad:57:e1:81:73:7d:55:6e:be:3e:42:21:23:cf:70:98:8f:
e6:b1:f1:4c:ac:4e:4e:0a:83:4a:58:04:ec:ff:e3:78:e6:61:
fa:b5:c1:03:94:59:ca:12:3e:cc:62:7c:9c:46:1d:97:04:14:
8b:00:8d:85:48:6b:b4:c3:d9:da:5a:26:66:cd:95:d4:7e:75:
f0:9d:e7:af:cd:1d:43:e7:65:b4:b0:37:f7:cc:94:ad:d2:69:
43:79:39:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:31 2023 by rpki-client on console-ams.rpki-client.org