Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/2BQOM_a7bQSZHefHaRXC-SP5eks.roa
File: 2BQOM_a7bQSZHefHaRXC-SP5eks.roa (raw, json)
Hash identifier: S91NH80XA4TdyGpdX+nTBE4iveZXgrtU/C041wy1Gyc=
Subject key identifier: D8:14:0E:33:F6:BB:6D:04:99:1D:E7:C7:69:15:C2:F9:23:F9:7A:4B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018B95A714007C72A9582AF7E4152D74A68A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/2BQOM_a7bQSZHefHaRXC-SP5eks.roa
Signing time: Fri 03 Nov 2023 14:47:16 +0000
ROA not before: Fri 03 Nov 2023 14:47:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207459
IP address blocks: 84.54.49.0/24 maxlen: 24
85.217.145.0/24 maxlen: 24
193.149.29.0/24 maxlen: 24
193.149.30.0/24 maxlen: 24
94.156.176.0/24 maxlen: 24
193.149.28.0/22 maxlen: 22
193.149.31.0/24 maxlen: 24
193.149.28.0/24 maxlen: 24
45.84.90.0/24 maxlen: 24
185.226.175.0/24 maxlen: 24
212.115.41.0/24 maxlen: 24
79.110.50.0/24 maxlen: 24
79.110.51.0/24 maxlen: 24
45.8.93.0/24 maxlen: 24
194.49.86.0/24 maxlen: 24
45.151.90.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:95:a7:14:00:7c:72:a9:58:2a:f7:e4:15:2d:74:a6:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 3 14:47:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d8140e33f6bb6d04991de7c76915c2f923f97a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:77:b1:b6:9b:39:b8:e8:29:85:35:14:9a:f1:
ad:04:de:a2:23:32:90:d7:05:d9:5c:9e:3c:3f:1c:
a8:cb:54:7d:72:7d:9c:d6:04:3f:6d:90:9c:81:38:
85:b5:cd:14:92:77:15:68:6d:ae:18:6f:3d:c9:eb:
59:30:09:39:03:89:4f:1c:fa:d3:5f:01:cb:34:15:
ed:79:a2:0b:37:ae:a1:67:35:5c:d4:1b:90:58:c4:
56:2f:a5:53:67:49:0e:0d:e3:14:94:aa:7c:9b:fe:
3f:c3:84:b7:c8:ed:0a:40:e8:66:2d:49:57:db:19:
1e:a2:11:36:81:8f:4e:29:dc:04:3a:8d:55:9e:ca:
ca:0b:c3:e0:e5:4e:db:22:5c:24:bf:93:3c:b3:a1:
89:79:f2:2d:31:fe:4b:1c:a2:57:d8:dd:12:ba:c9:
dc:15:8b:b4:10:5e:05:60:c7:f0:f2:60:ad:51:63:
78:24:9d:48:69:aa:0e:93:c7:b6:1d:a6:29:6b:74:
25:a5:a6:96:fe:88:05:0f:b3:cc:49:00:53:69:92:
e4:d6:66:1d:5a:20:bc:7c:a1:33:bf:3e:94:4e:b5:
f9:e6:6d:29:2b:20:09:12:59:31:74:8b:8d:54:48:
ad:0f:05:70:c5:1b:de:6e:62:6c:2b:66:9b:ba:cf:
8f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:14:0E:33:F6:BB:6D:04:99:1D:E7:C7:69:15:C2:F9:23:F9:7A:4B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/2BQOM_a7bQSZHefHaRXC-SP5eks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.93.0/24
45.84.90.0/24
45.151.90.0/24
79.110.50.0/23
84.54.49.0/24
85.217.145.0/24
94.156.176.0/24
185.226.175.0/24
193.149.28.0/22
194.49.86.0/24
212.115.41.0/24
Signature Algorithm: sha256WithRSAEncryption
98:60:da:21:6f:bf:37:17:fc:44:b2:cb:e0:63:88:c2:c2:1d:
34:79:4a:6c:36:5d:b9:f1:f9:55:48:de:26:c4:c9:29:3c:2a:
a7:31:70:89:11:ac:4a:79:36:48:1b:77:3d:b5:ce:82:3f:6f:
50:36:9a:49:f0:07:3d:8c:98:ff:24:bb:6f:53:73:ae:37:ad:
84:bd:e7:de:fc:07:f1:ef:16:30:7a:7b:b2:74:ff:c8:1d:27:
60:67:6d:9e:5b:7d:8f:2d:a3:e7:bc:d3:0d:90:5f:9d:40:97:
d7:8c:83:63:e8:ad:8f:9d:9d:3a:e8:72:97:44:0f:28:86:ee:
e8:e3:e7:36:29:bf:77:41:54:7c:33:22:db:79:1c:2f:ad:78:
b2:69:dd:99:6c:ff:18:64:d1:f6:82:aa:86:4e:ed:b2:c0:92:
d6:10:2d:cf:35:d6:3f:13:a0:34:78:97:53:e1:72:78:f6:a5:
43:b9:f7:b3:99:d4:e9:f9:25:70:61:4f:a6:f3:50:cb:a6:5b:
ff:74:bf:7f:f6:04:88:89:be:76:0c:16:a0:98:2c:0a:8f:ea:
99:26:76:b1:dd:91:c3:d4:8f:ca:dc:31:f5:f7:6b:d6:0b:b3:
d1:96:fc:27:ee:fa:38:25:7f:25:9a:42:91:84:4e:73:19:96:
8d:8c:82:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 6 13:15:58 2023 by rpki-client on console-ams.rpki-client.org