Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/5zF5u4_0mWL9XJsmjV7T6B1VV48.roa
File: 5zF5u4_0mWL9XJsmjV7T6B1VV48.roa (raw, json)
Hash identifier: yPB3PEQ+2PWWyxNtyExw4URBtFzsk0nhggvNs6qE8no=
Subject key identifier: E7:31:79:BB:8F:F4:99:62:FD:5C:9B:26:8D:5E:D3:E8:1D:55:57:8F
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018B84BCA0B86CCE83D1FF5F86B1BAC60970
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/5zF5u4_0mWL9XJsmjV7T6B1VV48.roa
Signing time: Tue 31 Oct 2023 07:57:16 +0000
ROA not before: Tue 31 Oct 2023 07:57:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 185.218.84.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
91.92.24.0/23 maxlen: 24
94.156.239.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
185.252.176.0/24 maxlen: 24
147.78.101.0/24 maxlen: 24
147.78.100.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
185.226.175.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
185.216.84.0/22 maxlen: 24
87.121.45.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.121.59.0/24 maxlen: 24
194.180.50.0/24 maxlen: 24
194.169.174.0/24 maxlen: 24
94.156.78.0/24 maxlen: 24
93.123.116.0/24 maxlen: 24
176.125.255.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:84:bc:a0:b8:6c:ce:83:d1:ff:5f:86:b1:ba:c6:09:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 31 07:57:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e73179bb8ff49962fd5c9b268d5ed3e81d55578f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:74:69:37:8a:dd:9e:79:d4:4e:16:ed:81:a7:
4c:92:77:32:df:1a:eb:a7:b1:bb:f8:70:58:d1:bc:
ee:e9:a7:99:eb:4f:d9:db:94:eb:b8:15:4d:d0:22:
55:cb:21:93:99:97:1e:47:f2:4f:4d:c9:23:00:c7:
09:e2:1c:a0:2f:62:54:6d:66:d1:3a:7e:fd:17:cc:
27:60:d7:f2:da:61:8a:f7:80:d5:48:93:e7:1c:46:
7f:21:16:c7:03:7d:53:23:c2:02:02:73:38:25:a1:
a3:7b:6e:90:37:e3:ab:c5:c8:6c:f5:3e:97:97:24:
ae:bf:5f:d4:5a:2b:f1:7c:92:b0:f0:8a:d0:5b:0a:
8a:b1:2a:49:f9:d9:d8:b3:2b:f2:d3:a5:1e:1d:5c:
e5:97:1d:d9:db:b7:14:4b:c0:87:14:ba:24:7f:46:
51:13:8e:b1:85:d8:0e:03:99:b8:79:5e:53:f4:44:
8a:84:29:a2:72:0f:4c:8e:bd:b3:2d:38:be:9d:38:
bd:dc:8d:2b:9e:76:00:6e:2f:13:99:12:f2:3f:b5:
ad:91:c4:fc:4b:3e:1b:41:dd:51:0e:76:dc:2e:28:
15:e7:cf:bd:4f:27:b4:49:dc:1e:62:53:f1:8d:f9:
50:c8:d3:0a:f6:46:b7:55:81:66:4f:2b:e8:0c:f5:
db:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:31:79:BB:8F:F4:99:62:FD:5C:9B:26:8D:5E:D3:E8:1D:55:57:8F
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/5zF5u4_0mWL9XJsmjV7T6B1VV48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.89.0/24
87.120.87.0/24
87.121.45.0/24
87.121.59.0/24
91.92.24.0/23
92.119.196.0/23
93.123.116.0/24
94.154.161.0-94.154.163.255
94.156.78.0/24
94.156.239.0/24
147.78.100.0-147.78.102.255
171.22.72.0/22
176.125.255.0/24
178.215.224.0/24
178.215.236.0/24
185.216.84.0/22
185.218.84.0/22
185.226.175.0/24
185.252.176.0/24
194.169.174.0/24
194.180.50.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:78:cd:b7:6f:ba:56:99:b9:b0:c8:03:05:e2:51:7f:f2:4a:
eb:28:d0:3e:ea:cf:fb:45:ae:e4:92:84:e7:78:46:b8:ab:11:
22:2e:dc:0d:ad:fd:0b:3f:6f:fc:61:c9:db:f9:2a:18:44:f6:
60:9b:f0:53:87:91:21:0a:a3:79:07:e2:4d:3c:52:64:91:b8:
97:1f:f8:a2:db:a9:21:c9:52:7d:d6:16:c8:3f:14:6b:81:0c:
c9:9f:60:33:c2:79:d3:78:39:a9:a9:f1:2b:c0:a1:e1:a9:d4:
d3:9c:26:14:9e:bf:d8:18:a1:24:75:63:8e:75:97:d1:5f:38:
13:3e:9c:79:8e:e1:fb:69:dc:af:a7:d6:da:1d:49:b1:cb:ea:
85:0c:1e:c1:e8:dc:55:2a:17:d7:01:50:68:e4:98:22:7c:9a:
c4:6e:aa:86:42:37:b2:79:0d:ec:15:51:4d:89:39:56:4f:9a:
fa:81:2b:e0:c2:6e:21:d6:ba:4c:8e:eb:d1:ac:02:2b:28:42:
d8:62:c6:71:da:ec:08:f6:d5:c0:35:4b:de:06:24:62:44:9f:
ff:df:56:dc:f4:62:0f:19:94:87:27:5b:f4:3e:d6:80:f3:bd:
3c:61:44:85:2f:61:a9:ab:2b:58:dd:6b:8d:0f:fe:77:11:b8:
7b:c7:3b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 1 15:14:25 2023 by rpki-client on console-ams.rpki-client.org