Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6xJuc-Vr5b-slioyqn60Wd6JLrQ.roa
File: 6xJuc-Vr5b-slioyqn60Wd6JLrQ.roa (raw, json)
Hash identifier: 3E0+eApdNFNiTaIID60a+F4z9coPzanEdlDZSzrrQhw=
Subject key identifier: EB:12:6E:73:E5:6B:E5:BF:AC:96:2A:32:AA:7E:B4:59:DE:89:2E:B4
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018C8B520A5A4363EC8D3F85AB0F9B1B0A28
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6xJuc-Vr5b-slioyqn60Wd6JLrQ.roa
Signing time: Thu 21 Dec 2023 07:40:58 +0000
ROA not before: Thu 21 Dec 2023 07:40:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50738
IP address blocks: 87.121.124.0/23 maxlen: 24
171.22.31.0/24 maxlen: 24
81.161.239.0/24 maxlen: 24
91.200.192.0/22 maxlen: 24
94.156.248.0/24 maxlen: 24
87.121.162.0/24 maxlen: 24
147.78.100.0/23 maxlen: 24
45.141.158.0/24 maxlen: 24
171.22.17.0/24 maxlen: 24
171.22.18.0/24 maxlen: 24
92.249.48.0/24 maxlen: 24
79.110.61.0/24 maxlen: 24
45.129.84.0/24 maxlen: 24
94.154.172.0/24 maxlen: 24
193.35.19.0/24 maxlen: 24
37.139.130.0/24 maxlen: 24
193.25.216.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8b:52:0a:5a:43:63:ec:8d:3f:85:ab:0f:9b:1b:0a:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 21 07:40:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb126e73e56be5bfac962a32aa7eb459de892eb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c0:cd:a9:ac:fb:40:20:60:d3:81:b4:ac:ed:
54:ca:de:a5:9c:2c:77:12:66:93:0b:a4:a9:cd:ac:
a4:b6:93:58:7a:0a:e9:db:8e:0b:bf:bf:55:ef:c5:
7c:08:91:da:96:d9:90:07:37:15:86:fb:01:a5:41:
c9:79:d0:bf:de:ea:1c:aa:b4:19:2e:f5:fa:db:a4:
3b:dd:d2:c5:23:48:5d:e4:9b:b6:20:fb:21:32:bd:
3c:65:2f:0b:9a:cf:e5:22:76:03:b2:38:7e:6e:09:
a8:4a:ea:c2:cd:76:e6:07:e2:5b:f7:d1:eb:13:5e:
d5:10:ac:40:4a:b2:a4:bd:71:23:f8:b3:bf:c4:01:
27:1b:4d:62:ce:7f:64:9e:db:d8:17:9e:ef:7c:54:
03:c2:d9:31:9f:9a:90:cb:92:48:e8:4b:d9:67:15:
f3:b8:26:91:4d:3d:f4:57:4d:db:eb:a2:43:b6:c2:
b9:2f:9c:4a:82:1b:cd:d2:87:87:21:32:5f:85:c3:
a2:28:6f:71:9c:e3:11:c3:8c:9f:9e:89:01:b1:eb:
da:a6:74:2b:5b:21:95:fb:ad:c2:f6:53:55:67:e0:
3f:0f:5b:01:06:ed:8a:41:1d:02:c9:8d:7c:de:75:
f0:24:6e:ba:20:7a:48:61:db:f4:55:73:1e:1d:9b:
72:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:12:6E:73:E5:6B:E5:BF:AC:96:2A:32:AA:7E:B4:59:DE:89:2E:B4
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6xJuc-Vr5b-slioyqn60Wd6JLrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.130.0/24
45.129.84.0/24
45.141.158.0/24
79.110.61.0/24
81.161.239.0/24
87.121.124.0/23
87.121.162.0/24
91.200.192.0/22
92.249.48.0/24
94.154.172.0/24
94.156.248.0/24
147.78.100.0/23
171.22.17.0-171.22.18.255
171.22.31.0/24
193.25.216.0/24
193.35.19.0/24
Signature Algorithm: sha256WithRSAEncryption
24:fd:fc:d7:a3:21:d7:8e:c5:1d:9e:1f:42:d5:43:ea:67:e2:
21:8b:1e:dc:e5:84:dd:df:ae:6d:e6:9b:05:a3:87:89:1d:96:
85:a8:63:30:2b:73:ff:b8:a1:62:2d:9f:b9:34:b5:e5:07:2c:
96:f7:3a:62:d6:01:65:51:89:73:89:1e:a8:29:e2:2a:97:ae:
27:9c:c8:9c:8d:c0:39:ba:2e:f7:9d:b9:f8:a3:15:af:f8:03:
76:8e:66:9b:8a:5b:1c:32:80:d2:63:19:a2:65:e4:d4:62:1d:
3b:98:1a:7e:47:8a:91:f6:b3:2c:49:8f:8b:5c:bb:78:69:08:
5e:6b:4b:08:a1:54:81:7c:ba:2e:fb:9a:9f:ab:9b:c8:a9:52:
8a:08:e1:42:ee:84:5e:96:93:70:60:d6:e0:00:f1:c5:ee:cb:
9e:d9:63:ff:f8:4a:90:a0:19:63:c6:df:3b:5a:ec:0c:dc:3e:
f2:40:5d:98:d4:27:c2:f2:3c:9f:6a:b5:39:c8:bb:c8:43:ec:
7a:78:aa:5c:b4:a3:f5:e6:b8:6b:99:db:b0:77:aa:31:3f:b7:
92:31:68:ec:53:bd:6a:10:37:c5:03:2e:b2:b9:d4:63:86:37:
bc:58:c1:f5:87:b9:8f:d3:45:71:a8:41:e7:ea:b8:dd:83:4a:
e8:18:21:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 28 15:40:17 2023 by rpki-client on console-ams.rpki-client.org