Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8WUbXASuMDGr_6C1NjaB-qb4SSo.roa
File: 8WUbXASuMDGr_6C1NjaB-qb4SSo.roa (raw, json)
Hash identifier: r3X1udcXNkf6oydtD8BcAHLybTzXSJ8TOfPA3d1mWR0=
Subject key identifier: F1:65:1B:5C:04:AE:30:31:AB:FF:A0:B5:36:36:81:FA:A6:F8:49:2A
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018BA4AB88D4CC536FD951F60EB472F4B2CC
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8WUbXASuMDGr_6C1NjaB-qb4SSo.roa
Signing time: Mon 06 Nov 2023 12:46:26 +0000
ROA not before: Mon 06 Nov 2023 12:46:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61302
IP address blocks: 45.9.156.0/24 maxlen: 24
45.12.255.0/24 maxlen: 24
147.78.100.0/23 maxlen: 24
87.120.130.0/24 maxlen: 24
92.249.48.0/24 maxlen: 24
194.180.39.0/24 maxlen: 24
45.139.104.0/24 maxlen: 24
82.115.210.0/24 maxlen: 24
45.129.84.0/24 maxlen: 24
45.129.86.0/24 maxlen: 24
94.154.172.0/24 maxlen: 24
193.35.19.0/24 maxlen: 24
37.139.130.0/24 maxlen: 24
171.22.31.0/24 maxlen: 24
81.161.230.0/24 maxlen: 24
87.121.124.0/23 maxlen: 24
81.161.239.0/24 maxlen: 24
178.215.226.0/24 maxlen: 24
91.200.192.0/22 maxlen: 24
94.156.250.0/24 maxlen: 24
178.215.238.0/24 maxlen: 24
94.156.248.0/24 maxlen: 24
87.121.162.0/24 maxlen: 24
94.156.160.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
171.22.17.0/24 maxlen: 24
171.22.18.0/24 maxlen: 24
79.110.61.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
193.25.216.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a4:ab:88:d4:cc:53:6f:d9:51:f6:0e:b4:72:f4:b2:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 6 12:46:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f1651b5c04ae3031abffa0b5363681faa6f8492a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:44:52:97:e2:00:cc:4a:45:83:2f:b4:8e:9c:
dd:43:ce:1c:0a:27:dc:d9:22:87:e4:f9:41:41:6f:
b1:08:d3:c2:5a:81:75:da:e0:e5:41:45:6d:b6:0c:
d2:05:2c:31:97:37:e2:62:80:0e:7e:d1:2f:7c:9d:
92:25:24:ea:dc:88:a7:f1:8d:aa:96:e1:a4:63:fb:
36:9c:f2:20:8c:a6:d0:29:af:95:b9:a7:48:85:40:
d1:f3:a5:58:b9:be:0a:72:9d:62:71:a1:36:dc:f1:
11:7e:28:25:3f:cd:b5:2f:43:70:71:89:50:12:49:
c8:52:d9:73:f0:d1:4d:8f:32:3f:07:df:1f:6f:37:
52:91:d0:ad:61:26:57:c5:96:ec:f6:c7:cb:a6:55:
20:4a:52:ff:74:a9:40:9a:01:c9:9e:db:cf:04:bb:
3f:b4:8f:ec:c7:49:8a:2c:cf:c2:7c:39:98:e2:07:
d2:ad:0b:8e:54:86:ce:67:42:58:63:54:b0:80:5a:
06:81:50:ce:44:f8:e9:4a:9a:7b:89:27:27:c9:91:
ce:3d:a2:8b:03:43:fd:e0:37:d2:23:dd:7b:48:7e:
62:a6:e4:f1:40:e8:5b:02:4c:8c:8b:63:56:0a:16:
e5:72:f2:29:d1:e6:f6:10:5d:bb:94:21:cd:85:b9:
5a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:65:1B:5C:04:AE:30:31:AB:FF:A0:B5:36:36:81:FA:A6:F8:49:2A
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8WUbXASuMDGr_6C1NjaB-qb4SSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.130.0/24
45.9.156.0/24
45.12.255.0/24
45.129.84.0/24
45.129.86.0/24
45.139.104.0/24
45.141.158.0/24
79.110.61.0/24
81.161.230.0/24
81.161.239.0/24
82.115.210.0/24
83.219.97.0/24
87.120.130.0/24
87.121.124.0/23
87.121.162.0/24
91.200.192.0/22
92.249.48.0/24
94.154.172.0/24
94.156.160.0/24
94.156.248.0/24
94.156.250.0/24
147.78.100.0/23
171.22.17.0-171.22.18.255
171.22.31.0/24
178.215.226.0/24
178.215.238.0/24
193.25.216.0/24
193.35.19.0/24
194.180.39.0/24
Signature Algorithm: sha256WithRSAEncryption
07:b8:33:f1:d4:3d:69:11:ef:66:31:c7:8c:f3:36:99:76:63:
ea:39:28:09:3d:f4:fb:11:72:f2:4a:05:3b:cb:85:43:63:84:
6b:69:84:8f:85:dd:62:28:ba:b3:04:d7:24:29:ff:c3:fa:4c:
22:3a:f8:96:25:83:b6:13:d8:21:ee:1f:9c:04:5f:f9:0d:34:
1e:05:75:94:88:d9:01:3a:bb:f4:7c:42:7d:8c:9a:87:30:96:
92:a5:59:93:80:c7:f8:7a:50:cf:e8:85:24:df:4f:7c:f4:47:
22:64:55:39:5e:76:ad:b1:8b:b8:88:ae:28:d4:e1:96:75:b4:
39:86:88:d2:ea:2c:59:4f:20:a4:12:29:36:48:1c:d4:8a:19:
65:0b:c5:2f:27:a6:ea:f5:a1:84:3a:e8:20:d2:da:ec:8e:ff:
9e:cc:2d:44:ae:18:eb:b6:7c:bf:3f:80:6f:d2:36:72:cd:c6:
0e:ea:02:d3:e0:11:ab:e3:81:27:f0:09:22:73:26:2b:f9:96:
92:a2:27:59:a4:30:09:23:01:fe:a5:c1:42:65:ec:47:cf:44:
00:b9:9d:ce:ea:1e:c7:95:ad:10:a4:e8:da:56:b6:d4:c1:30:
ca:37:9d:61:2b:e6:54:84:a6:dd:38:fe:0e:10:41:ad:82:2e:
4c:80:d9:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 20 13:20:58 2023 by rpki-client on console-fra.rpki-client.org