Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8okX2oWPSJ3SX2OvEXxwum-ldFY.roa
File: 8okX2oWPSJ3SX2OvEXxwum-ldFY.roa (raw, json)
Hash identifier: acgwtwq8/zr8FxVaiZLXRSxJQPJV5IXcQqB1Yn17QhE=
Subject key identifier: F2:89:17:DA:85:8F:48:9D:D2:5F:63:AF:11:7C:70:BA:6F:A5:74:56
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01899B7694FA6D6E795BF203FDB8DA34E733
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8okX2oWPSJ3SX2OvEXxwum-ldFY.roa
Signing time: Fri 28 Jul 2023 07:46:27 +0000
ROA not before: Fri 28 Jul 2023 07:46:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 185.218.84.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
91.92.21.0/24 maxlen: 24
94.156.239.0/24 maxlen: 24
194.113.36.0/22 maxlen: 24
178.215.236.0/24 maxlen: 24
93.123.85.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
185.252.176.0/24 maxlen: 24
147.78.101.0/24 maxlen: 24
147.78.100.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
45.95.0.0/22 maxlen: 24
185.216.84.0/22 maxlen: 24
87.121.45.0/24 maxlen: 24
185.218.137.0/24 maxlen: 24
194.169.174.0/24 maxlen: 24
94.154.163.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
185.219.126.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:9b:76:94:fa:6d:6e:79:5b:f2:03:fd:b8:da:34:e7:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 28 07:46:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f28917da858f489dd25f63af117c70ba6fa57456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:60:bd:91:0d:26:e6:f7:e0:aa:10:f1:ea:1a:
aa:c2:6f:2d:f0:3e:68:71:5e:20:81:bc:dd:ef:3d:
0d:f2:bd:07:64:ab:37:c6:b3:f2:16:d6:63:4d:a6:
f3:d2:b1:47:4a:54:2d:c9:9b:b0:3b:95:a2:d6:29:
5c:a5:fc:dc:bb:af:f6:af:4d:00:24:e9:0a:4d:49:
61:57:50:cd:7e:76:30:74:18:92:d7:32:51:2e:f7:
52:26:27:cf:d9:07:05:7e:73:a3:29:76:b4:07:31:
b2:d6:d1:f4:0f:4c:c4:ab:41:08:dd:0e:81:fc:e1:
4a:80:c9:f1:ad:8c:20:0a:44:cc:49:f4:43:2d:bb:
3a:6a:4c:78:ed:79:61:b4:ab:4c:82:f2:75:0c:b9:
b9:ab:8d:81:21:c4:90:f8:2b:77:6c:fd:58:e9:69:
39:21:f8:e1:d2:13:9a:d9:3b:1d:36:01:21:82:bd:
5d:6a:0e:e8:4a:24:bd:5b:a7:79:d0:a5:77:34:78:
53:d0:48:0f:bf:33:2c:b4:22:25:39:f3:f9:b8:52:
14:25:f0:92:da:e5:ef:f1:bf:d4:ae:ea:7b:49:56:
f0:5b:d8:5e:67:b1:ff:4f:ed:07:54:8a:6f:cf:ae:
ce:47:14:2a:f6:8d:d3:73:3c:b9:93:de:21:ff:82:
94:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:89:17:DA:85:8F:48:9D:D2:5F:63:AF:11:7C:70:BA:6F:A5:74:56
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8okX2oWPSJ3SX2OvEXxwum-ldFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.0.0/22
45.151.89.0/24
87.121.45.0/24
91.92.21.0/24
92.119.196.0/23
93.123.85.0/24
94.154.161.0-94.154.163.255
94.156.239.0/24
147.78.100.0-147.78.102.255
171.22.72.0/22
178.215.224.0/24
178.215.236.0/24
185.216.84.0/22
185.218.84.0/22
185.218.137.0/24
185.219.126.0/24
185.252.176.0/24
194.113.36.0/22
194.169.174.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:6a:98:76:38:70:88:a1:e3:ba:79:8d:0e:79:ac:31:9a:13:
e7:9f:df:33:19:8b:4e:30:a3:2f:c2:7e:02:f9:58:a3:c0:50:
c6:65:77:e2:e8:1d:7f:78:71:ea:5b:6c:60:ce:2c:49:10:47:
e6:d4:64:37:f7:9c:e8:b1:f1:ef:00:ed:f0:17:76:fa:2e:c9:
97:37:1b:bb:4e:2d:db:17:1d:bd:d2:34:a7:85:7a:4f:b6:df:
a3:64:e2:31:c4:90:19:f2:25:33:e1:4e:78:93:e5:7e:dd:dd:
ef:59:3a:c9:d5:bf:81:33:e0:95:36:d8:54:d8:c3:d4:e6:6f:
55:6f:63:59:2a:28:2f:ad:c1:fe:51:cd:c3:58:bb:aa:ce:b4:
8d:aa:92:8f:3d:fa:66:91:91:7d:db:dc:28:0c:19:93:c5:a6:
06:d6:3c:0f:89:24:64:4a:5b:46:56:09:77:fd:62:7b:94:a9:
1c:1b:27:28:20:96:f4:f7:40:72:63:6a:a0:11:32:38:2e:21:
c4:93:67:e5:55:ec:d8:41:4c:b0:a5:03:f7:26:45:d8:34:0d:
06:b5:49:f2:0f:0d:ce:cb:63:ef:b2:24:08:bd:f2:ec:bc:11:
8e:0b:5d:73:92:34:d2:af:c1:0a:4d:ca:42:a2:57:08:a9:3c:
10:0b:c9:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 28 13:38:35 2023 by rpki-client on console-ams.rpki-client.org