Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8rZ5RWJqnkgFIxSy-w98fEibJhI.roa
File: 8rZ5RWJqnkgFIxSy-w98fEibJhI.roa (raw, json)
Hash identifier: U71wi/Y+GgjC+CsTioIYunKrp9mWUXOKAjhNt8Al23g=
Subject key identifier: F2:B6:79:45:62:6A:9E:48:05:23:14:B2:FB:0F:7C:7C:48:9B:26:12
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018A4F52DB4C3E11B0E25535FAC98224786A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8rZ5RWJqnkgFIxSy-w98fEibJhI.roa
Signing time: Fri 01 Sep 2023 05:59:04 +0000
ROA not before: Fri 01 Sep 2023 05:59:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8100
IP address blocks: 94.156.2.0/24 maxlen: 24
91.92.16.0/24 maxlen: 24
87.120.192.0/23 maxlen: 24
91.92.26.0/23 maxlen: 24
193.58.121.0/24 maxlen: 24
193.58.123.0/24 maxlen: 24
185.147.100.0/22 maxlen: 24
87.121.38.0/24 maxlen: 24
94.156.152.0/24 maxlen: 24
45.8.92.0/24 maxlen: 24
94.156.154.0/23 maxlen: 24
87.121.60.0/22 maxlen: 24
91.92.67.0/24 maxlen: 24
45.139.123.0/24 maxlen: 24
94.154.160.0/23 maxlen: 24
45.9.208.0/22 maxlen: 24
94.154.173.0/24 maxlen: 24
212.87.205.0/24 maxlen: 24
94.156.237.0/24 maxlen: 24
194.55.226.0/24 maxlen: 24
94.156.238.0/24 maxlen: 24
87.121.146.0/23 maxlen: 24
93.123.76.0/22 maxlen: 24
141.98.5.0/24 maxlen: 24
87.121.163.0/24 maxlen: 24
93.123.80.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
94.156.178.0/24 maxlen: 24
193.47.62.0/24 maxlen: 24
94.156.180.0/23 maxlen: 24
87.121.104.0/24 maxlen: 24
93.123.24.0/24 maxlen: 24
87.121.103.0/24 maxlen: 24
93.123.26.0/23 maxlen: 24
87.121.114.0/23 maxlen: 24
93.123.112.0/22 maxlen: 24
93.123.119.0/24 maxlen: 24
5.253.58.0/23 maxlen: 24
193.25.219.0/24 maxlen: 24
5.253.56.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4f:52:db:4c:3e:11:b0:e2:55:35:fa:c9:82:24:78:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 1 05:59:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f2b67945626a9e48052314b2fb0f7c7c489b2612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ba:84:89:bf:4d:fc:0f:78:1f:79:23:fb:ac:
97:f4:25:22:61:0e:a5:11:1f:31:7c:f1:cf:09:4d:
a6:7c:f3:a6:59:58:21:12:b0:47:d2:bd:d7:0f:42:
bc:85:0b:42:58:58:ba:57:cd:03:65:1c:9c:79:ff:
bf:ac:77:8d:e8:29:06:68:75:9d:50:11:6e:16:a3:
bf:27:83:20:cb:d5:4b:14:9d:b0:c8:7b:32:04:9f:
f9:5b:22:2c:4d:43:0c:d8:c6:42:7e:93:a9:19:c3:
bf:24:5c:41:52:2f:a3:2b:38:fa:39:a8:2f:a1:2f:
df:eb:46:6c:91:ee:69:f2:71:f7:4b:e8:49:8d:f1:
10:99:94:97:2e:4f:48:29:22:30:40:80:10:38:8f:
1e:58:11:ee:c4:99:7d:26:7d:8d:d4:e1:45:62:6d:
01:64:ec:a1:44:b9:64:a8:b5:db:23:38:f1:5e:67:
99:d4:0a:ad:dd:78:6e:12:75:4b:a6:f5:07:c8:f1:
9c:17:42:8b:3e:ef:1b:c5:bb:b6:ed:2e:b8:c5:cf:
81:27:8f:7c:8e:90:c7:cf:22:49:5a:30:4f:2a:f2:
45:49:37:1c:22:8f:ef:59:0c:36:f7:37:2b:b8:7f:
d9:bb:8a:41:1e:39:0f:a0:38:45:27:32:d5:a2:85:
0a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:B6:79:45:62:6A:9E:48:05:23:14:B2:FB:0F:7C:7C:48:9B:26:12
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8rZ5RWJqnkgFIxSy-w98fEibJhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.56.0/22
45.8.92.0/24
45.9.208.0/22
45.139.123.0/24
87.120.192.0/23
87.121.38.0/24
87.121.60.0/22
87.121.103.0-87.121.104.255
87.121.114.0/23
87.121.146.0/23
87.121.163.0/24
91.92.16.0/24
91.92.26.0/23
91.92.67.0/24
93.123.24.0/24
93.123.26.0/23
93.123.76.0-93.123.80.255
93.123.112.0/22
93.123.119.0/24
94.154.160.0/23
94.154.173.0/24
94.156.2.0/24
94.156.152.0/24
94.156.154.0/23
94.156.178.0/24
94.156.180.0/23
94.156.237.0-94.156.238.255
141.98.5.0/24
185.147.100.0/22
185.252.177.0/24
193.25.219.0/24
193.47.62.0/24
193.58.121.0/24
193.58.123.0/24
194.55.226.0/24
212.87.205.0/24
Signature Algorithm: sha256WithRSAEncryption
01:20:17:e2:36:44:56:0c:a7:3f:cf:ab:1a:a2:6c:58:20:07:
1b:8a:76:0b:94:91:8a:d6:c7:ac:c1:4e:eb:7e:73:d0:5a:4e:
ba:ab:f4:45:45:3d:a1:98:dd:9f:15:3e:cb:af:72:e0:e1:15:
dc:23:de:e1:5e:4f:18:43:b4:a1:4b:1f:1c:d4:cc:34:83:09:
e0:cd:2b:95:81:c4:1b:6d:d8:7f:c8:fa:4c:c9:b4:62:0e:51:
fa:a4:17:26:ae:99:2d:d8:2a:8b:ff:b7:93:20:b1:ed:23:f0:
c1:a5:a8:60:de:74:28:a8:90:97:f2:b0:64:ec:c3:75:13:ba:
3d:4c:6e:a9:33:0e:4d:23:6b:08:28:17:9b:cf:40:8a:89:53:
3f:f7:b5:41:7b:2c:9b:e4:39:82:10:84:8a:ce:a0:e3:d7:cf:
74:78:95:92:2d:33:6c:98:99:5d:00:72:d6:29:63:61:3a:aa:
3c:5c:5e:63:a7:b3:b0:f9:ad:b2:78:27:89:98:d6:69:86:6e:
79:77:a2:6c:bb:59:5d:47:ea:30:92:23:78:95:5d:0f:2b:05:
69:21:f8:b4:f3:4c:e0:42:e2:d3:eb:b7:0c:a2:b1:52:2c:73:
bf:b3:06:45:17:5e:71:e6:81:2e:95:a6:b2:23:f9:ea:f0:65:
30:95:24:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 06:55:19 2023 by rpki-client on console-ams.rpki-client.org