Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/A0XqpgyUqZQsPRcMzwCqiyuGnnQ.roa
File: A0XqpgyUqZQsPRcMzwCqiyuGnnQ.roa (raw, json)
Hash identifier: CcRd+3wkGx56Y0YFgyRg+xuI0B2a8Rzz0bj6BaINPpo=
Subject key identifier: 03:45:EA:A6:0C:94:A9:94:2C:3D:17:0C:CF:00:AA:8B:2B:86:9E:74
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018A07A36B2D0B49DC885E82DC78EC66C922
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/A0XqpgyUqZQsPRcMzwCqiyuGnnQ.roa
Signing time: Fri 18 Aug 2023 07:54:24 +0000
ROA not before: Fri 18 Aug 2023 07:54:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50225
IP address blocks: 91.92.21.0/24 maxlen: 24
85.217.145.0/24 maxlen: 24
185.222.163.0/24 maxlen: 24
178.215.237.0/24 maxlen: 24
93.123.85.0/24 maxlen: 24
193.42.34.0/24 maxlen: 24
94.156.176.0/24 maxlen: 24
193.47.63.0/24 maxlen: 24
193.47.60.0/24 maxlen: 24
194.48.249.0/24 maxlen: 24
45.84.90.0/24 maxlen: 24
194.48.251.0/24 maxlen: 24
85.209.132.0/24 maxlen: 24
79.110.50.0/24 maxlen: 24
176.125.252.0/24 maxlen: 24
37.139.131.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:07:a3:6b:2d:0b:49:dc:88:5e:82:dc:78:ec:66:c9:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 18 07:54:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0345eaa60c94a9942c3d170ccf00aa8b2b869e74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ca:99:d1:8e:2a:0f:e4:50:39:74:d2:12:8a:
57:70:18:5f:48:dc:48:51:f9:a0:26:88:48:a5:d5:
01:1d:93:30:d9:ee:76:61:ee:55:4b:d6:06:3c:ce:
53:57:e2:84:21:30:f2:54:e1:b9:8a:8e:ad:0d:31:
31:83:ce:d0:34:90:6e:d5:e7:81:25:55:59:5f:cb:
12:ee:4a:e7:4e:e0:06:d6:0d:0f:66:e8:fa:ae:21:
0b:d3:ef:9f:22:b5:ef:fa:db:25:07:9e:cb:cf:4c:
1a:e1:65:d8:08:0a:50:a2:ed:07:27:28:06:54:4b:
97:34:99:b4:91:0e:6a:ea:04:3d:54:71:e8:45:ba:
94:87:b4:d5:0b:c4:74:3c:03:14:c8:4b:a9:a5:9c:
9d:ea:0f:e0:c1:0b:fc:89:d9:8f:88:2c:dd:55:00:
28:c9:ee:cf:09:da:b4:e2:96:5b:d2:23:2e:c9:6f:
db:e9:32:bb:5b:97:33:7f:63:a3:24:5f:5a:0c:b5:
17:e6:1d:0a:87:11:7e:dc:5b:7e:1f:b2:93:76:6f:
cd:12:40:c7:c9:dd:05:8f:08:33:c9:c8:13:53:79:
21:17:b9:6a:bc:d2:c5:7c:33:18:59:73:1e:e0:fa:
5b:69:d7:3e:c0:60:71:a2:cd:ac:e8:20:bc:bb:73:
75:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:45:EA:A6:0C:94:A9:94:2C:3D:17:0C:CF:00:AA:8B:2B:86:9E:74
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/A0XqpgyUqZQsPRcMzwCqiyuGnnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.131.0/24
45.84.90.0/24
79.110.50.0/24
85.209.132.0/24
85.217.145.0/24
91.92.21.0/24
93.123.85.0/24
94.156.176.0/24
176.125.252.0/24
178.215.237.0/24
185.222.163.0/24
193.42.34.0/24
193.47.60.0/24
193.47.63.0/24
194.48.249.0/24
194.48.251.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:9c:56:35:45:76:66:f2:3e:84:e1:77:a1:23:2a:fb:54:64:
0c:b2:db:4b:1c:a6:0d:ff:05:7e:04:be:1f:6d:8d:4c:9b:69:
cb:02:ed:83:86:45:79:40:40:86:b8:83:27:ed:90:e0:10:e6:
61:f0:a8:34:34:0e:b8:01:00:5c:6a:c5:d5:2c:56:68:33:57:
aa:e5:d5:fc:80:76:2e:3f:e5:6b:29:7f:05:ca:3f:9d:02:31:
70:16:81:e5:c2:ae:61:86:da:e6:b9:2f:2c:33:9f:04:08:4c:
9c:13:f7:b5:21:2d:7b:b4:72:aa:8e:e2:e5:ff:df:d2:0e:d5:
0a:97:cd:3c:55:35:1e:35:78:f4:b2:f0:53:1c:d0:27:90:c5:
ae:ca:f3:57:cd:95:71:4b:e2:71:fc:19:11:fc:92:55:e3:68:
d1:c0:16:22:76:03:3b:1c:a1:12:4e:e1:0a:9b:2a:77:20:1d:
00:2e:92:ef:f9:60:f2:6e:c4:00:20:e6:35:de:7f:57:8c:66:
b8:de:b6:b3:b0:34:17:cb:41:1b:bf:29:5b:d7:83:4e:40:1f:
46:03:50:86:3c:44:41:44:85:99:6a:80:30:7e:6a:1b:72:78:
57:a7:eb:b6:6c:b0:54:54:c6:f2:ca:36:90:ff:49:77:da:60:
c6:0c:79:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 29 08:29:33 2023 by rpki-client on console-ams.rpki-client.org