Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/AiDEgkVMVPpbzdAhV4JdJfPexXM.roa
File: AiDEgkVMVPpbzdAhV4JdJfPexXM.roa (raw, json)
Hash identifier: Rwj5j5fen2nCjBVZIioGKzoUag+geh1EWvBypt+9e1s=
Subject key identifier: 02:20:C4:82:45:4C:54:FA:5B:CD:D0:21:57:82:5D:25:F3:DE:C5:73
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018A03C5BB089E7108649D3F6FB3BF7580E6
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/AiDEgkVMVPpbzdAhV4JdJfPexXM.roa
Signing time: Thu 17 Aug 2023 13:53:24 +0000
ROA not before: Thu 17 Aug 2023 13:53:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 185.218.84.0/22 maxlen: 24
91.92.21.0/24 maxlen: 24
147.78.101.0/24 maxlen: 24
147.78.100.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
185.218.137.0/24 maxlen: 24
194.169.174.0/24 maxlen: 24
94.156.78.0/24 maxlen: 24
94.154.163.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
178.215.224.0/24 maxlen: 24
94.156.239.0/24 maxlen: 24
194.113.36.0/22 maxlen: 24
178.215.236.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
45.149.235.0/24 maxlen: 24
185.252.176.0/24 maxlen: 24
93.123.30.0/23 maxlen: 24
92.119.196.0/23 maxlen: 24
45.95.0.0/22 maxlen: 24
185.216.84.0/22 maxlen: 24
185.219.126.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:03:c5:bb:08:9e:71:08:64:9d:3f:6f:b3:bf:75:80:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 17 13:53:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0220c482454c54fa5bcdd02157825d25f3dec573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:56:44:c9:ec:d2:36:e6:75:c0:83:15:9f:db:
33:90:84:6e:ac:7c:3e:f4:5d:67:32:32:d6:64:16:
86:8b:7b:78:9f:94:e4:db:e8:f2:8b:dd:c1:41:fc:
79:39:98:89:92:dc:88:63:fa:b1:aa:ba:1c:9a:28:
08:b2:88:76:81:65:95:8e:00:ac:c0:17:d6:4e:de:
0f:59:6b:35:0b:0c:cb:99:41:03:34:66:43:ac:32:
33:41:ae:c2:bb:67:2d:1a:7a:07:53:ec:cd:80:8c:
79:d8:48:b2:fd:ed:7a:6a:ec:fe:04:e6:ea:8e:6f:
9a:3e:10:20:32:7f:6c:ad:f3:71:a6:04:7c:0f:dd:
3a:a9:d4:d5:87:e8:72:e0:05:26:dc:dd:ee:1a:18:
e7:dd:02:30:ba:31:bb:eb:a9:e0:9e:e2:b1:59:0d:
f3:1d:dd:d9:7b:53:cd:da:6b:48:4f:06:8b:eb:0a:
7a:0b:dc:20:4b:7e:df:2b:0c:f5:42:55:a1:2d:6c:
c6:6d:c7:8e:18:62:74:d6:6a:81:60:24:fc:c6:7e:
1d:30:84:4d:76:ef:84:eb:d4:86:79:8a:74:a3:3f:
ce:0f:8f:6d:e8:17:37:4e:95:0e:82:97:3c:02:b2:
1b:8e:e2:0c:bb:c2:e7:a1:66:d4:0d:89:d4:ae:c9:
0d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:20:C4:82:45:4C:54:FA:5B:CD:D0:21:57:82:5D:25:F3:DE:C5:73
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/AiDEgkVMVPpbzdAhV4JdJfPexXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.0.0/22
45.149.235.0/24
45.151.89.0/24
87.121.45.0/24
91.92.21.0/24
92.119.196.0/23
93.123.30.0/23
94.154.161.0-94.154.163.255
94.156.78.0/24
94.156.239.0/24
147.78.100.0-147.78.102.255
171.22.72.0/22
178.215.224.0/24
178.215.236.0/24
185.216.84.0/22
185.218.84.0/22
185.218.137.0/24
185.219.126.0/24
185.252.176.0/24
194.113.36.0/22
194.169.174.0/24
Signature Algorithm: sha256WithRSAEncryption
88:c5:92:17:3a:d5:b7:d2:55:8d:5f:6e:ea:27:78:8f:7a:91:
1f:ce:48:7d:54:5a:6e:89:b8:c8:cc:6a:8d:7f:6d:22:5d:53:
7d:53:85:ea:a7:0e:90:83:54:2b:86:aa:2d:b1:76:fd:8e:a8:
da:fa:06:51:43:f7:38:7e:91:61:e5:fa:7e:d2:1c:51:6f:3e:
7b:83:42:86:a6:ac:8f:97:a9:a6:07:08:42:d0:9f:d8:88:b9:
95:fa:d5:0c:1a:14:ae:00:0d:60:e8:0f:86:bf:8c:41:0e:be:
1c:2a:d5:dd:50:16:1b:75:b9:1b:b8:ee:39:f7:fa:77:f2:5c:
01:ed:0c:04:08:ee:1f:f6:63:a9:a9:6f:86:75:99:02:eb:12:
8f:2f:11:50:c6:69:21:d1:a7:cd:0e:75:15:28:28:6f:ad:8a:
93:49:e7:4c:e0:c4:92:a6:64:53:5f:a6:95:39:22:c0:7f:41:
ff:37:3e:7e:bf:fa:9c:34:c7:85:0c:0f:95:22:eb:87:f4:b4:
04:8e:34:32:61:2f:f7:98:fc:c4:bc:ef:ff:0a:86:9d:9a:2a:
17:59:41:51:f0:4c:8d:f1:ce:33:73:ab:e7:f6:1b:16:38:e6:
97:58:2b:a2:db:8f:7b:ef:83:2f:6a:43:79:0b:ec:38:0c:e7:
d6:f9:95:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 18 12:22:12 2023 by rpki-client on console-ams.rpki-client.org