Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/B8r81weyTPuzKhXfh-l0bs-_8S4.roa
File: B8r81weyTPuzKhXfh-l0bs-_8S4.roa (raw, json)
Hash identifier: abZRH9yT/n6W5H55xQI3L87ibXmMw6XSBvby+B/KU/0=
Subject key identifier: 07:CA:FC:D7:07:B2:4C:FB:B3:2A:15:DF:87:E9:74:6E:CF:BF:F1:2E
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018B4C8F86EB53A060569140C6B4E27518C5
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/B8r81weyTPuzKhXfh-l0bs-_8S4.roa
Signing time: Fri 20 Oct 2023 10:09:16 +0000
ROA not before: Fri 20 Oct 2023 10:09:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207459
IP address blocks: 84.54.49.0/24 maxlen: 24
85.217.145.0/24 maxlen: 24
193.149.29.0/24 maxlen: 24
193.149.30.0/24 maxlen: 24
193.149.28.0/22 maxlen: 22
193.149.31.0/24 maxlen: 24
193.149.28.0/24 maxlen: 24
45.84.90.0/24 maxlen: 24
79.110.51.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
194.49.86.0/24 maxlen: 24
94.154.163.0/24 maxlen: 24
176.125.255.0/24 maxlen: 24
45.151.90.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:4c:8f:86:eb:53:a0:60:56:91:40:c6:b4:e2:75:18:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 20 10:09:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=07cafcd707b24cfbb32a15df87e9746ecfbff12e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d4:28:4d:3a:5a:8f:c9:b1:a4:67:fe:77:7b:
0f:38:e4:6e:dd:4c:c7:dc:b1:77:11:71:16:9c:43:
8c:06:5d:fa:44:c2:a3:45:1d:3f:bc:4a:b0:a8:22:
6b:2c:ca:69:84:7e:1d:38:25:5e:e5:98:64:0c:cd:
29:61:9e:30:dc:59:3d:62:79:7f:06:e3:97:c5:4f:
06:0c:e4:c5:a6:64:6e:d0:f4:fd:54:98:19:61:b5:
b0:a5:39:80:ed:34:d3:53:ed:40:b6:f0:16:83:da:
0e:41:23:ab:1d:69:28:0b:c8:0f:02:56:91:7d:ef:
31:dc:54:c4:69:bc:28:a5:d6:c3:e3:c3:17:00:c4:
2c:30:c8:5f:c5:2d:60:d6:e4:ac:a2:5a:01:c0:01:
18:73:08:4e:a9:b3:9d:63:eb:69:d3:82:5c:67:b2:
b2:bf:b4:2c:7f:90:8c:0e:81:00:5f:fb:91:32:4e:
2f:82:e1:ba:3b:a3:4c:60:b2:c3:8b:94:c7:9b:f1:
9c:88:73:48:5a:0e:b9:c7:f3:af:2f:cf:b7:90:d7:
1b:ed:e3:99:e8:ce:96:11:66:c2:99:39:0a:37:08:
e5:d8:9f:6d:d9:14:ad:98:17:45:17:4a:f5:c6:a7:
96:dd:75:70:c5:81:97:0f:de:38:3f:7f:11:fd:b2:
24:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:CA:FC:D7:07:B2:4C:FB:B3:2A:15:DF:87:E9:74:6E:CF:BF:F1:2E
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/B8r81weyTPuzKhXfh-l0bs-_8S4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.90.0/24
45.151.90.0/24
79.110.51.0/24
84.54.49.0/24
85.217.145.0/24
87.120.87.0/24
94.154.163.0/24
176.125.255.0/24
193.149.28.0/22
194.49.86.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:2e:8c:c8:a5:bd:cf:74:d7:54:6f:11:18:5b:20:38:b1:26:
8a:cf:df:29:31:31:6b:b6:3c:7f:81:f4:53:3c:68:12:25:e5:
ec:d9:3d:18:3b:6b:a5:c3:29:ff:16:7b:07:c0:62:bf:03:48:
91:fd:e2:52:d5:b1:88:c4:73:83:13:1b:89:ab:63:d8:51:0e:
c9:a7:47:f6:50:89:09:81:77:f7:6a:40:85:50:c0:af:c1:e0:
69:e0:37:29:96:37:80:41:bf:76:52:14:2e:f2:2c:aa:46:fc:
10:25:56:c0:58:a5:e3:86:80:c0:8f:9a:5f:9b:79:10:1b:4d:
70:13:31:03:f4:83:c6:1f:c9:f1:da:f0:f2:fa:fb:ab:f5:29:
29:86:e3:ec:b7:96:c9:36:2f:09:8a:58:4c:58:54:f9:d4:6a:
56:44:91:7a:95:3f:9f:5c:a3:78:ac:8e:82:08:9c:9a:9d:ff:
6f:b7:18:24:3d:a1:2e:eb:a4:3c:13:37:24:d8:3e:97:36:dc:
8a:d6:c3:75:30:5e:3d:8b:1a:da:4d:e8:d8:d5:31:ee:ba:df:
13:9b:d1:6d:43:5c:d7:7e:81:c9:4b:9c:c6:09:51:9f:e0:5d:
fa:f8:c9:aa:8c:3e:79:1b:b6:f8:0e:30:e2:c6:84:d5:d0:43:
72:42:ea:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 23 11:53:19 2023 by rpki-client on console-ams.rpki-client.org