Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/BSb3Aw2hYquOSp10j_p-qT80vNI.roa
File: BSb3Aw2hYquOSp10j_p-qT80vNI.roa (raw, json)
Hash identifier: uze9MnrF/rmt6wi7twF2eHLdn4iyxppqeG4IR9cATFE=
Subject key identifier: 05:26:F7:03:0D:A1:62:AB:8E:4A:9D:74:8F:FA:7E:A9:3F:34:BC:D2
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018AD5A0000B93679329DA48A21A23419C44
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/BSb3Aw2hYquOSp10j_p-qT80vNI.roa
Signing time: Wed 27 Sep 2023 07:52:27 +0000
ROA not before: Wed 27 Sep 2023 07:52:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50225
IP address blocks: 185.222.163.0/24 maxlen: 24
80.76.50.0/24 maxlen: 24
176.125.252.0/24 maxlen: 24
45.84.90.0/24 maxlen: 24
194.48.251.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d5:a0:00:0b:93:67:93:29:da:48:a2:1a:23:41:9c:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 27 07:52:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0526f7030da162ab8e4a9d748ffa7ea93f34bcd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:6a:d2:78:6e:b0:64:ad:51:27:f8:cc:9e:71:
52:0a:38:ca:4c:ad:2a:db:38:3c:7d:ce:ef:b6:8c:
53:d6:59:d7:df:82:b0:4b:d1:2a:a5:1e:b9:f8:f7:
40:87:1d:be:fc:86:ea:d8:f6:18:b2:c5:d9:cf:3d:
83:4b:e6:50:f0:a8:7c:b8:43:f7:c3:be:7d:5c:34:
4f:b7:cd:9b:3d:72:f2:c1:54:80:93:0a:27:27:57:
0d:6b:12:fe:57:fc:74:bd:e3:ac:24:0e:49:8f:f6:
75:b7:61:61:fd:73:13:09:62:33:61:0b:8e:da:db:
07:1c:e6:44:6e:91:4e:6b:89:2d:3d:06:71:fb:8d:
22:cf:8e:6b:ff:88:58:53:9e:93:f4:ea:5d:0f:b1:
78:d0:0b:a9:15:fe:b4:d9:d5:cc:ba:29:72:7d:cd:
8d:4e:18:f6:7a:78:90:08:f3:3c:79:ed:55:62:73:
3d:a8:11:a0:91:12:6f:06:8b:4f:51:69:82:ed:ca:
f6:b7:c1:41:d7:87:10:db:fa:5c:50:e5:da:90:55:
9a:ba:72:f9:10:38:59:dd:30:0f:c9:ce:ee:b9:e0:
38:6a:43:2e:09:d4:f9:97:8b:75:7a:11:b6:3b:67:
0c:0f:9e:24:a6:68:3d:56:78:06:8c:12:28:84:97:
7a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:26:F7:03:0D:A1:62:AB:8E:4A:9D:74:8F:FA:7E:A9:3F:34:BC:D2
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/BSb3Aw2hYquOSp10j_p-qT80vNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.90.0/24
80.76.50.0/24
176.125.252.0/24
185.222.163.0/24
194.48.251.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:bc:2f:c1:c3:bf:ad:34:c2:f5:e2:40:a5:2d:a9:54:85:c3:
f0:a1:f3:3b:52:63:3c:77:e7:1c:ed:26:8a:cb:e9:39:30:a8:
d5:c2:ce:f5:87:c0:57:5d:69:07:15:91:0c:1d:9d:28:6e:4b:
8d:95:2e:69:0f:51:9b:54:e8:b6:33:95:a0:6a:71:09:14:2b:
8d:89:ba:ea:bc:3e:24:4e:2b:45:71:02:63:86:a8:3b:7e:bf:
e5:62:84:2c:be:ec:dc:bb:d5:dc:0a:96:72:2f:e0:88:dc:19:
10:c4:b2:1d:ab:4d:7f:ba:80:3a:82:af:d7:99:60:96:b3:04:
f7:17:d3:bd:86:f3:f5:05:c3:db:c5:20:cc:3a:28:fe:b3:70:
ef:4f:f8:fb:75:2d:fc:85:e8:a0:37:1e:03:81:89:06:85:c7:
3b:c8:e7:d5:87:15:cf:30:15:a7:8d:8d:82:a3:5a:0b:8e:e9:
01:9b:55:e1:04:ad:6c:18:35:cd:57:39:a6:b3:b2:60:5c:88:
6e:d5:3b:1c:fa:c3:22:14:1a:1e:47:20:4c:31:cd:9b:16:b2:
21:db:ac:c9:2e:b6:39:10:ca:4b:de:5f:ec:b7:d1:8c:c2:77:
45:88:f9:d9:0d:75:e2:2c:48:1e:04:e5:e2:b0:2b:95:b3:50:
2e:0d:73:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 3 12:22:30 2023 by rpki-client on console-fra.rpki-client.org