Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/C0pFo3BvAkDYYMcBJDMpcF1YaXY.roa
File: C0pFo3BvAkDYYMcBJDMpcF1YaXY.roa (raw, json)
Hash identifier: lP6Hb4u0fWTp6FUIDKJ4eQRQo1LaKHR94pYjoR1AGCc=
Subject key identifier: 0B:4A:45:A3:70:6F:02:40:D8:60:C7:01:24:33:29:70:5D:58:69:76
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01865954C5829CB36D3D7D5495D3113166E0
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/C0pFo3BvAkDYYMcBJDMpcF1YaXY.roa
Signing time: Thu 16 Feb 2023 08:26:13 +0000
ROA not before: Thu 16 Feb 2023 08:26:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 109.206.242.0/24 maxlen: 24
80.76.51.0/24 maxlen: 24
185.218.138.0/24 maxlen: 24
185.246.222.0/24 maxlen: 24
109.206.237.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:59:54:c5:82:9c:b3:6d:3d:7d:54:95:d3:11:31:66:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 16 08:26:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b4a45a3706f0240d860c701243329705d586976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3e:47:b1:b5:1d:f3:48:5e:b7:fc:bd:1d:f6:
31:00:d0:26:62:fb:5c:ff:f8:5e:03:ad:fc:a1:85:
11:78:e0:c1:9e:41:c4:69:a4:87:85:8b:90:da:8c:
7f:ff:94:dd:60:d1:56:0b:30:2a:83:c7:a6:a8:89:
f4:31:27:0e:ea:5a:0c:71:93:30:cd:1a:c9:fd:e6:
64:45:9c:5b:a1:6e:65:ae:d7:78:d7:f6:36:97:8f:
80:ba:d4:06:14:0d:5c:f1:8e:72:47:76:e1:5a:98:
2e:39:3a:27:4d:e0:b5:ca:96:22:3c:cb:92:1c:10:
3f:8e:f2:46:29:f5:a0:78:66:0e:df:52:6a:d4:5d:
ab:0d:ea:ec:ea:f8:9b:7a:2b:06:ad:42:90:d2:86:
7f:86:82:d7:04:14:b2:b6:bb:1a:6f:9e:8a:54:86:
fc:43:d0:19:00:32:28:e2:65:05:39:d4:f2:0b:d5:
77:f0:02:6f:93:43:69:e3:3b:2e:a8:00:f3:07:5d:
e4:a5:b7:75:64:73:ca:92:c5:13:37:56:a9:3d:ce:
21:07:c3:3b:4a:33:37:c7:c0:33:b4:02:25:43:de:
b8:07:ac:b8:26:f5:b7:1b:6a:5f:a7:11:c8:5b:7d:
12:2d:b9:73:21:50:72:fc:9a:1b:d7:2c:78:06:60:
c6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:4A:45:A3:70:6F:02:40:D8:60:C7:01:24:33:29:70:5D:58:69:76
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/C0pFo3BvAkDYYMcBJDMpcF1YaXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.76.51.0/24
109.206.237.0/24
109.206.242.0/24
185.218.138.0/24
185.246.222.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:ea:46:9c:dd:49:27:3b:04:96:a1:62:4f:e0:35:a2:46:69:
bd:f1:7d:c7:66:ec:5d:54:29:30:5c:e9:09:8a:15:23:e5:ac:
ec:a1:2b:15:71:62:9c:23:73:64:f2:ac:5a:09:cf:c1:32:92:
1f:90:fb:fd:12:a0:aa:46:bf:0b:7f:b3:a0:1c:ea:55:0d:bf:
81:d5:c1:f1:27:48:9c:3f:91:1f:ff:ba:93:3e:78:62:7f:a2:
8a:1b:bf:f3:48:e2:c5:4d:61:94:d8:7d:59:87:ee:4e:11:2c:
a1:fc:cd:07:d8:29:83:55:3f:72:3f:c5:4c:f8:d2:57:f1:3b:
be:09:af:86:ce:a0:df:00:a2:b0:88:62:26:d7:57:7b:b5:25:
b6:45:92:16:08:69:40:d5:31:39:65:f7:17:dc:ef:1b:3d:37:
53:da:c9:92:7c:8d:54:96:b7:89:83:39:85:5f:2a:ba:4e:cc:
80:1e:0a:6c:ea:27:41:67:98:4c:1f:6d:3c:5d:cd:e2:48:d3:
01:13:d3:87:2f:20:b8:bc:93:0e:da:65:b0:2a:20:8c:4a:c9:
e3:d4:16:34:5a:a7:24:66:c2:71:c0:a2:2a:22:ab:b5:31:ff:
1e:99:91:99:f5:5d:17:5a:20:db:7f:62:3b:d4:f9:02:6e:7a:
da:a7:0f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:33 2023 by rpki-client on console-ams.rpki-client.org