Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/CLOPfHpCobX2Wrtw1qEgL-ipSzU.roa
File: CLOPfHpCobX2Wrtw1qEgL-ipSzU.roa (raw, json)
Hash identifier: /RPFuTcQjDZm4CMypPBeh8ysq3xrkysYqR4udBvwpFk=
Subject key identifier: 08:B3:8F:7C:7A:42:A1:B5:F6:5A:BB:70:D6:A1:20:2F:E8:A9:4B:35
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018793B4F70C49D1DC2BC806A1BE75E026E6
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/CLOPfHpCobX2Wrtw1qEgL-ipSzU.roa
Signing time: Tue 18 Apr 2023 09:32:03 +0000
ROA not before: Tue 18 Apr 2023 09:32:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 185.218.84.0/22 maxlen: 24
84.54.49.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
178.215.237.0/24 maxlen: 24
141.98.7.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
45.149.233.0/24 maxlen: 24
45.128.233.0/24 maxlen: 24
147.78.101.0/24 maxlen: 24
147.78.100.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
87.120.64.0/23 maxlen: 24
94.103.125.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.137.0/24 maxlen: 24
82.115.209.0/24 maxlen: 24
194.49.87.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
185.219.126.0/24 maxlen: 24
94.154.172.0/24 maxlen: 24
87.121.220.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:93:b4:f7:0c:49:d1:dc:2b:c8:06:a1:be:75:e0:26:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 18 09:32:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=08b38f7c7a42a1b5f65abb70d6a1202fe8a94b35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5c:e5:f0:16:b4:6e:63:e5:6e:fa:e8:2f:46:
79:95:3a:fb:d0:ea:75:38:b6:c1:26:62:40:00:38:
82:d2:3d:2d:5c:c3:a3:8e:10:ea:55:4c:8f:83:f1:
43:7d:05:60:ba:53:17:8f:5b:ba:a9:d6:47:77:e6:
8f:69:ca:fc:03:9c:55:94:f4:cb:04:cd:12:7a:38:
ae:0c:a5:12:fe:e4:b3:f6:4a:ae:6a:d7:43:3c:a9:
02:5c:66:82:c8:28:86:c1:11:f2:99:bd:8f:5e:13:
d9:ce:7b:a6:fb:b9:b7:52:75:91:11:f6:99:0b:08:
f1:2a:63:d0:f4:9e:69:49:da:54:ed:75:b8:a3:f6:
98:d5:e9:3d:0f:98:3c:fc:79:00:4a:2b:40:ce:e8:
4f:6a:e3:cf:25:54:82:cf:7b:b6:9c:01:87:2e:0e:
60:d9:7a:21:62:9e:25:30:e1:9d:80:fd:a7:a2:90:
b2:f6:2e:60:db:53:70:4a:84:93:51:5e:7a:a3:94:
a6:04:ab:df:da:bc:43:4d:1e:ea:8a:69:3b:2d:e9:
27:8d:14:a9:01:5e:27:1d:71:60:ec:83:89:7e:67:
de:3c:40:85:b7:9b:cc:08:92:0d:8a:e2:b1:eb:c8:
52:49:48:2f:d6:d2:1f:0b:81:6c:01:57:9d:34:9a:
aa:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B3:8F:7C:7A:42:A1:B5:F6:5A:BB:70:D6:A1:20:2F:E8:A9:4B:35
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/CLOPfHpCobX2Wrtw1qEgL-ipSzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.233.0/24
45.149.233.0/24
45.151.89.0/24
82.115.209.0/24
84.54.49.0/24
87.120.64.0/23
87.121.220.0/24
92.119.196.0/23
94.103.125.0/24
94.154.161.0-94.154.163.255
94.154.172.0/24
141.98.7.0/24
147.78.100.0/23
171.22.72.0/22
178.215.236.0/23
185.216.84.0/22
185.218.84.0/22
185.218.137.0/24
185.219.126.0/24
194.49.87.0/24
Signature Algorithm: sha256WithRSAEncryption
62:4a:34:ba:1d:83:ee:a3:0f:d9:bf:e3:e0:4f:34:60:d2:e9:
8a:e8:6c:d9:b1:a6:77:a2:56:57:0e:80:22:20:29:6d:28:bb:
47:b5:81:e0:48:3d:22:4e:77:c2:af:0c:50:f9:77:06:1b:10:
c3:c6:8c:c0:a0:95:45:9c:f5:8c:69:05:fe:d6:c5:91:1c:56:
d1:76:0a:eb:34:0a:94:7e:19:78:8f:c4:23:0a:c0:e3:20:19:
ba:b1:e9:39:f0:54:ff:c5:04:ae:b1:ac:04:5b:9a:87:fb:e4:
64:27:21:52:37:62:bf:e3:24:fd:16:7d:bd:eb:63:6e:c2:f3:
6b:b9:a5:be:36:73:ed:7c:ef:d5:f0:54:eb:c6:b2:54:58:94:
8f:f8:25:d9:ef:b6:5e:ab:b2:20:66:70:0f:68:fe:43:95:b5:
dc:46:5e:39:5b:39:1a:bb:41:17:1b:c3:ea:ca:70:4e:af:2b:
2e:c0:02:11:18:51:d8:f9:4a:1c:47:42:34:13:6b:f8:b4:a7:
1b:17:a8:98:31:7f:67:c5:ad:54:d1:df:2f:c8:c7:b0:50:02:
cb:ae:1c:00:65:9e:08:76:6f:37:22:70:32:b6:77:42:8d:01:
f0:7d:64:c7:be:77:12:3a:09:07:01:ce:2b:08:f4:dd:4e:c4:
04:9a:d0:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:33 2023 by rpki-client on console-ams.rpki-client.org