Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Dlu__sSekaKRyfhO6-Sv2sVn7Oo.roa
File: Dlu__sSekaKRyfhO6-Sv2sVn7Oo.roa (raw, json)
Hash identifier: 1Um7+ogM9WXdbDoukTmOtyRBnZiHI3eGDi3OpVtOp90=
Subject key identifier: 0E:5B:BF:FE:C4:9E:91:A2:91:C9:F8:4E:EB:E4:AF:DA:C5:67:EC:EA
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0187326BBEF1C72A287F96A01B6239AA1B76
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Dlu__sSekaKRyfhO6-Sv2sVn7Oo.roa
Signing time: Thu 30 Mar 2023 12:08:54 +0000
ROA not before: Thu 30 Mar 2023 12:08:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25369
IP address blocks: 45.90.88.0/22 maxlen: 24
141.98.4.0/24 maxlen: 24
194.55.227.0/24 maxlen: 24
45.12.254.0/24 maxlen: 24
193.58.120.0/24 maxlen: 24
45.149.241.0/24 maxlen: 24
194.48.248.0/24 maxlen: 24
194.31.204.0/24 maxlen: 24
79.110.48.0/23 maxlen: 24
195.178.121.0/24 maxlen: 24
194.169.174.0/24 maxlen: 24
194.169.173.0/24 maxlen: 24
194.49.86.0/24 maxlen: 24
193.25.218.0/24 maxlen: 24
109.206.239.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:32:6b:be:f1:c7:2a:28:7f:96:a0:1b:62:39:aa:1b:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 30 12:08:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e5bbffec49e91a291c9f84eebe4afdac567ecea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:74:45:de:3b:c3:75:ea:62:85:04:14:a3:a9:
5e:ce:0d:36:71:cb:9b:15:95:be:b4:68:be:e7:d0:
a8:51:61:54:3c:1c:d4:d9:af:53:9b:d6:94:f4:f8:
81:7b:be:41:3a:33:44:6d:40:88:3c:f7:19:6d:12:
7d:ed:2e:14:21:10:97:ef:fd:df:12:eb:b5:0a:f7:
48:f6:43:c3:e3:9e:46:89:eb:13:d4:d1:7c:93:39:
47:1f:a3:ce:4a:43:25:9f:f5:b0:1d:44:f2:31:c7:
ee:8f:1c:3e:c6:f8:22:a2:53:a2:0c:a4:a8:3d:d3:
04:1c:01:83:1d:3a:5e:f8:eb:b3:ed:54:8e:c8:86:
06:34:c0:d4:22:0a:bc:34:a0:d3:62:10:ea:34:9b:
25:a0:2b:fd:65:92:c6:ff:8b:cc:a6:61:a2:dd:db:
4f:1c:5e:01:e0:aa:c4:c5:a7:27:fa:6c:73:34:41:
d8:9a:3e:a0:78:be:59:62:d1:93:bd:8e:17:73:18:
34:34:9c:0f:10:1f:85:f6:20:67:d4:a8:07:a1:18:
92:2f:21:4b:a9:e4:f3:0c:69:16:f9:bc:ac:24:cb:
6e:63:16:ef:0a:d4:76:35:e2:f7:31:8c:95:1a:02:
82:70:e1:dd:78:9c:d1:60:df:8d:9a:2e:da:65:50:
7e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:5B:BF:FE:C4:9E:91:A2:91:C9:F8:4E:EB:E4:AF:DA:C5:67:EC:EA
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Dlu__sSekaKRyfhO6-Sv2sVn7Oo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.254.0/24
45.90.88.0/22
45.149.241.0/24
79.110.48.0/23
109.206.239.0/24
141.98.4.0/24
193.25.218.0/24
193.58.120.0/24
194.31.204.0/24
194.48.248.0/24
194.49.86.0/24
194.55.227.0/24
194.169.173.0-194.169.174.255
195.178.121.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:e5:20:3f:6b:6b:2f:31:1c:e8:83:f5:89:b8:14:49:24:3c:
48:ec:a9:c5:7b:0e:b0:ba:7d:0b:86:f7:dc:0a:6e:fd:66:cd:
c0:3c:29:75:97:52:7b:b0:85:b0:60:42:62:fb:a8:e2:a4:74:
28:18:5b:d7:8a:93:13:6f:71:1f:f1:4a:5a:6a:9f:16:13:17:
a0:7b:f3:ce:2d:47:3e:c5:2e:e2:27:23:ab:dc:14:62:04:70:
38:ba:1e:a6:d9:e6:01:98:ea:97:f7:21:a1:52:14:16:70:c8:
1a:bc:84:49:35:49:31:fc:24:55:e6:e2:71:e5:21:b0:94:d0:
63:3e:8d:54:1b:57:d2:64:8a:02:f5:e7:0b:01:7e:cc:e1:cf:
c5:56:f0:2a:9f:53:25:c9:44:25:6f:2b:eb:56:86:36:1a:77:
f2:dc:7d:05:f2:2b:4d:ef:0d:f7:40:30:83:12:67:67:09:85:
4e:bc:f4:e0:c1:8e:c5:91:9e:f9:91:c2:37:a0:a7:98:40:55:
44:ac:50:0e:d0:eb:68:64:28:47:cc:8f:9a:3b:67:fe:2c:de:
01:c4:d6:66:7f:56:b4:fc:f5:e9:b5:dd:7c:41:c4:f4:e4:24:
78:0b:6d:ef:df:75:e1:0f:51:a2:98:0d:c4:f7:35:f6:15:b5:
9e:7e:8b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:33 2023 by rpki-client on console-ams.rpki-client.org