Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/FLJa8tb01U__zRFln3uJgwDSshg.roa
File: FLJa8tb01U__zRFln3uJgwDSshg.roa (raw, json)
Hash identifier: cBmA8StBEUCpptLjF+BP9qnQErmhJT+2Gc0BVJ453T4=
Subject key identifier: 14:B2:5A:F2:D6:F4:D5:4F:FF:CD:11:65:9F:7B:89:83:00:D2:B2:18
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018BB9AB148598DF05DE21B8767ECBE6651D
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/FLJa8tb01U__zRFln3uJgwDSshg.roa
Signing time: Fri 10 Nov 2023 14:37:58 +0000
ROA not before: Fri 10 Nov 2023 14:37:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204843
IP address blocks: 94.156.11.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
193.149.2.0/24 maxlen: 24
193.149.3.0/24 maxlen: 24
37.221.121.0/24 maxlen: 24
37.221.122.0/24 maxlen: 24
37.221.123.0/24 maxlen: 24
37.221.120.0/24 maxlen: 24
45.144.153.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b9:ab:14:85:98:df:05:de:21:b8:76:7e:cb:e6:65:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 10 14:37:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=14b25af2d6f4d54fffcd11659f7b898300d2b218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f8:33:26:ce:f0:f2:ce:dd:6a:7f:af:47:0a:
57:40:a1:74:70:0c:c2:76:19:d0:a1:0c:89:46:5b:
2d:7d:b6:f0:af:d6:e6:0d:e9:bb:4f:b3:9e:d5:fe:
a7:24:2f:b1:d6:ae:ee:85:c2:5d:ed:8c:65:f8:1b:
f9:60:40:18:cb:4e:a0:ac:34:3b:c0:1b:a5:d1:f8:
da:fc:e5:c0:43:a8:ce:0d:dc:f0:98:e7:a8:e3:ae:
f8:9f:5f:9d:81:db:61:d6:41:31:38:82:c2:f3:80:
1f:7b:fd:54:67:11:8a:d7:52:7e:39:27:10:0f:21:
90:4b:34:f8:21:da:e1:96:ce:a0:ed:e4:96:b4:f0:
04:d5:8a:8b:7e:e8:2d:18:d4:cd:81:ef:72:c9:98:
1d:29:23:44:06:76:6b:e2:d8:7d:1c:8c:f2:3c:01:
04:4b:b2:da:b0:ac:c7:14:21:7c:ab:fb:36:4a:ec:
d7:d9:45:f6:d5:c9:3c:76:38:bc:98:f0:15:2e:cd:
d6:a6:0e:4b:03:91:d5:14:2c:e0:7a:0f:e5:7a:71:
b9:4f:ae:ec:3f:c5:be:8c:71:5c:c5:a4:2c:2b:50:
3a:01:ea:ad:e9:21:71:0f:1f:44:ff:7f:32:85:ea:
03:a5:0a:98:a1:e9:26:cd:d2:37:0b:83:f5:c0:1f:
bd:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B2:5A:F2:D6:F4:D5:4F:FF:CD:11:65:9F:7B:89:83:00:D2:B2:18
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/FLJa8tb01U__zRFln3uJgwDSshg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.120.0/22
45.144.153.0/24
94.156.11.0/24
141.98.1.0/24
193.149.2.0/23
Signature Algorithm: sha256WithRSAEncryption
b0:8d:19:64:32:54:06:58:25:db:5e:c5:04:22:cc:98:49:31:
ef:b7:a7:e6:02:a0:8e:75:e0:4a:dc:50:8b:10:75:41:43:d3:
f4:5c:2c:51:a4:a2:0e:59:73:15:97:69:84:57:a4:41:f9:74:
23:4a:0c:d4:34:cb:78:fb:d3:00:69:18:42:e8:68:01:db:89:
93:38:ec:33:33:52:51:95:d5:7b:e7:66:1c:2f:12:9f:7e:77:
57:de:98:d3:52:dd:5b:0c:b5:e9:02:f3:df:67:29:f7:f7:ac:
66:d0:0a:93:5c:03:07:4e:4f:cf:e2:89:c9:eb:09:3f:5e:71:
0e:ac:33:04:96:e9:21:08:d3:19:ff:6a:a1:7e:2e:e9:b8:09:
cd:3e:56:64:13:c9:18:31:b2:53:c3:68:d0:61:2a:e9:47:7f:
5c:fc:04:37:f4:f5:fa:3b:65:25:d5:3b:84:95:3a:6a:ff:b4:
49:c5:97:f9:14:08:86:dc:d2:7a:74:10:a6:7d:ff:72:88:46:
75:92:12:fe:b2:16:ab:fe:99:2a:83:55:7b:cc:aa:e4:d6:ab:
ca:8a:ac:70:7e:a0:55:24:4b:e7:45:42:07:24:a2:e0:b4:58:
0d:2d:46:16:bd:94:19:3f:e9:47:78:96:24:57:89:a4:a5:09:
ea:59:df:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 10 16:12:17 2023 by rpki-client on console-ams.rpki-client.org