Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GmuSVEAJm9qq7h7kIqv5yH_2lQc.roa
File: GmuSVEAJm9qq7h7kIqv5yH_2lQc.roa (raw, json)
Hash identifier: J3uh/WNRIzbpALwCfeN92SD1vvb7PmFL7b6opljInW8=
Subject key identifier: 1A:6B:92:54:40:09:9B:DA:AA:EE:1E:E4:22:AB:F9:C8:7F:F6:95:07
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018A84BFE06E879BA04447AAFEC6CEAAB7B8
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GmuSVEAJm9qq7h7kIqv5yH_2lQc.roa
Signing time: Mon 11 Sep 2023 14:58:01 +0000
ROA not before: Mon 11 Sep 2023 14:58:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 185.218.84.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
94.156.239.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
185.252.176.0/24 maxlen: 24
147.78.101.0/24 maxlen: 24
147.78.100.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
185.216.84.0/22 maxlen: 24
87.121.45.0/24 maxlen: 24
194.180.50.0/24 maxlen: 24
194.169.174.0/24 maxlen: 24
94.156.78.0/24 maxlen: 24
94.154.163.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
185.219.126.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:84:bf:e0:6e:87:9b:a0:44:47:aa:fe:c6:ce:aa:b7:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 11 14:58:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a6b925440099bdaaaee1ee422abf9c87ff69507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:85:73:18:c2:c4:10:4b:09:8b:72:3b:6c:20:
6d:c4:16:fb:e8:0e:72:43:df:5f:54:32:71:a6:d5:
80:e4:fc:c9:42:dc:00:26:c4:e5:cb:9c:5c:90:b6:
cb:c5:48:5e:cf:51:ec:95:6a:3e:fb:37:aa:0e:d0:
53:46:fc:ca:1e:89:bb:a0:c4:2e:18:4d:3c:60:79:
a1:49:8c:03:64:09:4f:e2:9f:74:88:b6:aa:f7:61:
4e:f0:98:98:a9:da:15:8e:30:fe:31:94:36:68:c7:
d5:15:97:fe:4e:e9:2e:62:10:9f:91:58:3b:53:68:
04:e3:85:51:b7:c3:6d:be:8e:d0:16:50:75:c4:14:
55:92:5b:3b:87:b2:2d:6f:1c:a0:65:a9:2e:1b:a3:
83:f7:c8:c1:83:b4:a3:59:f2:44:82:40:0e:46:9f:
74:9f:0d:02:05:fd:76:3d:21:85:87:89:e6:fe:1d:
05:28:ef:8f:d4:98:9b:e0:b3:0d:21:de:ff:b5:cc:
dc:94:ec:85:d5:bd:98:67:93:22:f5:e4:d0:f8:79:
69:64:c7:ae:55:3e:5d:79:fc:7f:3e:16:cb:c3:c1:
67:1e:67:69:bc:02:d6:56:84:83:97:8e:5f:b8:da:
69:e8:13:18:ab:14:f1:e9:41:26:c0:b2:5c:d6:e6:
4e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:6B:92:54:40:09:9B:DA:AA:EE:1E:E4:22:AB:F9:C8:7F:F6:95:07
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GmuSVEAJm9qq7h7kIqv5yH_2lQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.89.0/24
87.121.45.0/24
92.119.196.0/23
94.154.161.0-94.154.163.255
94.156.78.0/24
94.156.239.0/24
147.78.100.0-147.78.102.255
171.22.72.0/22
178.215.224.0/24
178.215.236.0/24
185.216.84.0/22
185.218.84.0/22
185.219.126.0/24
185.252.176.0/24
194.169.174.0/24
194.180.50.0/24
Signature Algorithm: sha256WithRSAEncryption
65:73:45:cc:e9:be:13:b7:37:51:a9:0b:a8:ad:90:84:3d:0a:
a0:8a:a4:f9:cd:4e:e1:73:d8:44:54:e7:b4:98:82:22:9b:62:
3b:03:c2:aa:95:f9:11:3b:da:f2:3b:f2:17:af:5b:7a:eb:35:
1b:7d:f1:62:1b:e4:16:31:49:01:6e:7b:cf:51:34:d3:ce:64:
f3:27:4a:eb:d7:3d:8b:e4:2b:df:0a:d6:c9:5f:27:f4:66:03:
2d:f1:c4:94:63:5f:e1:5d:1a:05:82:5c:7b:c2:63:a3:6a:9d:
d8:da:55:d8:24:ff:6b:db:6d:b4:39:b9:19:9e:76:e8:19:c1:
9f:a7:1f:95:3f:44:ed:f9:27:7f:6e:ce:20:05:1c:1c:ee:65:
62:eb:08:44:f8:5a:0c:4d:8a:fd:c1:c3:03:75:b3:b9:fc:05:
d0:db:5d:a7:1a:54:bf:17:5a:4e:62:c3:09:3b:1c:97:4e:7f:
a2:b3:a7:05:ca:06:0b:b7:d2:c2:91:46:1c:f0:c0:ec:33:76:
e8:7a:e6:07:54:08:04:3b:62:c0:3e:fc:b0:d2:48:5f:61:21:
b4:51:23:7f:dc:3e:36:62:4e:ba:d4:a0:60:92:36:10:62:b5:
d1:bc:44:91:ad:cc:42:14:b8:51:69:6e:2b:34:66:e8:d9:55:
a9:95:68:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 18 07:16:56 2023 by rpki-client on console-fra.rpki-client.org