Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JkKKIaWvn0ZSmxsn6IIq0OqtgO8.roa
File: JkKKIaWvn0ZSmxsn6IIq0OqtgO8.roa (raw, json)
Hash identifier: ltwj11/w6fFkkNPb4Xbv3s9XzptLFeJ1Ja3d0qo8/LI=
Subject key identifier: 26:42:8A:21:A5:AF:9F:46:52:9B:1B:27:E8:82:2A:D0:EA:AD:80:EF
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0188BF39363313C04781CC43DD3A4096442D
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JkKKIaWvn0ZSmxsn6IIq0OqtgO8.roa
Signing time: Thu 15 Jun 2023 13:22:57 +0000
ROA not before: Thu 15 Jun 2023 13:22:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 185.218.84.0/22 maxlen: 24
94.156.239.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
147.78.101.0/24 maxlen: 24
147.78.100.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
94.103.124.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
94.103.126.0/24 maxlen: 24
185.218.137.0/24 maxlen: 24
94.154.163.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
185.219.126.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:bf:39:36:33:13:c0:47:81:cc:43:dd:3a:40:96:44:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 15 13:22:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26428a21a5af9f46529b1b27e8822ad0eaad80ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3a:18:50:37:64:26:99:81:be:e3:a5:92:55:
34:e9:aa:d3:86:08:7f:b2:05:4e:08:cb:b2:98:91:
51:94:e4:ea:92:a7:af:91:83:8e:cb:df:d9:cb:49:
24:ad:38:3d:95:54:f7:00:d8:39:62:c3:cd:8a:e4:
1b:10:ad:51:b5:d0:0b:23:64:f7:95:84:e5:c5:64:
4e:4b:d0:00:18:90:8a:09:c3:ac:a4:96:86:60:e5:
0e:f2:a9:6e:c5:78:49:3b:08:61:7f:c1:10:e3:9b:
74:d4:6c:42:99:d2:7d:0d:3f:48:d5:68:b5:d2:82:
1b:2f:64:b4:2b:f4:45:de:95:72:6e:53:00:28:20:
c0:f7:7b:d6:d9:df:b0:ce:cd:4c:c4:6f:e8:48:04:
76:42:d8:d5:46:84:27:d3:00:f8:ec:88:c9:95:24:
e5:ae:cb:97:f0:b7:86:7b:ec:97:1e:0f:72:5b:71:
d8:d3:59:f8:13:bb:5b:4d:16:5c:de:ef:49:ff:ff:
75:a4:df:e0:b0:b7:8a:72:0e:66:fc:ce:8c:3d:8f:
50:08:c0:3d:e9:cb:66:33:b3:57:6b:e4:d6:6b:21:
f2:cb:cc:d2:95:5f:7e:ca:5a:c9:06:43:dd:8b:86:
b4:82:36:16:87:7d:79:da:30:36:ab:80:dd:35:24:
bf:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:42:8A:21:A5:AF:9F:46:52:9B:1B:27:E8:82:2A:D0:EA:AD:80:EF
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JkKKIaWvn0ZSmxsn6IIq0OqtgO8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.89.0/24
92.119.196.0/23
94.103.124.0/24
94.103.126.0/24
94.154.161.0-94.154.163.255
94.156.239.0/24
147.78.100.0/23
171.22.72.0/22
178.215.236.0/24
185.216.84.0/22
185.218.84.0/22
185.218.137.0/24
185.219.126.0/24
Signature Algorithm: sha256WithRSAEncryption
77:4b:a5:48:50:5b:1c:2a:ae:9f:6a:8f:89:3a:c1:f0:97:12:
8d:56:36:8d:f5:44:51:d3:70:1b:15:a0:91:70:78:80:87:7c:
ae:f2:bd:3b:93:28:65:28:6d:cf:59:24:e8:06:e0:b8:de:18:
fc:1b:de:90:71:f1:65:66:32:ee:ea:54:67:3f:bc:bc:fe:69:
44:b6:62:79:3f:15:d6:be:36:87:2b:0f:ce:8b:88:eb:7e:1f:
ba:71:80:70:d7:28:97:a6:81:58:22:a0:ca:53:d9:fe:41:fe:
ae:5d:47:d6:2a:09:7f:1e:e8:64:d1:ed:9a:a1:3f:5a:1b:90:
77:1b:83:13:c5:35:ea:27:7d:fb:52:7d:24:20:11:33:62:0b:
76:fb:0c:81:bf:45:39:e7:0d:c6:9d:40:3f:23:24:47:09:b8:
77:79:9d:a9:c1:cb:12:54:05:fb:68:33:08:78:c4:f4:10:20:
bd:bf:3c:e3:0a:e0:27:d3:9b:88:80:30:61:a3:c9:c3:e5:4b:
2d:a1:73:c7:1c:4e:24:c4:28:f0:d1:22:ba:a3:ad:49:34:bb:
31:0a:66:b4:9f:89:83:7d:9e:d5:93:d6:a6:21:1b:c0:31:45:
a6:84:d5:1f:e8:34:3a:17:bb:92:64:c7:12:d0:bb:cd:04:b3:
64:87:0b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:35 2023 by rpki-client on console-ams.rpki-client.org