Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Ll8QatjSc7NGzfKqMwKpg_sF4nU.roa
File: Ll8QatjSc7NGzfKqMwKpg_sF4nU.roa (raw, json)
Hash identifier: TVPbEfiHiEhcv7mzjV2SHPKTbuWFY8q8igpIzbxRbVA=
Subject key identifier: 2E:5F:10:6A:D8:D2:73:B3:46:CD:F2:AA:33:02:A9:83:FB:05:E2:75
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018C57B4425935E9764813B3274E0FED8741
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Ll8QatjSc7NGzfKqMwKpg_sF4nU.roa
Signing time: Mon 11 Dec 2023 07:08:00 +0000
ROA not before: Mon 11 Dec 2023 07:08:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206003
IP address blocks: 171.22.31.0/24 maxlen: 24
87.121.124.0/23 maxlen: 24
81.161.239.0/24 maxlen: 24
91.200.192.0/22 maxlen: 24
94.156.248.0/24 maxlen: 24
94.156.250.0/24 maxlen: 24
87.121.162.0/24 maxlen: 24
147.78.100.0/23 maxlen: 24
45.141.158.0/24 maxlen: 24
171.22.17.0/24 maxlen: 24
171.22.18.0/24 maxlen: 24
79.110.61.0/24 maxlen: 24
92.249.48.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
45.129.84.0/24 maxlen: 24
45.129.86.0/24 maxlen: 24
193.35.19.0/24 maxlen: 24
37.139.130.0/24 maxlen: 24
94.154.172.0/24 maxlen: 24
193.25.216.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:57:b4:42:59:35:e9:76:48:13:b3:27:4e:0f:ed:87:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 11 07:08:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2e5f106ad8d273b346cdf2aa3302a983fb05e275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0f:09:18:6a:26:fe:3a:88:af:5a:eb:13:73:
9a:0d:80:38:0a:47:b8:d0:d3:43:9b:01:71:bd:b9:
5e:f9:6e:ea:4e:40:ea:a9:c1:8d:d7:6f:2a:88:e6:
22:86:f1:61:3f:e7:5d:99:9a:dc:fa:8b:75:34:30:
d9:f6:cd:28:9e:b6:97:e9:72:29:6d:34:29:b7:8e:
1e:62:71:39:c6:2d:17:e8:1f:bd:04:d9:1f:35:08:
12:59:7f:5f:25:3d:02:89:47:49:54:9a:51:be:f4:
36:85:14:61:6d:07:a1:35:2d:b7:f9:5b:a9:87:ca:
71:c2:04:58:ba:84:29:a1:a4:33:08:a9:67:ab:49:
ef:aa:71:65:5f:3d:15:f2:22:9b:50:a3:f5:5a:b4:
fc:ca:fa:25:95:57:1b:0f:1b:37:f7:93:b1:6a:49:
26:f3:d5:16:cb:ff:f3:9f:13:99:73:93:95:6c:18:
e4:df:00:e0:ca:c3:98:19:02:8f:c4:2e:ee:56:85:
03:b5:d6:ee:b5:8b:c5:0a:1a:39:b5:87:c4:6c:d2:
b5:24:66:5e:df:5c:db:d5:76:62:76:4b:01:ae:b6:
6a:22:15:5f:d2:eb:dc:95:1c:e5:59:93:1c:39:1f:
d9:5a:32:20:30:57:a0:b8:74:ad:b1:3c:af:7f:7b:
31:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:5F:10:6A:D8:D2:73:B3:46:CD:F2:AA:33:02:A9:83:FB:05:E2:75
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Ll8QatjSc7NGzfKqMwKpg_sF4nU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.130.0/24
45.129.84.0/24
45.129.86.0/24
45.141.158.0/24
79.110.61.0/24
81.161.239.0/24
83.219.97.0/24
87.121.124.0/23
87.121.162.0/24
91.200.192.0/22
92.249.48.0/24
94.154.172.0/24
94.156.248.0/24
94.156.250.0/24
147.78.100.0/23
171.22.17.0-171.22.18.255
171.22.31.0/24
193.25.216.0/24
193.35.19.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:30:c3:61:0c:72:14:03:7d:f3:7f:f7:2a:89:c5:11:5a:79:
26:3e:c7:b9:f8:2c:e5:ec:3c:d0:f2:a1:79:ae:39:68:be:1a:
aa:94:ad:14:72:cd:33:6d:3e:41:17:a7:1c:35:53:a4:94:d9:
37:f9:eb:20:39:f9:f3:52:b9:dd:fa:1b:30:b7:73:88:7d:9a:
c8:63:fd:9e:c2:9b:79:bd:c4:bb:bd:25:0a:78:b4:ac:6b:02:
ac:9d:2f:46:e7:a1:9f:ce:43:42:eb:e3:59:d5:e4:0a:02:ce:
1e:4e:02:8b:07:53:87:47:3f:60:7b:b6:0f:89:f1:0b:d5:0e:
cc:46:b1:20:f4:af:4c:de:0d:ca:81:10:1b:14:b7:ba:6b:60:
f5:d7:27:5f:5d:c3:3a:ab:5d:8e:cf:fa:34:aa:bf:1b:a7:82:
ce:7b:15:d0:11:50:da:32:4a:fe:77:e8:47:3d:fa:77:79:7b:
dc:ef:11:5f:2f:4f:90:90:43:9a:86:65:ef:ba:7c:b5:29:b7:
73:5a:b4:b9:dd:f9:ac:84:a9:85:6e:86:da:cb:64:2b:9b:d2:
a9:89:02:a7:5a:57:7b:e7:67:4c:e2:6c:86:55:30:f4:88:67:
af:6f:d0:96:37:60:da:6c:76:ac:29:3e:96:7e:32:e8:85:ae:
71:84:22:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 18 08:47:18 2023 by rpki-client on console-fra.rpki-client.org