Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ONjCElSW2bhS0fEFkTB-dDYG6Wc.roa
File: ONjCElSW2bhS0fEFkTB-dDYG6Wc.roa (raw, json)
Hash identifier: mHzawFI2lH1L4pFT32uMZ21N1sBTUvnjc6bUcygXs/4=
Subject key identifier: 38:D8:C2:12:54:96:D9:B8:52:D1:F1:05:91:30:7E:74:36:06:E9:67
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018AD1F3C0EF6C7D68D61F419BFAFC33271A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ONjCElSW2bhS0fEFkTB-dDYG6Wc.roa
Signing time: Tue 26 Sep 2023 14:45:27 +0000
ROA not before: Tue 26 Sep 2023 14:45:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202685
IP address blocks: 2.58.95.0/24 maxlen: 24
84.54.51.0/24 maxlen: 24
94.103.124.0/24 maxlen: 24
141.98.4.0/24 maxlen: 24
31.13.211.0/24 maxlen: 24
87.121.58.0/24 maxlen: 24
45.128.232.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
193.35.18.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d1:f3:c0:ef:6c:7d:68:d6:1f:41:9b:fa:fc:33:27:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 26 14:45:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=38d8c2125496d9b852d1f10591307e743606e967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e5:43:48:dd:39:79:68:4f:0f:64:1b:6e:59:
02:ba:70:92:5d:30:01:62:1e:a6:e2:d0:df:12:01:
52:12:21:64:f9:d3:86:a0:c6:f7:3c:17:62:75:0a:
35:79:bb:92:f0:fc:70:ed:fd:72:cb:83:ec:e4:7a:
d4:27:28:06:ce:2e:75:e7:a7:9e:c5:98:93:0d:05:
85:5a:e4:fe:d2:63:b2:84:e1:58:a0:a2:e0:ce:da:
d2:f2:4a:ef:33:e8:a4:59:79:cf:48:1a:22:ce:b8:
8e:2f:b8:0b:76:26:95:79:28:3f:d8:46:ef:8e:76:
05:70:dd:fa:48:c1:63:48:91:cb:bb:8d:9b:a0:20:
f6:77:96:3b:54:c2:c5:eb:77:e5:82:57:0a:a4:0c:
cd:55:a9:f9:64:67:52:3a:62:9a:14:5d:f1:49:e6:
aa:b9:e4:d7:93:d7:cc:d3:d0:8b:61:97:9a:44:2d:
32:7d:86:56:41:de:82:80:76:4a:4d:46:85:2f:4a:
12:a6:5a:14:29:28:b5:0c:df:89:6a:ed:c3:11:26:
0f:f1:4e:d2:3e:86:38:55:e5:8d:20:00:9e:38:71:
25:8f:08:ea:ef:a2:f0:16:71:f0:d6:9b:ed:af:e8:
41:21:f3:1e:70:c0:15:6a:d2:c1:26:98:d8:65:60:
3e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D8:C2:12:54:96:D9:B8:52:D1:F1:05:91:30:7E:74:36:06:E9:67
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ONjCElSW2bhS0fEFkTB-dDYG6Wc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.95.0/24
31.13.211.0/24
45.128.232.0/24
84.54.51.0/24
87.121.58.0/24
94.103.124.0/24
141.98.4.0/24
147.78.102.0/24
193.35.18.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:3e:48:f1:36:1a:bb:21:09:49:3e:0d:e3:a3:a1:07:ce:bb:
35:21:51:91:13:cf:b5:ad:e1:c2:e4:80:48:7e:1d:cc:e2:08:
c7:56:48:ea:b1:44:61:64:13:85:4a:fb:0c:33:7f:a8:9b:ec:
71:63:9f:93:69:89:91:c0:8a:14:a1:6f:57:f2:a5:74:31:80:
c7:3f:20:11:9e:c0:11:b0:ad:92:4f:66:1a:0b:f6:9b:e3:2f:
57:42:75:ac:ad:08:ab:59:57:e6:30:8e:c3:92:4a:ac:78:af:
c7:47:cd:1b:91:6a:61:23:65:69:b0:b6:a5:2c:0e:3a:1e:3e:
aa:c7:a4:2e:61:da:a0:6c:d8:5d:27:db:57:1e:b8:c6:e6:9b:
e4:94:32:43:5e:08:2e:dc:b7:9a:28:5f:7b:bc:fc:50:1b:c6:
fa:c0:44:5e:8a:0d:c8:53:b5:31:fa:4f:a7:0c:13:a2:02:be:
c2:cf:af:83:58:cd:a0:e4:5e:b9:4a:4e:bb:a2:2d:16:f4:3b:
5b:0c:c2:34:64:94:04:86:fc:10:b0:12:6f:f5:2a:3e:2f:57:
17:78:ba:fd:f6:a5:cc:c1:a5:25:62:d6:27:20:76:7f:70:00:
6b:b2:a4:c0:3a:4a:7e:58:5d:21:0e:df:ff:24:2f:74:c2:1b:
13:7f:4a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 27 07:57:47 2023 by rpki-client on console-ams.rpki-client.org