Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/P4ZkopTL08-gJ_efuxBF9uwVgg0.roa
File: P4ZkopTL08-gJ_efuxBF9uwVgg0.roa (raw, json)
Hash identifier: 2pKlNZRGYlVg7n+yYqtrq/8PoxZTwa3T6jGSa1jqt4c=
Subject key identifier: 3F:86:64:A2:94:CB:D3:CF:A0:27:F7:9F:BB:10:45:F6:EC:15:82:0D
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018C019884723F05C1A2A4A578AF93528BDD
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/P4ZkopTL08-gJ_efuxBF9uwVgg0.roa
Signing time: Fri 24 Nov 2023 13:50:21 +0000
ROA not before: Fri 24 Nov 2023 13:50:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 95.214.27.0/24 maxlen: 24
87.120.68.0/24 maxlen: 24
94.156.14.0/24 maxlen: 24
185.218.136.0/24 maxlen: 24
45.149.240.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:01:98:84:72:3f:05:c1:a2:a4:a5:78:af:93:52:8b:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 24 13:50:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f8664a294cbd3cfa027f79fbb1045f6ec15820d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:6e:25:8a:99:95:4e:54:2c:3a:40:6b:3d:43:
69:2d:0d:48:54:ef:dc:b4:d7:8c:30:15:6e:ee:75:
0b:c8:99:64:1e:ab:6f:f1:0c:92:07:bf:61:c4:95:
ef:e2:2f:4b:b3:cf:6e:49:81:08:3e:da:7e:e6:35:
ae:20:5b:c6:a0:e9:77:b3:01:81:80:b8:ac:f2:37:
78:2d:1f:cc:24:f5:b3:19:83:cb:df:02:28:c2:71:
cc:56:b6:c0:bf:c7:e4:5d:58:d3:42:a3:f8:00:78:
0f:04:58:a4:92:fe:d6:28:32:93:d2:38:0a:07:c2:
58:91:25:43:2c:1b:a4:b1:7f:cf:e7:d8:57:22:d1:
a0:e9:ad:10:67:cf:aa:01:65:ff:ee:c6:44:5d:9d:
10:fb:00:5a:c8:f4:d3:d0:c7:9c:43:70:fc:cc:20:
39:b6:80:46:52:9e:ac:3f:d9:49:c0:ed:be:62:ca:
fc:ca:55:0c:46:e5:c1:6a:e9:24:4c:14:36:04:9f:
41:e6:3b:e8:22:ba:3d:ce:96:f9:65:bc:71:46:38:
ce:6a:b2:e6:bb:a0:9b:d9:1d:46:78:39:b5:16:9a:
e3:e6:ff:e7:8c:35:f8:5b:b7:36:28:0a:9d:b3:1a:
1c:0a:38:aa:2a:b8:ee:19:85:a7:d4:22:26:5a:9c:
45:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:86:64:A2:94:CB:D3:CF:A0:27:F7:9F:BB:10:45:F6:EC:15:82:0D
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/P4ZkopTL08-gJ_efuxBF9uwVgg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.240.0/24
87.120.68.0/24
94.156.14.0/24
95.214.27.0/24
185.218.136.0/24
Signature Algorithm: sha256WithRSAEncryption
28:52:d1:b1:de:53:20:63:b7:3a:4e:79:e2:38:f1:26:a7:4d:
18:26:97:e1:f2:25:87:fc:7b:6d:42:e7:aa:05:0d:d0:f2:e6:
82:43:20:b0:dc:27:bf:51:ad:25:49:10:fc:c6:9b:b4:c4:8d:
83:bf:03:73:e3:ae:ac:9d:f1:f3:a7:8f:87:cf:f4:3a:3b:10:
5b:11:42:dc:7b:b2:85:cf:0e:49:52:30:8f:99:d0:00:33:21:
00:ce:e0:47:df:4d:43:26:a6:f2:fb:f1:f6:97:ef:13:ee:78:
a4:e3:67:63:4d:96:12:a6:5d:91:cb:0a:a0:61:46:9f:6d:2d:
98:2f:dc:d5:2e:b3:55:41:c4:69:fa:11:23:b0:1a:61:57:54:
94:92:46:db:af:ad:d7:ac:ac:23:cf:ed:d4:71:42:73:87:59:
fd:2c:2d:26:3a:c9:af:c5:23:cd:53:db:ac:75:f7:cc:4e:71:
b3:b5:cc:7d:16:8a:a9:62:3d:bd:aa:73:b9:bd:14:81:33:c3:
28:9a:21:6b:03:e4:47:3d:b2:97:a4:c0:4e:9b:8d:9c:ea:6b:
4f:54:c7:90:e5:6b:e3:d0:43:3b:5c:ed:a8:06:4c:cc:70:12:
74:fa:03:b8:38:6c:62:fe:1e:05:bc:76:d3:4b:59:df:a1:85:
38:dd:86:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:10 2024 by rpki-client on console-ams.rpki-client.org