Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/P5v_YBACloyosY-1cbSxtdZMRdE.roa
File: P5v_YBACloyosY-1cbSxtdZMRdE.roa (raw, json)
Hash identifier: S71TkMTQ7rgVK1h6pPAfFCmq15wbWgLmXOjoWj+OATs=
Subject key identifier: 3F:9B:FF:60:10:02:96:8C:A8:B1:8F:B5:71:B4:B1:B5:D6:4C:45:D1
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018925AC86BA2820D748DE6CA9B2E8356E72
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/P5v_YBACloyosY-1cbSxtdZMRdE.roa
Signing time: Wed 05 Jul 2023 10:50:10 +0000
ROA not before: Wed 05 Jul 2023 10:50:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 91.92.21.0/24 maxlen: 24
45.66.229.0/24 maxlen: 24
87.121.100.0/24 maxlen: 24
87.121.101.0/24 maxlen: 24
84.21.173.0/24 maxlen: 24
87.120.64.0/23 maxlen: 24
87.120.89.0/24 maxlen: 24
87.121.57.0/24 maxlen: 24
87.121.56.0/24 maxlen: 24
194.169.174.0/24 maxlen: 24
87.120.220.0/23 maxlen: 24
87.120.32.0/24 maxlen: 24
87.120.35.0/24 maxlen: 24
87.120.34.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:25:ac:86:ba:28:20:d7:48:de:6c:a9:b2:e8:35:6e:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 5 10:50:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f9bff601002968ca8b18fb571b4b1b5d64c45d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5d:45:c6:24:ae:55:64:b9:91:fd:91:78:3c:
81:a4:4b:cd:1c:47:6d:14:81:d9:e3:b6:43:0d:43:
49:da:de:4d:b6:e9:a8:b1:38:f2:6d:e2:e9:bd:9e:
ad:da:32:6f:22:aa:57:3f:e3:c3:02:dd:7f:09:db:
73:a5:51:a7:c7:2f:bc:49:de:e2:12:db:73:42:22:
61:16:53:b3:06:52:85:c9:35:23:1e:b1:55:31:04:
a9:5d:d0:b9:86:b0:34:da:9e:f2:7f:67:fd:af:d5:
60:84:84:47:0c:08:36:06:89:89:0e:7e:3e:db:10:
71:02:16:b6:56:4e:ba:ee:36:6f:35:50:2d:08:a8:
e9:e7:fc:0d:84:db:bb:d0:0e:52:5c:34:cf:b8:2b:
79:b1:1d:e4:8c:da:86:0d:5b:84:d6:d3:fc:c7:17:
f0:fc:b5:b3:dc:f0:c7:81:f7:57:bf:b8:8f:0f:3c:
ce:6a:9c:09:9c:b7:c2:8c:3c:67:f6:f3:48:90:5e:
96:ec:34:8e:c7:33:12:6e:b5:2c:a7:8f:45:99:72:
7a:13:68:6d:03:f8:60:83:18:e3:df:11:8d:c5:c6:
f1:87:6e:8f:ae:df:c8:32:41:e8:a9:b8:74:ca:27:
1a:a2:c7:50:e8:00:42:8e:cc:56:73:8d:c1:92:1d:
0b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:9B:FF:60:10:02:96:8C:A8:B1:8F:B5:71:B4:B1:B5:D6:4C:45:D1
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/P5v_YBACloyosY-1cbSxtdZMRdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.229.0/24
84.21.173.0/24
87.120.32.0/24
87.120.34.0/23
87.120.64.0/23
87.120.89.0/24
87.120.220.0/23
87.121.56.0/23
87.121.100.0/23
91.92.21.0/24
194.169.174.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:a8:06:83:68:94:1c:78:1a:ee:5d:c4:65:51:0c:bd:b2:d2:
bb:86:16:a6:79:0f:91:88:6d:e8:6b:1b:84:7f:08:f5:b5:85:
4e:74:b2:7c:ec:84:6d:ba:36:15:aa:fd:57:68:d4:a8:93:e4:
b2:a1:cd:ae:cc:d6:ae:d1:60:f7:22:d1:d9:38:b2:8d:d0:c1:
49:47:ed:2d:8b:78:76:82:ac:cf:25:d0:74:2a:d0:af:8a:b7:
12:58:c5:f9:24:95:75:4b:a3:85:d1:7c:f3:11:36:94:79:a2:
66:10:68:91:7e:04:7c:a9:39:39:89:97:41:6d:18:bf:27:62:
9f:ab:df:ca:19:94:a0:33:23:b0:70:95:24:8a:11:b8:85:a2:
65:47:30:ee:90:d6:4f:ff:ce:c7:df:03:3e:22:b9:d1:ac:f3:
67:f4:00:a6:9d:c8:0f:78:46:67:e1:b9:69:2f:04:eb:4f:09:
da:0d:90:af:22:7d:5a:6f:5b:09:d4:cc:c1:65:fc:dc:85:62:
34:b9:39:6b:81:92:af:39:90:50:a3:bd:19:26:aa:da:0a:6a:
1d:18:55:15:21:67:50:a6:dc:00:62:9e:a2:15:b5:4c:ed:d9:
48:38:c7:f7:32:05:0e:31:27:9b:b4:b1:f2:d0:3e:5c:63:1c:
41:f6:b6:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 25 11:28:57 2023 by rpki-client on console-ams.rpki-client.org