Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Q9egt_xo-AwoNZadwbWXDEhv8q8.roa
File: Q9egt_xo-AwoNZadwbWXDEhv8q8.roa (raw, json)
Hash identifier: 3b5v3urdlbRpEQbJVLtuVS/NKtoEbR9EBXI048AhyMk=
Subject key identifier: 43:D7:A0:B7:FC:68:F8:0C:28:35:96:9D:C1:B5:97:0C:48:6F:F2:AF
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018C00BBE0B2AA6D9E1E93F79404E9848351
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Q9egt_xo-AwoNZadwbWXDEhv8q8.roa
Signing time: Fri 24 Nov 2023 09:49:21 +0000
ROA not before: Fri 24 Nov 2023 09:49:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207459
IP address blocks: 84.54.49.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
193.149.29.0/24 maxlen: 24
193.149.30.0/24 maxlen: 24
94.156.176.0/24 maxlen: 24
193.149.31.0/24 maxlen: 24
193.149.28.0/24 maxlen: 24
193.37.47.0/24 maxlen: 24
87.121.105.0/24 maxlen: 24
185.226.175.0/24 maxlen: 24
212.115.41.0/24 maxlen: 24
79.110.50.0/24 maxlen: 24
45.8.93.0/24 maxlen: 24
82.115.211.0/24 maxlen: 24
194.49.86.0/24 maxlen: 24
45.151.90.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:00:bb:e0:b2:aa:6d:9e:1e:93:f7:94:04:e9:84:83:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 24 09:49:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=43d7a0b7fc68f80c2835969dc1b5970c486ff2af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:70:b4:80:ca:07:7c:94:22:31:47:4f:57:9b:
76:2c:d7:23:da:3c:17:c7:76:a3:b8:f5:3f:ac:65:
a8:be:a6:c0:cb:cd:37:de:c6:12:2e:37:31:5c:ff:
d0:6d:1d:25:d6:29:24:e3:53:f4:6d:c4:24:ea:24:
da:f2:07:d2:6e:fd:a0:9c:51:e3:42:40:47:c0:25:
70:fc:48:db:56:16:5b:05:5a:8e:1f:eb:cf:a3:c9:
31:2d:32:1d:09:4e:9d:dc:77:15:97:e6:a4:4b:45:
d3:73:ee:1d:ef:6b:38:e8:bd:9a:2f:de:47:be:6c:
23:c6:51:a6:5b:1f:bc:a4:35:9b:4d:53:73:20:46:
7b:89:58:47:5c:c0:77:ab:14:c7:00:4f:05:85:77:
d2:1e:71:f1:57:f9:f2:dc:5a:cf:15:f4:9b:04:69:
1d:32:f0:87:9a:38:ba:b0:5b:48:19:4a:a7:62:fd:
a3:ce:71:57:57:97:79:97:81:ba:d8:13:60:22:9f:
01:5b:67:ae:50:ba:13:69:e1:c3:8d:17:b2:82:59:
89:b2:51:bf:88:2e:86:bd:59:3c:8a:24:79:ff:bb:
68:10:f8:62:c0:68:e2:80:7d:aa:ca:16:6e:e1:2e:
63:81:49:00:19:19:41:ee:79:e0:f1:4c:62:64:53:
dc:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:D7:A0:B7:FC:68:F8:0C:28:35:96:9D:C1:B5:97:0C:48:6F:F2:AF
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Q9egt_xo-AwoNZadwbWXDEhv8q8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.93.0/24
45.66.228.0/24
45.151.90.0/24
79.110.50.0/24
82.115.211.0/24
84.54.49.0/24
87.121.105.0/24
94.156.176.0/24
185.226.175.0/24
193.37.47.0/24
193.149.28.0/22
194.49.86.0/24
212.115.41.0/24
Signature Algorithm: sha256WithRSAEncryption
28:c7:87:3f:35:68:a1:fb:f9:1a:b8:d3:c6:66:3a:dd:39:89:
8e:f9:41:c8:f3:3d:4c:1e:73:6f:33:64:f6:92:a1:3d:b9:2d:
ab:82:bd:e6:0d:37:a1:63:83:72:cc:61:58:04:94:02:fb:00:
72:b6:37:70:fc:c6:45:83:24:9b:73:22:27:b7:a2:08:ac:e2:
1e:21:a9:0f:55:ce:48:e9:ae:bd:8b:3d:6d:2a:8a:a2:6a:06:
56:5c:7e:0f:6b:ac:6d:55:d2:ce:41:e6:c2:26:4b:c7:4e:f2:
54:27:16:2e:bb:92:46:c4:dd:0f:25:8c:eb:dd:02:73:e9:eb:
d7:9d:c8:60:bc:8d:8c:c5:8b:4c:c3:1a:00:53:73:ab:d3:9c:
f7:f6:53:d5:61:c9:83:e5:60:9f:d9:f3:96:be:91:17:47:30:
cd:48:7f:94:89:38:33:00:c1:26:4c:f8:36:76:bc:2c:3d:b0:
cd:77:92:6f:27:79:5e:4d:5a:d9:cd:71:6d:b8:23:6e:67:47:
74:97:41:18:6f:6a:a3:28:6c:4d:33:34:7a:52:10:85:a9:b0:
8e:03:33:50:2e:5a:d2:f4:54:7d:00:21:1a:b5:b4:b8:97:37:
8b:7a:4b:69:b3:53:a0:18:92:8d:66:00:8d:34:fd:96:d4:26:
c9:2b:2f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 27 14:37:10 2023 by rpki-client on console-ams.rpki-client.org