Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/QQw-iLuXmTLEjH48q0bwYS4y0gg.roa
File: QQw-iLuXmTLEjH48q0bwYS4y0gg.roa (raw, json)
Hash identifier: K55tdXnKOHMH35c/xgISsTRXBti7xOpFF9VvKjPk4Fw=
Subject key identifier: 41:0C:3E:88:BB:97:99:32:C4:8C:7E:3C:AB:46:F0:61:2E:32:D2:08
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018AD58BDC48E0DFF80A131698258628D318
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/QQw-iLuXmTLEjH48q0bwYS4y0gg.roa
Signing time: Wed 27 Sep 2023 07:30:27 +0000
ROA not before: Wed 27 Sep 2023 07:30:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 185.218.84.0/22 maxlen: 24
91.92.24.0/23 maxlen: 24
147.78.101.0/24 maxlen: 24
147.78.100.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.59.0/24 maxlen: 24
194.180.50.0/24 maxlen: 24
194.169.174.0/24 maxlen: 24
94.156.78.0/24 maxlen: 24
94.154.163.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
178.215.224.0/24 maxlen: 24
94.156.239.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
87.121.69.0/24 maxlen: 24
185.252.176.0/24 maxlen: 24
94.156.177.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
185.216.84.0/22 maxlen: 24
87.120.87.0/24 maxlen: 24
93.123.116.0/24 maxlen: 24
185.219.126.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d5:8b:dc:48:e0:df:f8:0a:13:16:98:25:86:28:d3:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 27 07:30:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=410c3e88bb979932c48c7e3cab46f0612e32d208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:28:c8:fa:65:74:a9:57:fa:b1:a3:d9:f0:d2:
df:34:3b:31:44:6c:73:8c:ff:2f:e8:ea:d4:ec:a1:
28:6e:bb:72:92:4f:27:8d:c8:85:76:d9:40:4b:ee:
3b:20:16:eb:73:2b:3a:0b:02:40:9c:b2:a7:08:ee:
b5:43:e2:ff:1c:e9:69:03:50:88:fe:85:7b:8b:a8:
9a:32:c3:de:be:30:a3:96:66:4a:3a:1f:2f:32:98:
59:33:b4:2b:79:d0:f0:7e:e7:11:46:be:55:bd:17:
21:e5:55:6d:f3:88:b4:21:6f:14:b5:8a:80:17:46:
f4:3b:ce:a5:e4:b5:87:ab:c4:5e:40:71:53:30:be:
c6:92:c6:76:04:aa:37:3a:90:d4:ba:9d:af:16:39:
ef:8e:b8:7e:b2:d9:9c:0d:54:bd:e0:13:f8:eb:23:
9f:bc:a8:2a:20:ee:5f:42:ff:a1:a6:67:4e:9b:68:
6c:30:c0:06:03:13:c4:68:2d:a8:20:75:55:9f:05:
fe:6a:19:3d:4c:36:c0:a2:79:6a:41:09:87:06:f6:
5a:23:1a:75:f9:c4:90:c2:44:13:c6:65:38:e5:f1:
c5:fa:ee:f9:f4:4d:d6:87:92:09:92:d7:f8:cc:19:
50:a4:e0:a2:85:56:fe:8d:0b:e0:66:ca:8e:5d:70:
73:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:0C:3E:88:BB:97:99:32:C4:8C:7E:3C:AB:46:F0:61:2E:32:D2:08
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/QQw-iLuXmTLEjH48q0bwYS4y0gg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.89.0/24
87.120.87.0/24
87.121.45.0/24
87.121.59.0/24
87.121.69.0/24
91.92.24.0/23
92.119.196.0/23
93.123.116.0/24
94.154.161.0-94.154.163.255
94.156.78.0/24
94.156.177.0/24
94.156.239.0/24
147.78.100.0-147.78.102.255
171.22.72.0/22
178.215.224.0/24
178.215.236.0/24
185.216.84.0/22
185.218.84.0/22
185.219.126.0/24
185.252.176.0/24
194.169.174.0/24
194.180.50.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:75:13:d5:17:69:cc:19:df:7c:d0:36:43:cf:b6:22:d7:87:
22:77:dc:29:d9:73:b8:c5:57:89:3d:77:04:c3:c8:58:21:40:
eb:8b:ba:cc:b7:02:fd:14:a7:66:b1:63:f1:52:ab:de:82:33:
5d:5a:0a:6c:75:9e:8f:a0:fe:e5:c3:6f:41:db:81:2f:31:3d:
68:93:d1:4b:88:39:e2:90:5d:fd:38:75:55:a0:da:88:f6:12:
c4:0a:3b:2b:a8:45:ff:86:a2:5c:57:88:29:6e:08:48:83:06:
af:1f:c9:67:cc:c6:5f:89:e2:76:9c:94:be:4f:39:61:4b:e7:
a1:e6:37:36:ab:4a:dd:57:ac:6e:0d:cf:37:b9:5d:7b:fd:22:
94:f0:fa:e7:f5:e8:e8:33:7f:46:4e:af:c2:82:c2:3a:78:a2:
41:19:34:cb:08:60:fe:9a:16:4d:10:1e:9f:c0:cc:c1:b0:11:
77:1c:a6:00:0c:04:04:8c:2d:ea:dd:4b:fb:83:84:e9:90:7b:
d9:58:59:f5:62:16:b6:fc:f8:72:e9:33:84:e4:18:68:c8:7f:
50:7a:d9:49:bb:c1:92:f2:d4:07:95:78:f2:ad:a5:95:81:92:
23:76:17:f9:a5:23:59:5e:66:40:99:aa:db:bb:41:60:1f:73:
4d:59:4c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 28 14:11:03 2023 by rpki-client on console-ams.rpki-client.org