Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Sv7porx_1RrlVRJ9fATzJoJ-MHY.roa
File: Sv7porx_1RrlVRJ9fATzJoJ-MHY.roa (raw, json)
Hash identifier: dC4iUyqaz6ATYOfVkOWx16qCDZdaivHSzWRwnxssZ2I=
Subject key identifier: 4A:FE:E9:A2:BC:7F:D5:1A:E5:55:12:7D:7C:04:F3:26:82:7E:30:76
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018AD63BA3B3A33765E81660BE4433599507
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Sv7porx_1RrlVRJ9fATzJoJ-MHY.roa
Signing time: Wed 27 Sep 2023 10:42:27 +0000
ROA not before: Wed 27 Sep 2023 10:42:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25369
IP address blocks: 194.31.204.0/24 maxlen: 24
45.90.88.0/22 maxlen: 24
5.252.132.0/22 maxlen: 24
193.58.120.0/24 maxlen: 24
45.149.241.0/24 maxlen: 24
193.25.218.0/24 maxlen: 24
5.253.64.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d6:3b:a3:b3:a3:37:65:e8:16:60:be:44:33:59:95:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 27 10:42:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4afee9a2bc7fd51ae555127d7c04f326827e3076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:74:d5:c7:f2:6d:77:88:f1:c3:b0:4c:10:d1:
43:97:97:26:3d:25:76:81:3a:71:3d:93:a8:a1:70:
3c:ee:b7:45:c6:82:53:0d:88:82:bc:f8:3b:61:f0:
c5:27:80:0e:30:f0:4f:01:5f:f6:67:dc:48:ff:7b:
5f:4e:14:70:02:d5:e7:ba:bd:84:63:00:1a:32:c7:
de:3d:c1:dd:60:22:76:e9:2b:78:b9:f2:39:50:6e:
8b:30:67:f9:4a:ac:81:35:13:86:53:78:47:90:74:
74:33:f8:71:bf:60:46:21:93:b1:47:78:0c:ce:0f:
ff:fe:92:5b:4e:a9:38:a0:1e:4c:48:1a:4e:28:01:
93:30:7f:16:6e:83:68:66:c8:4b:8a:a0:ac:f6:08:
ea:2d:ed:ea:68:3b:77:e2:46:eb:de:a8:be:95:63:
5b:57:46:c2:89:04:26:4d:9b:33:bb:4b:cf:5c:52:
c3:c8:d1:04:99:9d:32:0c:bc:b1:b3:f7:59:7d:fe:
84:90:f6:d9:75:18:99:ee:8d:5a:3a:c6:98:a5:fb:
5e:7d:fc:07:21:0b:bd:06:fa:43:1f:04:2d:a9:ac:
57:30:9c:e0:cc:64:52:6e:cf:eb:3a:ef:e3:79:3f:
27:ab:27:95:d6:00:22:9b:67:5a:5d:9d:84:b4:ed:
24:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:FE:E9:A2:BC:7F:D5:1A:E5:55:12:7D:7C:04:F3:26:82:7E:30:76
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Sv7porx_1RrlVRJ9fATzJoJ-MHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.132.0/22
5.253.64.0/22
45.90.88.0/22
45.149.241.0/24
193.25.218.0/24
193.58.120.0/24
194.31.204.0/24
Signature Algorithm: sha256WithRSAEncryption
29:9a:42:c6:94:e9:58:2c:29:7e:4b:6a:62:3f:81:02:36:af:
cc:81:c8:78:7e:33:84:e8:f3:ea:d5:e6:e7:86:b5:77:9c:6d:
74:be:28:4c:6a:fb:38:14:31:1b:3a:cc:0a:e5:16:a2:66:1f:
ed:1a:21:28:50:e6:44:c8:af:39:3a:d8:bb:b4:47:4b:b4:6d:
4c:f1:e4:6b:2c:f4:48:85:2a:b5:d8:ca:47:54:0f:e4:fe:dd:
68:ee:97:0f:07:13:95:03:e5:ed:df:bf:27:4a:ea:ec:b1:d3:
9d:74:6c:81:f1:21:cb:8b:f8:78:50:bd:1e:e1:bd:2e:84:32:
e5:c9:42:41:7c:72:92:12:19:84:df:1c:c1:63:84:18:a4:f0:
fc:0f:7a:97:03:cf:bc:22:69:32:e8:5f:a7:6d:4e:80:51:76:
4b:34:c7:3a:4b:8e:23:5d:3f:82:28:43:bd:db:cf:3b:69:1a:
9a:db:16:00:54:bf:4c:2c:07:b3:5d:fe:62:b5:d8:e2:9f:2b:
6f:df:fa:4d:14:6c:ee:06:a1:2d:8e:e5:17:c9:36:a8:bb:bc:
34:35:22:bb:69:a8:34:d0:8c:9f:68:17:45:1f:9c:92:63:53:
76:48:e7:d1:50:c5:40:8f:5e:03:6e:2d:20:b5:87:34:28:9c:
94:00:65:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 6 05:44:44 2023 by rpki-client on console-ams.rpki-client.org