Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/VDRhFzzeqMbC9R7Po_73kU8bMoU.roa
File: VDRhFzzeqMbC9R7Po_73kU8bMoU.roa (raw, json)
Hash identifier: xhgfxG+k4rZt+SfdMDRajAR/ajXPB7hYFMABWUyGZLo=
Subject key identifier: 54:34:61:17:3C:DE:A8:C6:C2:F5:1E:CF:A3:FE:F7:91:4F:1B:32:85
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01856D81E1B95C2C073C269976DF70C9182A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/VDRhFzzeqMbC9R7Po_73kU8bMoU.roa
Signing time: Sun 01 Jan 2023 13:25:06 +0000
ROA not before: Sun 01 Jan 2023 13:25:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34577
IP address blocks: 93.123.40.0/21 maxlen: 21
87.120.178.0/23 maxlen: 23
87.120.180.0/22 maxlen: 22
87.120.184.0/22 maxlen: 22
87.120.190.0/23 maxlen: 23
93.123.67.0/24 maxlen: 24
212.73.149.0/24 maxlen: 24
93.123.66.0/24 maxlen: 24
87.121.84.0/22 maxlen: 22
87.121.88.0/23 maxlen: 23
87.120.158.0/23 maxlen: 23
87.120.45.119/32 maxlen: 32
94.156.112.0/20 maxlen: 20
37.60.141.0/24 maxlen: 24
87.121.48.0/22 maxlen: 22
87.120.0.0/22 maxlen: 22
93.123.96.0/22 maxlen: 22
93.123.100.0/23 maxlen: 23
87.120.12.0/24 maxlen: 24
87.120.14.0/23 maxlen: 23
87.120.232.0/23 maxlen: 23
87.120.234.0/23 maxlen: 23
87.120.44.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:e1:b9:5c:2c:07:3c:26:99:76:df:70:c9:18:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 13:25:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=543461173cdea8c6c2f51ecfa3fef7914f1b3285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a5:36:be:a5:5d:f3:41:5a:84:1f:d6:5d:ff:
c4:39:77:f5:a2:97:20:eb:c5:0a:28:b2:0f:9b:d7:
e4:e6:86:93:a3:be:f8:c0:e9:cb:fb:dd:ee:87:a3:
a0:71:e4:16:0f:56:74:6d:b2:ca:f8:05:53:1d:fb:
36:f8:92:e0:b7:67:7d:5c:ac:bc:a3:9f:d3:20:7f:
4b:2f:31:da:f5:e5:32:b1:46:07:16:a0:5a:dd:55:
38:b8:a5:25:c4:3b:a4:9e:88:2e:bf:e5:9c:2d:09:
4f:5e:5d:d6:9e:7d:ff:1e:f4:e5:65:df:32:eb:62:
52:75:92:50:ea:fc:bb:f4:b5:ea:75:bd:c7:65:16:
b3:d4:d2:19:6d:90:3a:ab:f2:7a:58:a8:a9:54:fe:
ad:0c:fa:34:68:fc:56:20:ee:0b:31:51:0b:3f:78:
cd:4a:81:2b:21:7c:bb:36:d4:66:d7:1a:7f:9a:44:
f9:28:45:d4:29:c6:66:bb:fa:dc:d3:8b:38:1a:3f:
9a:99:31:1d:79:c3:8d:fc:d8:22:59:d1:a4:19:f4:
08:ff:36:40:fe:7e:80:78:92:c0:ac:8c:3f:3b:3f:
3a:5f:df:ae:33:62:50:f0:62:5e:7a:74:66:76:67:
61:74:4e:90:e8:4e:bf:09:7b:cd:66:e3:06:2b:00:
84:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:34:61:17:3C:DE:A8:C6:C2:F5:1E:CF:A3:FE:F7:91:4F:1B:32:85
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/VDRhFzzeqMbC9R7Po_73kU8bMoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.60.141.0/24
87.120.0.0/22
87.120.12.0/24
87.120.14.0/23
87.120.44.0/23
87.120.158.0/23
87.120.178.0-87.120.187.255
87.120.190.0/23
87.120.232.0/22
87.121.48.0/22
87.121.84.0-87.121.89.255
93.123.40.0/21
93.123.66.0/23
93.123.96.0-93.123.101.255
94.156.112.0/20
212.73.149.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:dc:ba:4a:39:92:bb:58:e9:b9:7d:9c:46:0e:ed:f4:0d:b7:
e3:b5:aa:af:d8:5a:10:13:05:f1:e5:d2:5f:ea:13:8c:a8:68:
05:7c:e0:db:95:ae:d9:37:45:23:9f:5f:7f:5a:c8:b2:d9:6f:
5a:81:55:39:b2:7e:87:5f:8f:47:c1:ad:9e:93:db:2d:87:0b:
08:00:12:23:2e:06:3e:26:bd:d8:6d:e3:d9:7e:95:6c:d9:43:
76:a7:75:32:36:18:6c:ee:80:7e:aa:b1:da:ca:e6:80:84:c9:
cd:ee:1e:0b:69:a8:12:d9:dc:c9:82:16:ce:f0:d0:e9:f4:d2:
76:02:ad:3d:78:bf:1f:86:f0:14:1a:77:4c:35:15:33:74:48:
87:9d:67:60:cb:51:7d:e9:b7:89:92:38:5e:ec:1d:99:40:cf:
56:3b:62:2d:09:49:c9:df:56:9b:9f:02:c4:e8:b4:9a:bd:fc:
e5:6a:c7:18:14:c1:1c:0a:d4:23:b4:6e:1a:26:b3:d4:bf:2e:
0c:2b:eb:84:f3:8a:e7:85:2a:38:27:24:79:2c:38:ff:d4:7c:
8d:c5:27:39:54:82:90:be:e5:cc:06:24:24:02:85:f0:7a:91:
68:9c:bb:4c:47:f7:99:34:18:67:44:b9:54:33:9d:3a:f1:c2:
8e:5a:aa:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 4 08:18:27 2023 by rpki-client on console-ams.rpki-client.org