Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WyICfO8G2h6SN1fn9_j9JoRGi7U.roa
File: WyICfO8G2h6SN1fn9_j9JoRGi7U.roa (raw, json)
Hash identifier: M5jrRCi1e4G83tN+zdlUT+uNAcog504IG8CW31FYGHo=
Subject key identifier: 5B:22:02:7C:EF:06:DA:1E:92:37:57:E7:F7:F8:FD:26:84:46:8B:B5
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0186C0216C1E4D142311D860A98044D311BC
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WyICfO8G2h6SN1fn9_j9JoRGi7U.roa
Signing time: Wed 08 Mar 2023 07:31:01 +0000
ROA not before: Wed 08 Mar 2023 07:31:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 185.218.84.0/22 maxlen: 24
87.121.124.0/23 maxlen: 24
164.40.185.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
185.252.176.0/24 maxlen: 24
171.22.19.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.137.0/24 maxlen: 24
94.154.161.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
185.219.126.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c0:21:6c:1e:4d:14:23:11:d8:60:a9:80:44:d3:11:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 8 07:31:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b22027cef06da1e923757e7f7f8fd2684468bb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:fe:35:c4:18:7d:65:48:da:6c:2f:75:0a:79:
1c:a6:c5:0b:fd:b0:8e:80:2d:35:f0:ac:06:09:70:
13:8c:0e:00:8b:35:fa:6f:1c:a7:20:21:46:13:a7:
81:ce:4c:73:f8:62:58:f0:2a:b1:ca:da:f1:16:b7:
83:7e:6e:d7:c9:3c:e1:95:44:a5:d5:33:69:5e:14:
e1:8e:e1:18:a9:61:b3:4f:f8:57:f7:e6:a1:da:e0:
1b:ea:10:57:f1:16:00:b1:30:2b:6b:c4:58:d0:9d:
b7:de:f3:1b:10:a1:ce:34:7a:3a:43:71:6c:18:91:
7c:5b:82:bb:f2:8a:a5:b7:45:a1:b2:10:51:5a:f3:
c6:1c:0d:eb:71:63:99:4d:eb:2a:45:ee:9d:ab:f5:
de:d5:d0:76:7f:15:86:34:e6:83:77:64:91:64:81:
66:9a:7d:4a:09:6c:1b:d9:e2:52:e5:4b:cf:33:18:
0a:1e:60:91:38:17:95:d2:eb:24:fa:db:fc:61:b4:
7c:34:90:c6:5e:0c:4f:3b:54:61:94:4b:26:39:81:
cb:fc:81:12:2c:60:74:ab:87:50:19:26:79:4c:72:
2d:7b:53:9a:91:04:10:99:39:9e:d6:10:6a:a1:92:
5f:01:37:56:c1:98:61:6a:59:c1:33:fc:0f:a6:72:
b6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:22:02:7C:EF:06:DA:1E:92:37:57:E7:F7:F8:FD:26:84:46:8B:B5
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WyICfO8G2h6SN1fn9_j9JoRGi7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.89.0/24
87.121.124.0/23
92.119.196.0/23
94.154.161.0-94.154.163.255
164.40.185.0/24
171.22.19.0/24
171.22.72.0/22
178.215.236.0/24
185.216.84.0/22
185.218.84.0/22
185.218.137.0/24
185.219.126.0/24
185.252.176.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:66:7c:05:d3:f8:7a:a8:06:4c:8c:d1:4b:61:55:20:f1:c0:
85:b8:36:9e:5e:93:04:2e:8e:13:71:15:6a:e4:52:99:b6:0d:
5b:62:a3:c2:4b:99:51:f8:a5:16:68:76:b0:8c:ae:36:73:b3:
8d:44:ff:22:86:a8:41:32:4b:98:0e:f8:f6:4d:20:0d:35:0e:
ee:89:0d:3e:d8:1f:dd:3f:eb:94:a2:ec:63:77:9c:10:09:6b:
1d:e9:5f:e2:f5:b2:3e:33:42:aa:60:c7:04:df:2b:af:dd:1d:
8d:20:a3:43:61:b2:c9:ea:8d:48:92:9d:e3:db:f5:d7:18:65:
c3:dc:af:92:24:e5:c0:b9:4d:ff:00:09:d1:f5:26:16:0c:56:
09:17:18:05:fb:7f:9b:9b:9c:f4:85:af:46:8e:d2:54:43:83:
13:91:ad:aa:55:2b:12:71:25:3b:5b:e1:c3:76:dc:84:b1:15:
19:70:56:74:86:b8:c0:c0:90:03:fb:0d:b8:17:87:8f:84:c4:
f3:a5:ef:20:92:e9:a2:15:52:bf:df:0b:65:94:92:1a:09:15:
5b:88:17:86:c4:bf:4c:26:1d:b1:b2:98:76:eb:2a:5e:de:3c:
ab:a4:20:a2:2f:cb:0c:2d:20:9d:9e:7b:e2:6b:85:46:21:db:
7b:1d:34:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:38 2023 by rpki-client on console-ams.rpki-client.org