Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_NZxY8UZVWfyB3wVCV4s1NguDNc.roa
File: _NZxY8UZVWfyB3wVCV4s1NguDNc.roa (raw, json)
Hash identifier: 6d7yDpGRLUu8IqycEhd0Ik54WkMywvAGq7IaY9GJGp4=
Subject key identifier: FC:D6:71:63:C5:19:55:67:F2:07:7C:15:09:5E:2C:D4:D8:2E:0C:D7
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018B60E2777B22F33BB66B9246509FF55BF1
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_NZxY8UZVWfyB3wVCV4s1NguDNc.roa
Signing time: Tue 24 Oct 2023 08:52:16 +0000
ROA not before: Tue 24 Oct 2023 08:52:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 185.218.84.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
91.92.24.0/23 maxlen: 24
94.156.239.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
185.252.176.0/24 maxlen: 24
147.78.101.0/24 maxlen: 24
147.78.100.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
185.226.175.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
195.178.110.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.59.0/24 maxlen: 24
194.180.50.0/24 maxlen: 24
194.169.174.0/24 maxlen: 24
94.156.78.0/24 maxlen: 24
93.123.116.0/24 maxlen: 24
176.125.255.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:60:e2:77:7b:22:f3:3b:b6:6b:92:46:50:9f:f5:5b:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 24 08:52:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fcd67163c5195567f2077c15095e2cd4d82e0cd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c9:ff:70:89:b7:8b:94:a4:ef:b9:a1:7e:cd:
03:00:16:c0:a5:06:8b:1e:70:53:60:38:67:f6:65:
67:1e:23:74:49:46:e1:6c:bd:cd:27:03:b6:77:26:
0d:10:39:a9:3d:c6:19:73:13:bd:8a:3c:e6:2b:b6:
d4:18:67:4b:72:33:83:be:2f:a6:8b:b3:9f:cf:f9:
e0:73:6d:31:0b:8c:28:08:0c:4f:95:00:25:1e:78:
c4:62:bd:cc:e0:b8:d2:5c:a7:17:39:62:b9:c4:7f:
a4:6f:24:eb:18:ef:59:a7:67:23:2b:50:3a:fb:c6:
09:9a:2a:fb:f5:b6:45:13:44:fa:f1:a9:1f:16:5b:
cd:8f:ed:91:de:18:e1:b4:ca:da:93:87:75:6f:38:
18:aa:eb:58:d7:fb:47:5d:2f:9a:6f:e3:39:16:03:
52:6d:62:41:a0:b4:ef:42:87:d6:46:41:77:01:2b:
8b:53:a2:be:ff:4d:79:03:47:3d:af:91:6e:60:16:
78:2b:49:aa:3d:2d:cb:73:af:c3:ec:a7:2c:05:b1:
3a:3d:a6:5b:57:ca:38:26:08:02:1f:2c:99:a4:31:
4a:a1:09:3b:8e:b5:62:cc:b5:c3:a5:59:f2:a1:19:
56:39:ce:c1:a7:50:c4:d5:64:b1:f7:76:ed:39:8a:
d4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:D6:71:63:C5:19:55:67:F2:07:7C:15:09:5E:2C:D4:D8:2E:0C:D7
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_NZxY8UZVWfyB3wVCV4s1NguDNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.89.0/24
87.121.45.0/24
87.121.59.0/24
91.92.24.0/23
92.119.196.0/23
93.123.116.0/24
94.154.161.0-94.154.163.255
94.156.78.0/24
94.156.239.0/24
147.78.100.0-147.78.102.255
171.22.72.0/22
176.125.255.0/24
178.215.224.0/24
178.215.236.0/24
185.216.84.0/22
185.218.84.0/22
185.226.175.0/24
185.252.176.0/24
194.169.174.0/24
194.180.50.0/24
195.178.110.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:c6:bf:a5:46:30:f2:c0:0c:43:08:78:57:d6:9d:ec:84:ae:
91:7a:49:93:33:dd:dc:2e:41:6f:15:0e:3b:ee:71:ae:a5:40:
10:1e:db:52:11:c7:6e:9c:dd:95:23:f5:a8:04:06:4d:b6:f9:
de:b0:71:f7:0d:d0:e7:64:2d:1d:9e:0b:76:3c:12:7a:90:cb:
b1:ce:cb:c1:13:57:bd:9d:41:b3:dc:a7:7a:2e:ce:9f:dd:3a:
e1:99:31:a2:05:c0:54:f1:3d:24:de:58:5e:07:ca:c5:41:76:
26:ee:84:64:bf:43:2a:9d:af:a2:e0:4f:f7:03:6a:46:80:e3:
1d:fc:37:72:65:77:0f:24:d4:bd:ad:56:90:47:21:26:1a:c6:
fa:50:8e:36:29:7d:17:cd:31:71:4f:b7:e9:28:72:51:e7:cb:
75:69:5b:8d:dd:6c:ba:05:9a:da:46:c4:3a:a9:2c:45:72:d1:
ba:72:ff:25:3a:c4:97:56:78:14:47:97:09:14:2c:96:dc:03:
27:03:97:c0:53:1f:de:6e:ea:dc:48:e8:d7:6a:4e:39:5a:bc:
f9:19:ae:d7:47:6d:c2:96:aa:a1:ac:62:44:c7:3a:0b:2c:9f:
49:3a:b0:ad:27:0a:9b:3b:ac:1c:30:e2:34:32:e7:36:25:69:
97:d1:01:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 25 05:36:19 2023 by rpki-client on console-ams.rpki-client.org