Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_nLW5LaU6egwNtuSA3UP5eDs58g.roa
File: _nLW5LaU6egwNtuSA3UP5eDs58g.roa (raw, json)
Hash identifier: aMT0Y4akPw+v8QMO10HlAblinKSDSaQlNyp3ZVnW3kY=
Subject key identifier: FE:72:D6:E4:B6:94:E9:E8:30:36:DB:92:03:75:0F:E5:E0:EC:E7:C8
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0189DE49B09BE287D9DE7041A97DDA539C60
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_nLW5LaU6egwNtuSA3UP5eDs58g.roa
Signing time: Thu 10 Aug 2023 07:11:58 +0000
ROA not before: Thu 10 Aug 2023 07:11:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50225
IP address blocks: 91.92.21.0/24 maxlen: 24
85.217.145.0/24 maxlen: 24
83.143.113.0/24 maxlen: 24
185.222.163.0/24 maxlen: 24
178.215.237.0/24 maxlen: 24
93.123.85.0/24 maxlen: 24
45.128.99.0/24 maxlen: 24
193.42.34.0/24 maxlen: 24
94.156.176.0/24 maxlen: 24
193.47.63.0/24 maxlen: 24
193.47.60.0/24 maxlen: 24
194.48.249.0/24 maxlen: 24
45.84.90.0/24 maxlen: 24
194.48.251.0/24 maxlen: 24
85.209.132.0/24 maxlen: 24
79.110.50.0/24 maxlen: 24
176.125.252.0/24 maxlen: 24
37.139.131.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:de:49:b0:9b:e2:87:d9:de:70:41:a9:7d:da:53:9c:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 10 07:11:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe72d6e4b694e9e83036db9203750fe5e0ece7c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:bd:bb:5d:59:15:e9:6b:53:b6:f0:44:58:28:
98:5d:72:f5:69:a0:1c:6c:1c:16:f3:59:05:3b:74:
07:4e:8a:05:a3:20:4a:82:db:0b:bb:b7:35:75:4d:
00:40:e6:2a:9c:3c:7b:2b:34:c1:13:38:9a:64:d4:
01:9a:73:8e:aa:b5:23:4d:5a:e5:b1:61:4a:a7:2b:
22:32:9f:e3:ec:49:77:9d:cf:6d:b2:f2:04:33:b8:
c4:2f:c9:1e:0b:df:19:f5:44:22:e0:ce:42:91:65:
e2:f9:f4:3e:54:95:5f:51:74:e8:0a:53:00:18:6b:
71:47:36:1c:a2:26:6e:99:6f:42:b5:e5:25:fd:1f:
fd:b0:c6:82:31:11:31:1f:9f:42:73:e1:e2:97:a0:
fc:45:6c:ce:f6:3a:43:28:a5:7c:46:c6:cd:23:89:
92:b3:d6:e6:1d:36:51:e4:f7:30:d9:da:50:f9:05:
03:e9:62:73:b7:6f:df:f4:ba:6b:f0:c8:09:3f:a7:
a5:88:90:6c:21:65:29:d4:7b:b4:f2:34:48:e2:bb:
56:11:7b:1f:e8:fd:53:62:5f:ce:47:97:85:54:4d:
e5:81:4e:48:07:64:d2:7b:82:10:48:8b:09:2b:b9:
5b:14:ff:f6:c9:ff:a2:27:77:aa:4e:24:ad:9d:c6:
06:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:72:D6:E4:B6:94:E9:E8:30:36:DB:92:03:75:0F:E5:E0:EC:E7:C8
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_nLW5LaU6egwNtuSA3UP5eDs58g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.131.0/24
45.84.90.0/24
45.128.99.0/24
79.110.50.0/24
83.143.113.0/24
85.209.132.0/24
85.217.145.0/24
91.92.21.0/24
93.123.85.0/24
94.156.176.0/24
176.125.252.0/24
178.215.237.0/24
185.222.163.0/24
193.42.34.0/24
193.47.60.0/24
193.47.63.0/24
194.48.249.0/24
194.48.251.0/24
Signature Algorithm: sha256WithRSAEncryption
28:29:62:4c:cc:9b:7c:8c:e8:a6:8e:f7:7e:1c:fb:22:f4:31:
fa:3e:04:d3:a1:f7:78:d4:09:5f:22:50:0d:60:59:69:29:78:
1b:ef:bd:24:d1:e8:3b:f8:4f:f7:3b:3d:6b:44:4a:13:e1:76:
79:15:d7:a3:53:8f:47:02:03:53:a4:fa:16:20:54:6c:55:d0:
32:6b:d6:62:26:b0:f4:61:18:ec:20:1c:c9:72:c9:f3:52:02:
23:db:36:5f:d5:e7:c5:53:7c:9d:a3:f7:49:2b:cc:00:20:ca:
0b:86:98:b7:6f:85:74:45:8d:cb:6c:dc:40:1a:fd:96:b8:cc:
47:ca:e7:a9:a7:19:20:a1:db:7d:40:49:58:66:fc:b1:5d:f1:
1d:33:68:2f:5f:70:c9:00:9a:25:92:2f:f4:a1:71:06:8d:23:
dc:2c:2c:ab:31:df:2f:ff:cf:63:b6:1d:aa:54:16:98:02:27:
2c:8a:79:49:0c:cc:75:2a:a6:2c:a0:57:46:ef:4a:d8:e4:01:
52:11:b7:0d:ca:d9:8b:c0:c0:10:92:e3:5d:9b:82:4f:66:cd:
39:d8:90:43:33:30:02:d2:97:e0:56:55:0e:25:0b:3b:82:dd:
aa:37:83:18:17:4c:54:f7:94:9f:86:37:dc:b3:2b:5e:20:ea:
fd:7b:6f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 11 12:55:13 2023 by rpki-client on console-ams.rpki-client.org