Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/aCYbjx9k8czDEnywRabDieTDto8.roa
File: aCYbjx9k8czDEnywRabDieTDto8.roa (raw, json)
Hash identifier: F908KBCKx8f/RvqTCP0uio24pT4PDoOOEoz5TF8bVOc=
Subject key identifier: 68:26:1B:8F:1F:64:F1:CC:C3:12:7C:B0:45:A6:C3:89:E4:C3:B6:8F
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0187E20BE708879B098EB43333C8C5F9C899
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/aCYbjx9k8czDEnywRabDieTDto8.roa
Signing time: Wed 03 May 2023 14:37:23 +0000
ROA not before: Wed 03 May 2023 14:37:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35913
IP address blocks: 192.145.29.0/24 maxlen: 24
192.145.30.0/24 maxlen: 24
192.145.31.0/24 maxlen: 24
192.145.28.0/24 maxlen: 24
185.252.162.0/24 maxlen: 24
185.252.161.0/24 maxlen: 24
185.252.160.0/24 maxlen: 24
185.252.163.0/24 maxlen: 24
193.148.50.0/24 maxlen: 24
194.11.197.0/24 maxlen: 24
193.148.49.0/24 maxlen: 24
194.11.198.0/24 maxlen: 24
194.11.199.0/24 maxlen: 24
193.148.48.0/24 maxlen: 24
193.148.51.0/24 maxlen: 24
194.11.196.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e2:0b:e7:08:87:9b:09:8e:b4:33:33:c8:c5:f9:c8:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 3 14:37:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=68261b8f1f64f1ccc3127cb045a6c389e4c3b68f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a9:7b:d1:01:20:54:cf:63:12:05:63:62:90:
8b:c1:51:eb:e5:a2:66:3a:36:a5:57:11:d8:5b:be:
4e:48:ac:22:7f:56:26:51:92:50:a3:30:d4:51:3a:
dc:52:b2:6f:3b:92:60:f1:68:92:e2:52:61:d7:94:
e7:ed:19:11:6e:b6:bd:72:5e:f6:48:95:75:a8:b5:
14:08:90:9a:29:ac:86:e4:ce:44:56:2a:fa:7f:d3:
95:a2:ba:77:7a:95:ec:a7:52:07:af:ca:56:65:7e:
4b:cc:60:6d:e9:e1:9f:94:4a:39:77:1c:96:0f:e0:
9c:d0:62:9e:d8:c7:c2:c3:d8:03:9c:8e:e2:11:a6:
0f:d2:d9:e0:6f:4b:37:d2:1e:64:e0:f1:51:27:1c:
91:8b:af:32:02:42:8a:20:d3:9c:fb:7b:6f:f2:9c:
a8:2b:bd:d3:8d:af:82:53:e7:4a:59:2a:7a:17:22:
f6:09:03:16:df:01:95:ef:b1:b3:cf:e4:30:75:61:
a9:ad:25:00:1a:04:50:c0:b7:c2:03:01:08:8d:51:
3a:6f:32:47:41:3b:d0:4f:04:70:3a:1a:73:f7:70:
21:19:1f:88:1f:66:f3:e6:11:5a:64:5c:3c:7d:b1:
d7:5a:a4:f2:78:0d:f3:ab:dc:99:47:cf:89:2c:41:
1d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:26:1B:8F:1F:64:F1:CC:C3:12:7C:B0:45:A6:C3:89:E4:C3:B6:8F
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/aCYbjx9k8czDEnywRabDieTDto8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.160.0/22
192.145.28.0/22
193.148.48.0/22
194.11.196.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:af:f0:5e:ca:df:63:5b:da:34:e8:44:cb:f2:73:a3:47:56:
9f:00:fc:e4:b4:c5:3d:a5:ac:cc:39:44:d3:57:e1:23:f1:0f:
88:92:dc:55:b7:be:86:c4:e6:e6:4b:93:7e:5c:cb:d0:db:da:
65:74:81:f1:16:4c:a1:32:47:30:ea:32:d1:8b:29:d2:93:b4:
f6:e9:d1:3a:7d:6b:be:cd:8a:da:22:5e:1c:42:a8:ad:1e:b4:
86:98:2f:c5:ce:19:2d:38:b2:33:15:0e:d2:b1:24:52:a3:5e:
73:8e:6d:16:c8:ca:27:4d:49:f3:b9:19:c0:ce:51:b3:16:03:
a4:9e:88:51:d1:c7:5d:83:74:e8:c4:75:9a:2b:fa:0b:57:41:
66:02:3a:89:2b:3a:3a:de:6a:80:ce:4d:39:73:ae:71:41:56:
f2:6b:66:fe:b6:1e:9d:09:2e:20:a8:92:5a:f8:bf:9f:10:d6:
75:d7:db:08:c6:10:28:e6:22:2b:85:2a:a9:0a:67:05:76:b6:
f7:96:df:e8:59:2c:2c:d2:64:9c:aa:d9:25:ca:6f:02:96:6a:
0a:c3:df:62:e5:ac:46:ce:17:fc:11:2c:58:4b:d3:fc:63:b4:
4c:e2:11:7d:c5:de:7d:76:49:54:8e:a2:96:6c:e8:4d:b9:43:
63:bc:84:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 4 12:16:53 2023 by rpki-client on console-ams.rpki-client.org