Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/dfb-aHlG0RuoDlbUhnl5FcnC50A.roa
File: dfb-aHlG0RuoDlbUhnl5FcnC50A.roa (raw, json)
Hash identifier: IeH094DnaoT/nxSGu7Y1c//cy0FCY8Y/wwfffPBEFzw=
Subject key identifier: 75:F6:FE:68:79:46:D1:1B:A8:0E:56:D4:86:79:79:15:C9:C2:E7:40
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018A4042E2A25E4C3AF96073690DE9059277
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/dfb-aHlG0RuoDlbUhnl5FcnC50A.roa
Signing time: Tue 29 Aug 2023 07:47:19 +0000
ROA not before: Tue 29 Aug 2023 07:47:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1
IP address blocks: 87.120.166.0/24 maxlen: 24
87.121.44.0/24 maxlen: 24
87.121.46.0/24 maxlen: 24
85.31.47.0/24 maxlen: 24
45.128.233.0/24 maxlen: 24
94.156.79.0/24 maxlen: 24
88.218.76.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:40:42:e2:a2:5e:4c:3a:f9:60:73:69:0d:e9:05:92:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 29 07:47:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=75f6fe687946d11ba80e56d486797915c9c2e740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d2:ba:10:77:4c:c8:cc:c0:91:42:cb:b7:b3:
69:3b:c3:48:05:9e:f7:74:ee:38:6d:4a:cd:8c:48:
94:9d:db:79:80:df:80:04:27:6d:ed:ff:db:f5:7c:
7f:98:56:6d:6c:c1:04:67:df:e9:31:81:bb:ce:12:
ac:48:6d:db:3d:20:64:e6:33:01:6f:94:e1:07:ea:
a9:9c:70:5d:81:3d:72:7c:b0:45:92:7e:6f:91:15:
c3:cf:71:b9:60:27:8e:f5:6e:3d:0a:b4:cb:bd:4a:
e7:4d:2d:2f:49:b9:96:3b:ad:43:e9:9e:42:76:6f:
55:c3:8f:0b:69:0d:0d:7a:80:1b:39:a5:08:8d:98:
b3:88:b3:6b:c2:45:d7:d9:b0:fd:c4:bf:f6:00:7f:
4e:95:c6:35:50:52:b4:9e:03:ec:d3:80:bf:57:39:
56:af:c5:67:36:99:21:8b:26:ca:41:b2:bc:6a:40:
51:91:42:66:6b:f9:d2:da:3a:6f:88:63:91:39:99:
04:77:c8:35:58:d3:e1:7f:ae:19:0d:85:70:1f:35:
b3:d3:55:ed:0a:8c:d2:71:7a:4d:8a:a8:10:c5:e3:
2d:97:a7:62:9b:16:ed:f3:d4:f7:23:3f:48:16:a6:
ae:83:bf:6e:bd:78:91:67:b0:3c:01:f8:e5:ba:66:
1f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:F6:FE:68:79:46:D1:1B:A8:0E:56:D4:86:79:79:15:C9:C2:E7:40
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/dfb-aHlG0RuoDlbUhnl5FcnC50A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.233.0/24
85.31.47.0/24
87.120.166.0/24
87.121.44.0/24
87.121.46.0/24
88.218.76.0/22
94.156.79.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:4d:9e:72:39:4b:4a:ca:b5:1a:3c:84:ec:67:f6:45:35:29:
1d:1a:f6:8d:17:5a:dc:d8:a3:ab:a9:1e:f7:fd:ed:a6:f0:6f:
b3:ad:f6:b0:fc:7a:5c:e2:9d:f4:4d:7b:3b:9e:5f:45:4e:26:
1b:a8:22:75:bc:63:07:ec:b7:9f:73:42:31:d9:04:3e:1c:bf:
01:a8:bb:26:2a:1d:c4:0f:fe:11:a5:0b:f5:96:70:da:94:2f:
6d:90:ce:e5:a8:5a:ae:16:02:68:8b:f9:71:9f:2d:a3:dc:25:
60:fe:38:a2:d0:7b:00:18:c3:78:89:63:1f:15:07:c6:5a:20:
f8:b9:29:60:73:4d:a1:6e:7b:bd:2c:df:fc:53:02:b2:58:2a:
3b:7a:1e:58:af:74:f7:94:48:96:b8:5e:f9:0f:ac:23:80:4a:
15:44:4e:00:5f:f9:1d:8a:4d:c6:27:32:f5:d2:0a:17:bf:81:
90:32:70:be:2a:e6:6f:55:77:95:8e:c8:c6:86:79:18:fb:0b:
eb:85:c7:e5:1e:d3:3d:88:9e:1b:e1:37:24:67:c6:f6:55:24:
63:56:6c:f6:35:af:e8:93:ff:c9:a4:e7:5a:d1:46:10:82:14:
30:c1:29:b1:03:20:2f:90:4e:1c:cf:19:ff:dc:d6:08:97:24:
14:f9:c5:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 9 18:01:30 2023 by rpki-client on console-ams.rpki-client.org