Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/djAxh4BBkD8PwPoSe-VfwyWTBjM.roa
File: djAxh4BBkD8PwPoSe-VfwyWTBjM.roa (raw, json)
Hash identifier: 2i5I6YUoRE8W3aVo1SXtLLvZjcgZkLSZDLyh+yqMQiI=
Subject key identifier: 76:30:31:87:80:41:90:3F:0F:C0:FA:12:7B:E5:5F:C3:25:93:06:33
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0189CE67D6EC92CD63A4B1FE6285A4C7BB52
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/djAxh4BBkD8PwPoSe-VfwyWTBjM.roa
Signing time: Mon 07 Aug 2023 05:10:59 +0000
ROA not before: Mon 07 Aug 2023 05:10:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8100
IP address blocks: 94.156.2.0/24 maxlen: 24
91.92.16.0/24 maxlen: 24
87.120.192.0/23 maxlen: 24
91.92.26.0/23 maxlen: 24
193.58.121.0/24 maxlen: 24
193.58.123.0/24 maxlen: 24
185.147.100.0/22 maxlen: 24
87.121.36.0/23 maxlen: 24
87.121.38.0/24 maxlen: 24
94.156.152.0/24 maxlen: 24
45.8.92.0/24 maxlen: 24
94.156.154.0/23 maxlen: 24
87.121.60.0/22 maxlen: 24
91.92.67.0/24 maxlen: 24
45.139.123.0/24 maxlen: 24
94.154.160.0/23 maxlen: 24
45.9.208.0/22 maxlen: 24
94.154.173.0/24 maxlen: 24
212.87.205.0/24 maxlen: 24
94.156.237.0/24 maxlen: 24
194.55.226.0/24 maxlen: 24
94.156.238.0/24 maxlen: 24
87.121.146.0/23 maxlen: 24
93.123.76.0/22 maxlen: 24
87.121.163.0/24 maxlen: 24
93.123.80.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
94.156.178.0/24 maxlen: 24
193.47.62.0/24 maxlen: 24
94.156.180.0/23 maxlen: 24
87.121.104.0/24 maxlen: 24
93.123.24.0/24 maxlen: 24
87.121.103.0/24 maxlen: 24
93.123.30.0/23 maxlen: 24
93.123.26.0/23 maxlen: 24
87.121.114.0/23 maxlen: 24
93.123.112.0/22 maxlen: 24
93.123.119.0/24 maxlen: 24
5.253.58.0/23 maxlen: 24
193.25.219.0/24 maxlen: 24
5.253.56.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ce:67:d6:ec:92:cd:63:a4:b1:fe:62:85:a4:c7:bb:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 7 05:10:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=763031878041903f0fc0fa127be55fc325930633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ed:7a:a7:31:7c:18:25:85:c6:f7:2b:d0:c9:
d7:f5:d7:cb:57:ec:5f:15:f0:86:e4:4f:8b:ce:18:
34:66:9f:76:75:2c:35:ac:58:c3:94:56:e8:19:bb:
ca:92:4c:cf:e4:b6:4e:35:d5:f2:e9:9e:b0:46:22:
61:1b:9e:51:f0:89:f8:ee:7c:ca:3b:19:da:39:cc:
39:fe:00:75:19:f2:3d:45:c4:c4:f0:01:0f:46:6a:
96:0e:c1:d6:0f:98:bc:17:98:59:a9:7f:66:8a:49:
2b:a1:47:19:95:3c:5d:36:3d:b6:c8:f5:0b:9f:84:
00:37:eb:f3:f5:c4:6a:25:15:7e:1d:9d:60:5e:03:
82:53:19:8b:de:57:31:b2:16:e2:31:df:a0:77:de:
2a:97:9f:46:12:a1:56:bd:3c:4c:1f:c7:15:16:8b:
b9:79:35:8f:c0:40:b9:fc:95:81:62:b1:2c:27:b4:
e4:95:53:49:45:9f:77:1b:de:07:1c:b6:64:7a:10:
a5:b6:46:83:ae:14:0d:98:1b:18:8e:2a:a6:79:a7:
ff:40:77:f7:d8:a6:41:76:30:88:ac:15:ce:3b:36:
55:ae:c5:38:a9:84:bd:c2:d2:2a:49:3e:72:10:7a:
7c:5c:f3:aa:9e:d1:9b:a3:db:9d:15:4f:0d:30:a4:
4c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:30:31:87:80:41:90:3F:0F:C0:FA:12:7B:E5:5F:C3:25:93:06:33
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/djAxh4BBkD8PwPoSe-VfwyWTBjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.56.0/22
45.8.92.0/24
45.9.208.0/22
45.139.123.0/24
87.120.192.0/23
87.121.36.0-87.121.38.255
87.121.60.0/22
87.121.103.0-87.121.104.255
87.121.114.0/23
87.121.146.0/23
87.121.163.0/24
91.92.16.0/24
91.92.26.0/23
91.92.67.0/24
93.123.24.0/24
93.123.26.0/23
93.123.30.0/23
93.123.76.0-93.123.80.255
93.123.112.0/22
93.123.119.0/24
94.154.160.0/23
94.154.173.0/24
94.156.2.0/24
94.156.152.0/24
94.156.154.0/23
94.156.178.0/24
94.156.180.0/23
94.156.237.0-94.156.238.255
185.147.100.0/22
185.252.177.0/24
193.25.219.0/24
193.47.62.0/24
193.58.121.0/24
193.58.123.0/24
194.55.226.0/24
212.87.205.0/24
Signature Algorithm: sha256WithRSAEncryption
95:f9:71:2b:0b:79:e8:0c:23:7f:c3:63:bf:ff:24:a9:0c:fa:
32:5d:27:d4:df:c3:7b:37:ce:29:a7:ff:fb:8f:0e:40:b0:35:
7a:6d:eb:cf:e8:45:50:86:7d:c9:ae:98:ad:c3:0b:06:e7:42:
e4:9d:f8:10:5f:d2:3f:f6:db:21:c4:d1:d8:f8:6b:5f:b4:34:
47:91:cf:7f:53:0b:35:8d:9b:e4:e6:71:da:bb:9a:07:a7:fd:
b6:db:b5:91:34:af:d6:b3:0e:4f:6b:c1:69:e2:d8:82:a8:01:
0e:9e:00:e8:15:ab:90:18:60:b3:e2:a5:66:de:de:35:bf:ab:
ec:d1:a8:33:65:e5:c1:47:78:2a:da:d1:a9:1c:a1:81:79:4d:
9c:d7:54:30:62:9f:8c:6e:5a:b4:6b:b2:da:2f:3d:8f:76:5f:
31:41:75:8c:fe:a0:74:2a:be:fa:82:d0:41:cf:88:33:b7:24:
4d:22:48:c7:0f:b9:61:3c:58:87:89:df:7f:77:c6:db:e0:66:
80:f6:10:82:19:98:84:f6:c5:ac:77:18:ef:15:80:1f:b3:03:
7d:67:7a:5c:c1:5f:b2:90:dd:0d:f3:65:eb:4f:ce:59:bb:dd:
01:4e:65:a2:a1:73:ef:08:06:1e:95:bb:19:1a:53:c8:05:14:
89:62:b1:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 17 14:36:53 2023 by rpki-client on console-ams.rpki-client.org