Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/eWeHCE_dXBFxdMqlI1JJhuXFAtA.roa
File: eWeHCE_dXBFxdMqlI1JJhuXFAtA.roa (raw, json)
Hash identifier: EE1fFDeudxM73L+GhYU4Yrc8SArBf+fZc7fKF0d78ik=
Subject key identifier: 79:67:87:08:4F:DD:5C:11:71:74:CA:A5:23:52:49:86:E5:C5:02:D0
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018B226091A8FE7C8C4D217722B51746AB9E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/eWeHCE_dXBFxdMqlI1JJhuXFAtA.roa
Signing time: Thu 12 Oct 2023 05:33:55 +0000
ROA not before: Thu 12 Oct 2023 05:33:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8100
IP address blocks: 94.156.2.0/24 maxlen: 24
91.92.16.0/24 maxlen: 24
87.120.192.0/23 maxlen: 24
91.92.27.0/24 maxlen: 24
193.58.121.0/24 maxlen: 24
193.58.123.0/24 maxlen: 24
87.121.38.0/24 maxlen: 24
94.156.152.0/24 maxlen: 24
45.8.92.0/24 maxlen: 24
94.156.154.0/23 maxlen: 24
87.121.60.0/22 maxlen: 24
91.92.67.0/24 maxlen: 24
45.139.123.0/24 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.173.0/24 maxlen: 24
212.87.205.0/24 maxlen: 24
94.156.237.0/24 maxlen: 24
194.55.226.0/24 maxlen: 24
94.156.238.0/24 maxlen: 24
87.121.146.0/23 maxlen: 24
93.123.76.0/22 maxlen: 24
141.98.5.0/24 maxlen: 24
87.121.163.0/24 maxlen: 24
93.123.80.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
94.156.178.0/24 maxlen: 24
193.47.62.0/24 maxlen: 24
94.156.180.0/23 maxlen: 24
87.121.104.0/24 maxlen: 24
93.123.24.0/24 maxlen: 24
87.121.103.0/24 maxlen: 24
93.123.26.0/23 maxlen: 24
87.121.114.0/23 maxlen: 24
93.123.112.0/22 maxlen: 24
93.123.119.0/24 maxlen: 24
5.253.58.0/23 maxlen: 24
193.25.219.0/24 maxlen: 24
5.253.56.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:22:60:91:a8:fe:7c:8c:4d:21:77:22:b5:17:46:ab:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 12 05:33:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=796787084fdd5c117174caa523524986e5c502d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:86:04:b9:cb:a1:64:71:ed:30:22:e2:e2:4f:
67:64:0f:66:08:b9:7c:9b:b8:00:33:aa:72:c7:db:
9f:99:cf:2a:ba:aa:c9:49:09:94:ae:b5:24:5b:17:
01:7a:fe:34:3a:80:9d:b7:e7:6d:dc:af:ba:e5:a5:
9a:4b:d8:48:91:c1:7b:31:19:5d:2a:ee:04:0f:29:
ce:61:a2:4d:d9:e2:20:7f:06:b4:e0:63:ae:18:d1:
c1:91:ab:59:86:19:6f:82:0b:61:98:33:4d:f4:e6:
41:1f:54:f8:3c:5e:a3:c0:c9:23:d5:a1:97:47:26:
dc:bc:e8:d3:7d:81:eb:e3:a0:5c:94:b7:ba:8a:71:
73:09:9a:0e:c3:5c:fd:bc:98:74:71:ec:cc:cc:5b:
eb:cf:a5:17:b8:2b:86:e7:dc:4c:18:2a:8b:e0:2e:
ba:68:12:8f:09:b4:4e:0a:8c:73:1d:01:17:d8:54:
7b:ab:c2:4a:1c:a4:87:88:7f:86:f1:3b:a3:da:12:
1e:7a:c2:75:7a:d3:e2:cd:47:8d:ad:9a:f8:4d:2b:
51:4d:56:3c:c7:18:94:99:40:c7:36:0a:17:fc:92:
64:82:5d:ca:05:01:53:e2:39:f0:8b:22:2f:5f:c8:
a9:ba:28:db:69:db:31:8b:c5:3d:d4:cf:a5:26:72:
69:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:67:87:08:4F:DD:5C:11:71:74:CA:A5:23:52:49:86:E5:C5:02:D0
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/eWeHCE_dXBFxdMqlI1JJhuXFAtA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.56.0/22
45.8.92.0/24
45.139.123.0/24
87.120.192.0/23
87.121.38.0/24
87.121.60.0/22
87.121.103.0-87.121.104.255
87.121.114.0/23
87.121.146.0/23
87.121.163.0/24
91.92.16.0/24
91.92.27.0/24
91.92.67.0/24
93.123.24.0/24
93.123.26.0/23
93.123.76.0-93.123.80.255
93.123.112.0/22
93.123.119.0/24
94.154.160.0/23
94.154.173.0/24
94.156.2.0/24
94.156.152.0/24
94.156.154.0/23
94.156.178.0/24
94.156.180.0/23
94.156.237.0-94.156.238.255
141.98.5.0/24
185.252.177.0/24
193.25.219.0/24
193.47.62.0/24
193.58.121.0/24
193.58.123.0/24
194.55.226.0/24
212.87.205.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:65:ce:64:e4:38:29:85:83:ee:50:e9:06:92:15:ee:94:90:
dd:a9:d9:89:d2:3b:0d:2e:88:18:4c:4d:fa:1f:18:ac:dc:06:
e7:8a:c7:c3:9c:ff:c5:27:d2:b1:b3:1e:03:fc:d5:94:03:46:
2d:e4:55:01:b2:9c:ca:1b:57:19:72:43:7d:15:9b:77:45:32:
24:e2:fa:e6:9a:a6:29:32:b0:5d:dd:b4:af:34:48:a0:0f:41:
76:f7:aa:ad:23:6f:c5:81:d3:62:fd:8f:5c:a9:e1:0a:14:71:
bf:e0:cd:59:04:e4:f7:91:02:10:b6:87:5c:a3:d9:f8:e4:0b:
7a:81:7b:f4:37:98:ae:1a:2e:81:b6:c6:a4:d2:a0:18:d7:86:
a9:8b:21:1f:ec:b0:1e:18:0b:dd:68:04:fb:d3:25:39:5b:e7:
25:66:f8:58:1b:77:2d:4b:60:16:02:29:e0:b7:6f:f3:e2:a6:
15:ba:23:bb:81:d0:17:fa:74:8e:f3:54:43:9b:6e:d0:43:6b:
85:0b:ff:66:64:f7:97:7d:04:e0:c1:ea:07:60:db:96:4c:46:
d2:75:16:88:b5:3e:f8:a3:21:ae:a7:79:4b:bc:8c:ec:71:54:
c9:c0:cf:a4:ff:30:02:9e:4d:0b:f2:e6:f5:ec:a5:89:2f:e7:
d4:db:6d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 23 06:10:40 2023 by rpki-client on console-ams.rpki-client.org