Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/f9CIBVBjdcw11XSNHog4hMQiZ5k.roa
File: f9CIBVBjdcw11XSNHog4hMQiZ5k.roa (raw, json)
Hash identifier: v1SHl5RkSLeVrlb/IMDShUat2schXNBg6/fIwqcis1E=
Subject key identifier: 7F:D0:88:05:50:63:75:CC:35:D5:74:8D:1E:88:38:84:C4:22:67:99
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0189BFCA11CFF9C05676B165C9708759AAB2
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/f9CIBVBjdcw11XSNHog4hMQiZ5k.roa
Signing time: Fri 04 Aug 2023 09:03:58 +0000
ROA not before: Fri 04 Aug 2023 09:03:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1
IP address blocks: 87.120.166.0/24 maxlen: 24
87.121.44.0/24 maxlen: 24
87.121.46.0/24 maxlen: 24
85.31.47.0/24 maxlen: 24
45.128.233.0/24 maxlen: 24
94.156.79.0/24 maxlen: 24
88.218.76.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:bf:ca:11:cf:f9:c0:56:76:b1:65:c9:70:87:59:aa:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 4 09:03:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7fd08805506375cc35d5748d1e883884c4226799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f6:f4:72:fa:24:d6:d4:4b:b0:e6:4b:72:87:
5d:61:d5:59:75:74:a5:7a:55:9f:c7:6d:8e:97:56:
21:2a:c8:76:31:28:31:8a:2c:8e:ce:47:22:4a:bf:
85:d8:5b:f4:5f:aa:7d:a2:5f:d4:d3:19:dc:42:9c:
d2:a6:4d:e8:d7:f4:5a:31:6f:60:41:31:c5:3b:cf:
e6:c3:b3:b8:03:ac:a8:53:5b:e0:25:03:5d:86:f8:
83:41:d0:75:58:ff:f2:7d:a5:de:89:3b:47:07:ed:
f9:6c:79:96:79:35:ed:a4:39:f0:a3:50:98:b1:c0:
ce:98:d1:a9:29:92:21:cf:c3:59:fc:95:1a:61:c2:
04:70:7c:0a:53:b7:28:b3:c4:94:4c:78:fd:ed:d0:
04:f3:f6:6a:3d:dd:6e:85:15:6e:47:47:b1:44:b6:
cb:14:da:66:83:bd:72:2a:74:d2:35:d7:cd:ee:79:
9f:7c:31:90:6b:67:6b:10:fa:b4:6b:0f:0a:ae:77:
f1:24:a2:e2:92:c3:e4:74:fe:fe:91:ba:a8:1f:16:
b6:28:cf:bf:71:da:b0:81:3a:50:2e:f3:57:1a:84:
fb:52:69:b5:69:07:d0:2c:19:6b:45:9d:b9:80:1a:
67:c7:a1:b8:42:93:9a:7b:30:f0:f4:52:fb:56:90:
fc:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D0:88:05:50:63:75:CC:35:D5:74:8D:1E:88:38:84:C4:22:67:99
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/f9CIBVBjdcw11XSNHog4hMQiZ5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.233.0/24
85.31.47.0/24
87.120.166.0/24
87.121.44.0/24
87.121.46.0/24
88.218.76.0/22
94.156.79.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:fa:dd:f5:f5:77:64:ff:96:61:82:61:c2:5b:98:dc:ec:4a:
e6:07:78:f9:37:7c:fa:74:73:90:bd:dd:15:dd:0f:34:3f:88:
87:de:69:de:88:7d:57:a4:db:c0:96:a7:e2:07:a4:59:84:b2:
b8:10:b4:ee:01:a3:6c:07:94:c0:27:5c:42:29:78:83:ef:23:
e5:34:2e:ef:75:fb:95:3f:13:81:ba:15:b8:44:55:f7:2d:f4:
1a:86:d0:10:b4:bf:c8:cb:8e:81:56:86:ff:d1:e5:f1:39:b0:
9e:ce:e6:13:4f:f3:90:ca:b8:28:bf:54:fd:5d:8e:18:fb:30:
f9:f3:e1:87:c7:30:0b:dc:89:6e:4a:8d:ee:e0:db:b5:e3:77:
be:94:dd:20:db:2f:33:ef:9b:64:8e:fe:58:82:04:7f:26:90:
1c:9b:43:2b:ed:be:f7:e7:d2:e7:43:fa:a8:c9:1c:df:44:07:
56:82:91:94:c1:b2:23:ea:24:e0:bb:70:5d:9a:7a:3f:fc:4e:
ca:83:e6:8e:53:84:8e:fd:c3:79:5c:2e:7b:47:93:53:5b:a9:
a8:0e:1e:46:4b:66:22:6e:61:b6:6a:66:a7:cd:d9:6d:c2:e4:
4d:70:0e:30:81:05:96:ea:fe:85:2c:19:83:c8:03:32:81:db:
1d:9d:ad:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 24 06:17:53 2023 by rpki-client on console-ams.rpki-client.org