Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/jRXDZ-SREhw4XqHAj8OdA1t2RX4.roa
File: jRXDZ-SREhw4XqHAj8OdA1t2RX4.roa (raw, json)
Hash identifier: kp4OtiplwT2aPhlJvqRjyA9nk53ZPtjk81wkgXbzGQE=
Subject key identifier: 8D:15:C3:67:E4:91:12:1C:38:5E:A1:C0:8F:C3:9D:03:5B:76:45:7E
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0187EB217AA0F424A3746774669F3F790452
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/jRXDZ-SREhw4XqHAj8OdA1t2RX4.roa
Signing time: Fri 05 May 2023 08:57:32 +0000
ROA not before: Fri 05 May 2023 08:57:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 185.218.84.0/22 maxlen: 24
178.215.236.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
94.156.160.0/24 maxlen: 24
147.78.101.0/24 maxlen: 24
147.78.100.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
87.120.64.0/23 maxlen: 24
185.216.84.0/22 maxlen: 24
94.103.126.0/24 maxlen: 24
185.218.137.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
193.35.19.0/24 maxlen: 24
185.219.126.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:eb:21:7a:a0:f4:24:a3:74:67:74:66:9f:3f:79:04:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 5 08:57:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d15c367e491121c385ea1c08fc39d035b76457e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:13:52:25:c9:f2:c9:34:4c:dc:37:bf:c9:71:
a6:21:9d:13:de:a7:63:9a:f0:35:9b:72:5a:83:62:
36:11:e4:86:54:37:11:12:94:39:3f:ce:4e:96:16:
78:9d:b0:1a:8c:61:26:2f:27:2d:fd:d8:83:bd:38:
49:d0:a1:39:73:ec:0c:7d:14:e1:e9:27:df:32:10:
d4:6a:a4:a7:e1:3f:b0:51:9d:3e:49:86:87:b2:09:
8c:a0:41:f9:51:7d:dc:3e:28:2b:fa:4b:54:74:eb:
11:9c:c9:36:ce:37:32:a0:92:7e:ec:53:7a:e2:25:
27:78:5f:ad:f8:fe:a9:91:c4:79:82:1f:8e:2d:0a:
a2:b6:29:aa:03:f2:7b:81:b6:a0:93:f6:27:c1:ab:
b3:62:25:5e:80:8f:57:98:a6:f7:1c:ab:49:64:f4:
d5:6e:16:ee:a7:2b:10:9a:73:f0:e7:6d:6e:a1:6c:
06:4a:22:d5:a0:55:fa:18:f0:e8:45:06:9a:dc:9a:
7f:4d:2d:7a:4d:a6:11:d0:56:aa:e0:38:36:2b:5c:
a1:1c:c2:68:ae:bd:b6:94:21:93:8f:dd:24:30:39:
9a:47:62:d6:0d:ad:25:3b:e8:9d:0d:a8:8e:e2:8c:
9c:91:c3:b7:be:e5:65:44:32:c3:48:62:f7:09:f9:
32:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:15:C3:67:E4:91:12:1C:38:5E:A1:C0:8F:C3:9D:03:5B:76:45:7E
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/jRXDZ-SREhw4XqHAj8OdA1t2RX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.89.0/24
87.120.64.0/23
92.119.196.0/23
94.103.126.0/24
94.154.161.0-94.154.163.255
94.156.160.0/24
147.78.100.0/23
171.22.72.0/22
178.215.236.0/24
185.216.84.0/22
185.218.84.0/22
185.218.137.0/24
185.219.126.0/24
193.35.19.0/24
Signature Algorithm: sha256WithRSAEncryption
94:3b:9e:b5:5f:30:43:c8:4b:c4:a2:1a:5a:6f:b8:b9:c8:5b:
46:af:96:72:fd:d1:ae:06:27:0a:ff:40:4b:ab:dd:0e:1d:d9:
26:c0:37:96:d8:77:c9:f1:cb:bc:35:12:de:8d:c3:36:cf:61:
ad:f3:f6:d8:1c:fd:15:1d:ac:25:2f:b5:1d:e7:d9:69:a2:d2:
c8:03:24:7b:55:54:0b:b6:3c:98:8e:d6:f2:42:e4:58:33:1f:
c4:9a:dd:01:86:64:2d:89:c3:5d:77:54:23:33:3d:01:51:37:
5d:90:18:09:7a:5a:e9:b6:36:8f:28:68:c6:a7:f7:cd:10:14:
3e:58:6c:f6:95:09:c9:c4:de:ba:5b:cb:2a:41:36:b2:76:2d:
45:3c:39:f4:49:a7:20:db:1c:34:9b:ab:e7:17:a2:37:12:22:
13:36:83:e3:be:ef:17:bf:bb:7d:5d:d3:bf:14:01:0a:f8:49:
08:34:a7:7b:c1:d6:6e:b8:ae:44:36:20:94:00:24:02:11:a1:
e4:c2:55:44:1b:00:a1:41:e8:2f:a3:3e:ff:5a:f4:4a:95:ff:
5e:0a:69:2e:f0:d8:65:9d:61:06:e0:45:30:cd:d0:00:2f:85:
5c:22:2e:54:e1:97:7d:df:30:a9:87:a2:8f:94:85:99:9f:fc:
d9:2e:60:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:41 2023 by rpki-client on console-ams.rpki-client.org