Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/jXqWLJmREJgE6Df03PBHYaU8b_o.roa
File: jXqWLJmREJgE6Df03PBHYaU8b_o.roa (raw, json)
Hash identifier: HQ1/rteSiAAYdk9jMnSj17PYlBtloMBgaB849oGWcbs=
Subject key identifier: 8D:7A:96:2C:99:91:10:98:04:E8:37:F4:DC:F0:47:61:A5:3C:6F:FA
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018835EADF44C27DAD157C60C3CEF5449C38
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/jXqWLJmREJgE6Df03PBHYaU8b_o.roa
Signing time: Fri 19 May 2023 21:29:25 +0000
ROA not before: Fri 19 May 2023 21:29:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 17447
IP address blocks: 2.59.254.0/24 maxlen: 24
87.120.84.0/24 maxlen: 24
93.123.118.0/24 maxlen: 24
147.78.103.0/24 maxlen: 24
185.246.220.0/24 maxlen: 24
94.156.102.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:35:ea:df:44:c2:7d:ad:15:7c:60:c3:ce:f5:44:9c:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 19 21:29:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d7a962c9991109804e837f4dcf04761a53c6ffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:1d:c3:36:56:f7:86:8f:88:bd:2b:c7:8c:f4:
9c:9e:b4:0a:fe:47:6f:b9:66:d7:09:f5:92:78:1f:
1c:4f:71:77:d7:83:2b:cd:ab:26:4e:39:7a:83:06:
84:21:22:3c:83:99:c5:d2:f9:44:20:82:d1:59:59:
80:2b:24:f2:38:db:ca:0b:f0:52:9c:95:45:71:6c:
12:c6:30:8f:64:5f:ca:e3:bf:25:dc:09:c7:13:5d:
f5:9b:f6:f6:66:ab:1e:95:5e:75:3d:b4:92:e6:a4:
34:8c:db:d0:84:70:0b:2a:95:f3:13:e5:b0:52:46:
17:73:ef:3f:bc:fd:c1:65:c0:e8:04:3d:aa:af:bf:
c3:a4:13:18:c5:97:e1:a0:ce:80:d1:21:93:9c:b7:
78:7f:fa:fc:6f:81:de:18:83:c0:d7:ae:cc:e0:bb:
63:70:a9:20:79:35:e3:ec:8d:b2:f2:7f:6f:cf:d6:
ca:a2:3f:96:3f:85:38:f0:11:78:b4:5c:03:f5:12:
59:49:bd:87:cd:ee:08:5a:98:4f:e7:aa:7d:88:bd:
2c:f6:b2:92:75:87:ba:ae:c4:bf:f3:c6:db:37:7a:
17:e1:5e:d2:3d:fe:95:67:e7:8c:43:2a:72:2b:2c:
bc:f5:ff:04:d8:e3:6e:5d:f6:d2:eb:bd:ab:b6:55:
98:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:7A:96:2C:99:91:10:98:04:E8:37:F4:DC:F0:47:61:A5:3C:6F:FA
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/jXqWLJmREJgE6Df03PBHYaU8b_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.254.0/24
87.120.84.0/24
93.123.118.0/24
94.156.102.0/24
147.78.103.0/24
185.246.220.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:01:ff:bb:a0:50:0a:b3:98:bf:18:d9:c1:36:ee:f3:4e:1f:
2a:24:a0:9e:7e:5d:e7:37:75:e5:dc:31:c3:55:24:92:ae:d3:
27:8c:e1:43:b7:67:32:ee:28:47:93:ff:4e:67:cb:72:2d:ed:
ee:2e:b0:a9:d2:c1:87:c6:d5:51:5e:cf:f9:54:99:0f:66:1f:
5f:89:4c:2b:5f:d8:bc:c7:58:1c:11:4f:65:89:6d:ef:22:6f:
8a:3a:1a:46:f9:ed:e6:a0:ce:4a:1b:e8:9a:f2:de:bc:73:71:
95:3f:e8:d2:a6:07:75:6e:f1:72:d7:c2:95:e6:8b:04:5c:29:
65:89:5f:4e:a7:c6:98:f7:e7:2e:0a:94:15:64:d5:84:a7:18:
fa:01:c5:03:3a:b3:34:89:4f:cf:5f:24:7f:56:7f:ab:41:b9:
34:3e:a1:8d:71:ae:38:28:07:e5:2c:6e:ba:49:5d:93:18:f4:
9f:40:4b:53:18:eb:27:09:8f:7b:d4:ba:c4:c5:2b:33:02:00:
e2:ea:6c:94:89:a1:02:db:68:f3:d9:91:92:3b:a3:e4:ac:37:
43:17:73:24:b7:2f:0a:b9:3f:62:a4:7a:00:fd:f4:c3:a2:ab:
c6:0a:84:35:3b:6e:21:a3:b8:1e:50:e3:28:ff:fa:d7:0f:49:
e8:4a:72:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:47 2023 by rpki-client on console-fra.rpki-client.org