Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/lRWe67x2VGbAka2UQwbAsVGeN4I.roa
File: lRWe67x2VGbAka2UQwbAsVGeN4I.roa (raw, json)
Hash identifier: +9DDzi8C2Iph3VE7S2WCMugTi2rGPgllqX84gofItIk=
Subject key identifier: 95:15:9E:EB:BC:76:54:66:C0:91:AD:94:43:06:C0:B1:51:9E:37:82
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01888F4E49803835CF57DC36B471AC192B80
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/lRWe67x2VGbAka2UQwbAsVGeN4I.roa
Signing time: Tue 06 Jun 2023 06:04:12 +0000
ROA not before: Tue 06 Jun 2023 06:04:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 185.218.84.0/22 maxlen: 24
94.156.239.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
147.78.101.0/24 maxlen: 24
147.78.100.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
185.216.84.0/22 maxlen: 24
94.103.126.0/24 maxlen: 24
185.218.137.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
185.219.126.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8f:4e:49:80:38:35:cf:57:dc:36:b4:71:ac:19:2b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 6 06:04:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=95159eebbc765466c091ad944306c0b1519e3782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ea:bf:46:d4:7d:3c:ea:1d:d3:46:06:f9:e2:
f5:72:66:99:c5:85:32:21:8a:af:55:5c:a8:e3:11:
04:39:cc:e5:b6:1e:08:f9:28:3c:eb:3b:fc:59:c9:
d5:a2:76:01:5a:a8:fc:e8:58:59:b4:45:9a:56:d9:
a5:2d:30:fb:8f:35:29:11:7e:1f:35:d3:b3:c4:de:
ef:a4:fc:dd:9b:a3:94:01:18:55:84:20:5e:2f:e8:
80:ee:03:31:49:d5:5f:84:39:2a:ca:e3:e8:1f:01:
3b:39:75:88:ba:fd:5b:d3:8d:6d:3c:8b:fc:3d:10:
01:5e:90:9e:d2:09:be:af:64:93:50:be:71:ca:bb:
a3:d7:b1:e2:e2:15:46:2a:bd:5e:ec:bf:46:a1:35:
50:90:af:72:d4:8f:a5:83:89:80:73:ea:8d:0b:ee:
74:f9:27:e1:5e:4a:bc:22:5c:c2:75:82:36:06:75:
e6:cb:aa:a8:40:8f:55:7a:3a:16:e2:cd:3a:f6:e2:
a4:f9:5a:e4:23:2c:57:18:58:e8:0c:1e:86:cb:3b:
74:cd:e6:4c:ca:81:09:8c:2e:1e:1c:40:49:f1:75:
47:ce:d1:23:79:16:7b:d0:f7:a8:79:bd:bf:68:87:
ed:de:b2:b7:48:99:16:fd:7b:4c:e9:a4:b7:e4:fa:
af:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:15:9E:EB:BC:76:54:66:C0:91:AD:94:43:06:C0:B1:51:9E:37:82
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/lRWe67x2VGbAka2UQwbAsVGeN4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.89.0/24
92.119.196.0/23
94.103.126.0/24
94.154.161.0-94.154.163.255
94.156.239.0/24
147.78.100.0/23
171.22.72.0/22
178.215.236.0/24
185.216.84.0/22
185.218.84.0/22
185.218.137.0/24
185.219.126.0/24
Signature Algorithm: sha256WithRSAEncryption
49:85:f6:ea:5a:2b:48:5c:38:58:7b:bd:2b:25:85:9a:10:02:
ed:54:32:5f:ba:27:b5:14:11:52:91:ac:58:e3:b5:79:bf:ba:
4e:07:3e:fc:27:87:fd:a1:56:61:a7:a3:9c:1a:cc:af:1a:79:
42:4c:8a:f6:52:70:73:8b:12:c2:38:b7:8c:e6:78:92:e5:c4:
67:53:20:dc:5d:0a:a2:75:97:f4:e3:92:ae:ca:73:c3:39:80:
60:19:f6:0f:cc:dc:94:07:e1:6d:0b:c5:de:f1:97:db:92:4a:
3e:6e:62:1c:f6:55:27:a5:44:50:0b:84:d9:e1:28:b1:aa:19:
ad:3f:20:9d:74:54:68:df:07:48:a9:d7:91:29:e1:73:d9:f8:
03:bc:f1:98:2b:56:ac:c0:30:f3:03:bc:4c:cc:53:18:28:90:
a6:49:f6:fa:3b:05:dd:4c:9d:c3:7b:96:72:35:50:2d:6f:5e:
32:f7:01:8f:c4:1e:22:8c:14:ee:c1:8d:cf:1f:ea:95:96:87:
98:48:c6:01:81:19:c1:ab:84:bf:e7:0e:9f:db:86:33:f2:35:
3a:0a:40:d7:62:2b:a5:7e:9b:c5:19:e3:a1:03:ef:46:69:1c:
93:aa:43:79:22:78:16:26:2f:96:e0:e3:20:30:4b:ec:99:67:
a1:4b:3d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:47 2023 by rpki-client on console-fra.rpki-client.org