Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/myNXnzd32HsW3Zzg5b49hD30Hmg.roa
File: myNXnzd32HsW3Zzg5b49hD30Hmg.roa (raw, json)
Hash identifier: X6wGsU1DnQan5ZXrnep7yKu6oH+7jjhi6pEmFBNyNe4=
Subject key identifier: 9B:23:57:9F:37:77:D8:7B:16:DD:9C:E0:E5:BE:3D:84:3D:F4:1E:68
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01879899148E382788CF6314D20D4C1B22EA
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/myNXnzd32HsW3Zzg5b49hD30Hmg.roa
Signing time: Wed 19 Apr 2023 08:19:41 +0000
ROA not before: Wed 19 Apr 2023 08:19:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 185.218.84.0/22 maxlen: 24
84.54.49.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
178.215.237.0/24 maxlen: 24
141.98.7.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
45.149.233.0/24 maxlen: 24
45.128.233.0/24 maxlen: 24
147.78.101.0/24 maxlen: 24
147.78.100.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
87.120.64.0/23 maxlen: 24
79.110.50.0/24 maxlen: 24
94.103.125.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.137.0/24 maxlen: 24
82.115.209.0/24 maxlen: 24
194.49.87.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
185.219.126.0/24 maxlen: 24
94.154.172.0/24 maxlen: 24
87.121.220.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:98:99:14:8e:38:27:88:cf:63:14:d2:0d:4c:1b:22:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 19 08:19:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b23579f3777d87b16dd9ce0e5be3d843df41e68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d4:55:a4:27:45:de:82:a2:87:78:77:c4:34:
f8:1f:ab:6f:3f:c1:f6:8c:61:b0:e6:4c:6b:41:84:
ca:2a:22:f6:36:17:b6:b5:97:f9:46:7f:25:f9:db:
96:c2:f8:a6:10:be:14:9e:c8:0e:c8:dd:07:ff:57:
78:f5:db:09:d1:b7:92:2c:f1:ed:81:38:c2:43:36:
01:63:c9:09:b8:00:82:83:66:77:de:37:66:e1:0a:
8e:d2:d7:54:9e:0a:25:75:b6:42:8c:69:6e:a4:6e:
af:3e:e3:a9:a9:74:c7:7d:a6:a7:19:e9:1e:b4:80:
24:f5:4c:6f:76:c3:5d:18:18:e1:17:6b:f5:af:e8:
d4:4c:cc:19:fa:da:c6:ee:a9:c9:3b:0e:37:30:be:
20:2c:4f:be:28:f0:35:c2:fe:e3:cd:00:4b:d0:d9:
95:a7:ad:c7:4c:e1:7b:12:5d:6e:fd:ef:74:28:db:
b4:ef:50:aa:39:8d:df:29:fe:70:a0:41:b5:cd:e4:
f7:35:5f:73:ae:ac:d7:15:22:88:fe:bf:bd:18:b5:
2f:c2:36:4f:d0:81:77:94:6d:b8:5b:9a:f3:04:0e:
10:89:1d:e1:80:42:23:89:1c:e3:7c:de:b5:ae:06:
6e:60:77:94:60:db:e9:de:bf:f2:a8:83:3d:e3:1b:
31:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:23:57:9F:37:77:D8:7B:16:DD:9C:E0:E5:BE:3D:84:3D:F4:1E:68
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/myNXnzd32HsW3Zzg5b49hD30Hmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.233.0/24
45.149.233.0/24
45.151.89.0/24
79.110.50.0/24
82.115.209.0/24
84.54.49.0/24
87.120.64.0/23
87.121.220.0/24
92.119.196.0/23
94.103.125.0/24
94.154.161.0-94.154.163.255
94.154.172.0/24
141.98.7.0/24
147.78.100.0/23
171.22.72.0/22
178.215.236.0/23
185.216.84.0/22
185.218.84.0/22
185.218.137.0/24
185.219.126.0/24
194.49.87.0/24
Signature Algorithm: sha256WithRSAEncryption
97:8b:ee:6e:28:fd:5e:3b:82:46:39:fd:d4:0b:92:d2:fd:a7:
b9:13:c5:d2:5a:c1:38:24:5b:92:05:b1:0a:75:d4:29:db:d7:
de:d5:8d:42:d2:57:70:d8:d4:05:f0:e8:4a:7d:ea:36:06:df:
a4:84:d1:5a:6d:91:a1:b3:44:a4:97:b4:c3:07:6d:7f:13:06:
02:42:0a:dc:d3:0f:75:30:df:24:12:ff:45:11:20:59:2f:b6:
a0:97:b8:30:f6:c1:b7:6a:08:a7:64:3a:0f:62:13:89:ba:05:
c1:d3:4d:e5:3c:76:20:3f:42:f9:23:0b:e3:12:b6:ec:8b:92:
96:b0:d3:c3:8d:a3:37:c8:b5:64:4b:ae:93:ff:e5:a1:ad:50:
9c:6c:18:55:bb:da:82:c8:49:98:b0:78:e4:5b:0a:ed:ef:e3:
6e:4c:bf:e8:0b:33:e4:22:d5:a5:f3:0e:88:6b:4c:90:0d:81:
d9:c2:64:a4:7d:a4:ee:e7:cf:66:fb:a1:a9:6f:9a:6e:e4:4b:
99:b2:80:c1:15:a8:f0:13:09:1b:48:8f:ba:ef:df:04:c0:c9:
44:3b:f1:55:ac:c2:cb:c0:a5:41:7e:7b:63:50:ad:70:d1:a6:
7c:34:af:56:e6:08:72:6d:21:47:15:5d:0e:63:e7:48:9f:30:
6c:5b:2e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:42 2023 by rpki-client on console-ams.rpki-client.org