Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/n7NxoctE8a476uTO1PqXCZXJz8M.roa
File: n7NxoctE8a476uTO1PqXCZXJz8M.roa (raw, json)
Hash identifier: 3wjDQZ6cbknJqKnTQbWHveznvhNeF7xVXZIzTBz34ts=
Subject key identifier: 9F:B3:71:A1:CB:44:F1:AE:3B:EA:E4:CE:D4:FA:97:09:95:C9:CF:C3
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0186C59FDE894FA5289C66238ED35FAC659A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/n7NxoctE8a476uTO1PqXCZXJz8M.roa
Signing time: Thu 09 Mar 2023 09:07:13 +0000
ROA not before: Thu 09 Mar 2023 09:07:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35913
IP address blocks: 81.161.231.0/24 maxlen: 24
192.145.29.0/24 maxlen: 24
192.145.31.0/24 maxlen: 24
192.145.30.0/24 maxlen: 24
192.145.28.0/24 maxlen: 24
185.252.162.0/24 maxlen: 24
185.252.160.0/24 maxlen: 24
185.252.161.0/24 maxlen: 24
185.252.163.0/24 maxlen: 24
193.148.50.0/24 maxlen: 24
194.11.199.0/24 maxlen: 24
194.11.197.0/24 maxlen: 24
193.148.48.0/24 maxlen: 24
193.148.51.0/24 maxlen: 24
193.148.49.0/24 maxlen: 24
194.11.196.0/24 maxlen: 24
194.11.198.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c5:9f:de:89:4f:a5:28:9c:66:23:8e:d3:5f:ac:65:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 9 09:07:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9fb371a1cb44f1ae3beae4ced4fa970995c9cfc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:36:00:71:28:b2:a1:11:e9:40:a2:23:2f:71:
ee:1a:ab:71:57:d0:9d:28:dc:4f:4c:c3:7a:38:69:
e1:5a:40:28:87:41:88:4c:b1:eb:a4:ab:f1:b4:e3:
b8:23:f5:0d:05:85:36:04:21:99:4f:83:fd:fe:5d:
f9:91:f4:d3:95:99:f5:1f:94:40:4a:36:5a:9a:eb:
e8:15:9b:43:43:3e:13:a3:c8:4c:3b:3b:1a:bf:fb:
ee:4b:eb:be:81:4a:6b:00:7e:2e:ce:47:ec:f7:1b:
bd:eb:b0:3c:63:85:8f:41:96:2d:a5:1f:7e:fc:b5:
f9:b0:79:06:58:c4:8d:37:e1:de:16:0c:09:ec:4f:
92:6d:0a:56:58:99:a4:b6:bf:03:11:84:96:4b:a9:
ba:2e:b4:2d:9e:92:0f:2e:2a:a6:74:54:cf:26:f4:
49:0d:16:b8:ad:13:d2:ca:ed:99:f8:fc:35:80:ce:
32:14:2d:c2:70:41:99:fb:7a:a2:bc:59:a6:5f:53:
b2:b8:7e:1e:64:24:36:e1:77:57:5a:ed:d2:40:16:
a0:3d:55:a5:ba:06:40:d8:2f:0c:98:22:8e:80:51:
ef:b3:75:48:91:67:d4:ce:21:3a:50:cd:f8:5c:16:
06:e9:de:11:95:de:1d:5f:0e:e4:96:ce:2f:00:41:
7b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B3:71:A1:CB:44:F1:AE:3B:EA:E4:CE:D4:FA:97:09:95:C9:CF:C3
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/n7NxoctE8a476uTO1PqXCZXJz8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.161.231.0/24
185.252.160.0/22
192.145.28.0/22
193.148.48.0/22
194.11.196.0/22
Signature Algorithm: sha256WithRSAEncryption
88:b9:e0:2b:8f:b4:46:f5:5b:31:59:41:95:49:b2:ad:36:06:
0f:ea:a4:3f:73:fc:69:bb:16:26:fd:9e:fa:ba:3d:cf:51:7d:
d3:0c:25:a2:01:df:e7:17:86:95:85:3a:82:15:f2:b3:0e:c0:
78:dc:d6:63:bc:f5:90:88:7e:62:33:5d:70:33:d3:ee:20:f3:
54:a6:26:24:6c:18:7e:2d:99:10:36:93:5e:3b:fa:9e:e8:ad:
aa:cf:2d:b8:18:65:7e:cf:45:ef:cd:d0:ba:f8:b3:9e:eb:67:
4c:c3:98:8b:cf:ff:e9:5e:db:d1:1d:e5:22:36:23:54:a8:47:
9a:4a:54:02:08:05:9e:0d:7c:e7:73:1f:18:31:f3:91:49:88:
cd:4d:3b:30:0f:5f:17:13:9c:ce:ef:47:84:c9:8a:76:78:9f:
56:1d:b7:cc:31:e3:c8:6c:b3:17:0c:b9:4c:ac:0e:c2:16:71:
99:73:1b:9b:a7:da:de:6a:e5:c9:77:6f:ae:86:eb:17:15:d6:
b5:f7:44:8f:47:00:0d:47:fc:20:45:a8:4e:0b:c2:ca:37:56:
74:91:c7:72:41:7f:38:c3:df:f9:ea:39:b4:9c:77:62:10:f1:
d2:a0:4e:b8:f5:13:bf:da:a5:fb:7e:dd:a5:75:ef:6f:20:94:
b4:3a:82:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:42 2023 by rpki-client on console-ams.rpki-client.org