Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/nJWiw1i_KPW2rKkZi3BM-3o8Po4.roa
File: nJWiw1i_KPW2rKkZi3BM-3o8Po4.roa (raw, json)
Hash identifier: lHaJu2YdimkYNCVQiNbh2YzbbfqvNnT5TyXmDGf2WL4=
Subject key identifier: 9C:95:A2:C3:58:BF:28:F5:B6:AC:A9:19:8B:70:4C:FB:7A:3C:3E:8E
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0185A60EDA07F896D3C402AEF4703979D837
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/nJWiw1i_KPW2rKkZi3BM-3o8Po4.roa
Signing time: Thu 12 Jan 2023 12:57:49 +0000
ROA not before: Thu 12 Jan 2023 12:57:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22653
IP address blocks: 31.169.124.0/24 maxlen: 24
31.169.125.0/24 maxlen: 24
185.221.66.0/24 maxlen: 24
31.169.126.0/24 maxlen: 24
85.217.128.0/24 maxlen: 24
31.169.127.0/24 maxlen: 24
164.40.186.0/23 maxlen: 24
164.40.184.0/24 maxlen: 24
185.218.136.0/23 maxlen: 24
185.225.72.0/24 maxlen: 24
193.37.46.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a6:0e:da:07:f8:96:d3:c4:02:ae:f4:70:39:79:d8:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 12 12:57:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c95a2c358bf28f5b6aca9198b704cfb7a3c3e8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:05:12:12:80:15:06:f5:34:e0:02:70:47:43:
ca:d5:e1:6e:bd:fe:f3:b5:1b:30:4a:db:c0:64:65:
fa:77:df:f3:62:bf:43:0b:59:58:10:5e:fa:cd:6e:
5f:e9:cc:b0:fe:0c:ca:a3:76:68:c5:86:d5:6c:88:
e3:34:0d:ac:7b:2c:84:05:3f:7c:28:f3:f4:7d:cc:
df:ae:ba:48:06:76:14:ce:f7:41:dc:6b:95:d6:66:
dd:12:63:02:c1:19:3a:61:b4:e0:77:1f:da:53:91:
02:1d:72:0e:86:cd:7c:36:d4:09:36:a7:01:1b:31:
1c:a9:fa:3e:e8:03:77:72:fa:7a:8d:ba:b2:ea:8a:
da:c9:1f:17:fa:38:9c:d2:58:bc:8f:c7:27:af:cf:
3e:af:7e:57:eb:f9:63:49:33:96:ce:e8:0b:5f:08:
f4:fb:36:54:8e:b2:9e:8c:cb:2b:2d:93:ae:99:6f:
95:56:e3:bb:3c:5d:8b:1f:f5:a3:89:b2:e7:c4:c9:
a4:57:5e:e7:82:ce:e6:36:c7:26:d8:47:35:09:48:
53:ab:dc:99:d7:c0:63:6a:5a:2f:12:d6:4d:e0:72:
10:ab:d3:75:56:23:78:1d:c0:41:12:74:39:6c:8d:
54:70:b1:cb:39:c9:8e:70:c6:b7:5d:2e:62:ea:af:
df:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:95:A2:C3:58:BF:28:F5:B6:AC:A9:19:8B:70:4C:FB:7A:3C:3E:8E
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/nJWiw1i_KPW2rKkZi3BM-3o8Po4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.124.0/22
85.217.128.0/24
164.40.184.0/24
164.40.186.0/23
185.218.136.0/23
185.221.66.0/24
185.225.72.0/24
193.37.46.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:46:d1:ec:7b:47:87:8e:ce:23:40:f9:ea:22:7d:14:8c:7f:
eb:49:22:99:8b:cb:07:af:5b:17:af:f7:57:0d:29:54:1b:22:
3f:98:0e:9e:be:da:a1:e8:e3:64:a7:d0:05:0e:17:b1:4d:b8:
d4:11:ed:0b:43:b7:11:d8:a6:6f:42:84:88:17:28:a0:e0:c1:
19:15:5c:d4:a9:1b:43:20:09:46:ee:01:80:74:ee:6d:02:0b:
aa:13:22:19:d1:cb:1c:98:e8:fc:89:1a:c1:d6:73:ce:e1:18:
9c:8d:e6:7a:cc:1c:da:f4:37:78:59:30:e6:1f:c6:4c:18:dd:
44:77:70:4e:97:3c:21:87:8e:21:85:1a:eb:92:c3:a2:15:6f:
cb:25:40:e6:12:0d:91:4e:40:47:de:e4:59:70:37:58:f6:34:
75:b1:06:aa:5d:87:b2:22:28:7f:b6:3e:c6:05:ce:3c:d6:eb:
d8:77:2c:2d:5f:e0:77:91:d9:2c:85:27:a4:e6:dd:9f:8b:ef:
01:5d:88:c7:e3:9e:c5:77:be:e6:b4:df:2a:0b:e6:b1:c2:dc:
e0:bd:ec:29:23:61:08:da:fa:ca:78:b7:a9:33:2a:88:89:13:
72:03:dd:c4:ea:32:5a:40:88:b5:88:9d:d0:69:37:45:58:06:
59:ef:39:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:48 2023 by rpki-client on console-fra.rpki-client.org