Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/nstQIQK4EUsVWD9Il7BqUW-cmSY.roa
File: nstQIQK4EUsVWD9Il7BqUW-cmSY.roa (raw, json)
Hash identifier: fO+tZL9IKPqCgtRqzUZ3sPOmXzNKovTPDD6QUb+16xs=
Subject key identifier: 9E:CB:50:21:02:B8:11:4B:15:58:3F:48:97:B0:6A:51:6F:9C:99:26
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0187C244CE11294E5A515EB4085821B55B11
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/nstQIQK4EUsVWD9Il7BqUW-cmSY.roa
Signing time: Thu 27 Apr 2023 10:31:41 +0000
ROA not before: Thu 27 Apr 2023 10:31:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 185.218.84.0/22 maxlen: 24
178.215.236.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
147.78.101.0/24 maxlen: 24
147.78.100.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
87.120.64.0/23 maxlen: 24
185.216.84.0/22 maxlen: 24
94.103.126.0/24 maxlen: 24
185.218.137.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
185.219.126.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c2:44:ce:11:29:4e:5a:51:5e:b4:08:58:21:b5:5b:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 27 10:31:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ecb502102b8114b15583f4897b06a516f9c9926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:50:d6:06:47:a0:b8:d6:d9:6e:9a:f4:af:28:
6c:69:d4:e9:c8:11:df:3b:bb:b6:4f:dc:ec:fd:4a:
a1:bf:68:47:a4:6b:96:d1:39:b9:cb:e4:e3:01:7b:
5b:eb:c2:45:ce:f1:78:ba:e3:e1:9b:6b:f8:ef:b0:
a3:49:60:f1:9e:9a:a0:92:4c:6f:d4:b6:60:03:c9:
1a:49:39:f3:23:de:df:63:c3:d0:95:70:5a:f0:ce:
e3:53:77:81:1d:24:4b:03:1a:00:56:10:c4:b7:c9:
82:80:69:c5:5c:08:83:59:f6:7b:fc:4e:72:f0:c7:
b9:38:a9:99:e7:65:a1:31:10:95:6f:db:95:dd:e3:
69:3c:d4:b1:70:4e:5a:b0:e7:95:25:4b:85:8c:17:
0e:03:1b:3a:de:8e:da:00:ac:22:5d:34:57:b5:44:
0c:dd:ce:41:73:26:28:37:57:55:6c:2c:b6:25:0b:
d2:49:20:95:e8:c5:79:d7:ba:ed:da:e3:4d:45:10:
cf:5b:b4:c1:64:30:f0:37:7e:dc:26:78:a9:7d:31:
77:68:a4:c3:11:31:bf:68:b9:35:a0:5d:6d:25:de:
51:66:a8:9b:90:48:08:43:5c:5b:11:7c:d6:06:94:
bb:7d:ad:46:21:86:58:7d:ae:4f:2e:cd:7c:98:55:
46:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:CB:50:21:02:B8:11:4B:15:58:3F:48:97:B0:6A:51:6F:9C:99:26
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/nstQIQK4EUsVWD9Il7BqUW-cmSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.89.0/24
87.120.64.0/23
92.119.196.0/23
94.103.126.0/24
94.154.161.0-94.154.163.255
147.78.100.0/23
171.22.72.0/22
178.215.236.0/24
185.216.84.0/22
185.218.84.0/22
185.218.137.0/24
185.219.126.0/24
Signature Algorithm: sha256WithRSAEncryption
53:2a:72:50:f5:e5:e9:35:0e:38:e4:c8:f7:eb:e3:90:fa:5f:
bf:21:c5:62:ff:6f:01:b8:3e:f6:ef:33:26:4e:21:fb:ea:4b:
e0:af:55:09:18:08:24:fd:b6:d9:83:12:7f:4b:bd:9c:39:4b:
72:1c:88:4c:fd:13:84:85:90:e3:fc:70:2f:e4:4a:82:26:92:
c4:4a:00:1a:f5:b5:9c:bd:3c:1f:e6:d4:d3:75:73:46:a1:9c:
b5:fe:95:af:ec:99:9f:33:d8:ad:64:c2:30:2c:83:af:b0:53:
9c:86:be:fb:dd:f9:03:4b:95:17:50:1f:0a:84:df:e8:65:4d:
83:93:50:2d:5b:5e:2a:26:dd:28:52:00:f9:f5:8d:a5:25:88:
07:3a:41:8b:e0:c2:1c:36:9d:7a:3c:ab:31:87:b8:ef:d0:5d:
d3:fa:15:1f:ac:09:b0:05:5f:4e:34:55:55:41:3c:13:e9:58:
fe:ce:ad:27:81:d0:ce:54:2e:c5:65:3f:fc:05:2c:2b:2d:c9:
62:55:aa:9a:81:f3:31:40:47:9c:cf:dc:13:c6:55:19:b0:c7:
a1:8c:b9:6c:14:00:0c:7f:e3:63:f9:fc:dc:f7:cc:44:76:4b:
9b:cb:51:fd:f2:12:64:2a:9e:48:4d:f7:d2:e2:f8:c9:0f:8a:
44:7e:5a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:42 2023 by rpki-client on console-ams.rpki-client.org