Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ohh5GSNTeR02I0x3Bja_f-UdTVE.roa
File: ohh5GSNTeR02I0x3Bja_f-UdTVE.roa (raw, json)
Hash identifier: qKh8Cwgh6WhzMpsIuNAXGt1oAv3iM16gf5Hp6QdCvPE=
Subject key identifier: A2:18:79:19:23:53:79:1D:36:23:4C:77:06:36:BF:7F:E5:1D:4D:51
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018ADA75CB36988AAB2FC4F18A37712AB346
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ohh5GSNTeR02I0x3Bja_f-UdTVE.roa
Signing time: Thu 28 Sep 2023 06:24:27 +0000
ROA not before: Thu 28 Sep 2023 06:24:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60539
IP address blocks: 85.209.132.0/24 maxlen: 24
87.121.162.0/24 maxlen: 24
45.129.86.0/24 maxlen: 24
45.84.89.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:da:75:cb:36:98:8a:ab:2f:c4:f1:8a:37:71:2a:b3:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 28 06:24:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a21879192353791d36234c770636bf7fe51d4d51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6b:74:cb:19:1b:2c:14:84:8e:30:88:1c:35:
76:1f:56:4b:b3:3b:5d:29:ab:f1:8c:a2:d6:77:27:
db:5f:42:ce:a6:75:c8:17:4b:9a:9c:a6:98:90:57:
07:c2:4b:6d:b9:d0:22:50:15:47:19:a6:44:86:e8:
50:db:d9:5d:00:e0:87:50:83:21:7f:f6:93:a3:3b:
40:35:51:9e:79:f0:34:f3:3d:82:ba:be:d1:77:06:
90:76:e9:c3:54:b1:4f:3a:af:fb:fa:4f:03:3b:25:
4d:98:28:31:71:68:e8:dd:ca:ef:3a:75:84:fa:47:
30:ac:3a:52:ad:76:2e:e7:75:88:d7:48:ae:c4:35:
40:af:4e:ef:e0:a8:26:e1:1a:5d:0b:07:6d:f7:1e:
da:72:59:01:6f:ea:58:50:6a:dc:38:48:29:27:8a:
32:ab:29:94:f5:f6:ea:71:17:2c:28:94:7c:29:33:
7c:24:f5:3a:b3:cc:f2:c2:e8:87:ac:d5:00:89:6d:
e8:0f:08:f4:89:52:07:26:53:f8:f6:09:31:8f:53:
8a:fb:97:51:51:c6:f6:57:2c:39:96:29:b0:1c:e1:
ea:2c:98:57:16:11:ca:2f:f8:7f:50:f2:6d:51:45:
98:c0:91:4d:80:11:86:d4:11:f3:91:b5:d8:fc:4e:
a2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:18:79:19:23:53:79:1D:36:23:4C:77:06:36:BF:7F:E5:1D:4D:51
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ohh5GSNTeR02I0x3Bja_f-UdTVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.89.0/24
45.129.86.0/24
85.209.132.0/24
87.121.162.0/24
Signature Algorithm: sha256WithRSAEncryption
76:cf:54:3c:43:e0:25:0b:4f:2e:de:79:9b:73:d8:fe:08:18:
e9:41:03:9b:43:a5:da:de:1e:72:d3:41:0b:63:76:7d:86:46:
4b:dc:7a:a4:e4:89:94:06:71:65:97:2d:4c:cb:22:fe:e2:6d:
35:6a:c8:c2:13:23:49:b1:43:fa:06:e3:56:67:66:5e:fc:1f:
a2:da:d7:cd:ac:8f:a9:97:21:ad:d3:ca:b4:3d:66:66:ac:c4:
8d:c2:b2:37:2f:65:98:f5:ce:58:62:64:a2:10:92:2d:91:44:
cb:7d:d3:5b:59:ba:a5:21:87:03:15:5e:80:bf:85:93:f9:d5:
fe:25:b5:9d:0f:48:d3:4a:81:16:05:68:4d:7c:44:83:f0:6c:
00:a7:81:d5:82:93:67:af:e7:64:3f:c8:d8:ec:3a:dc:a6:30:
aa:f1:24:8e:c8:86:94:5d:d8:20:c0:e3:c9:48:ec:d9:d4:cc:
fc:e0:f0:3b:16:e6:71:fc:4d:3b:a5:0b:86:90:ad:ef:c9:10:
a9:92:89:19:e6:7a:66:86:97:c4:79:0b:9b:34:10:a2:5e:3b:
4f:a4:95:36:fd:bd:58:b9:61:8e:60:2e:9f:5e:fa:47:b4:b0:
bf:0e:e9:f1:44:00:ea:b9:2e:39:cd:9d:dc:bc:b2:68:a4:2e:
82:20:9e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 29 09:16:51 2023 by rpki-client on console-ams.rpki-client.org