Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/q-XgHawTAHj2ibdAlCoa1I0sGu0.roa
File: q-XgHawTAHj2ibdAlCoa1I0sGu0.roa (raw, json)
Hash identifier: GKZj9DSVKsy2Q5MaD7X0yIkeK0IrkQTQeyTqtdK94u8=
Subject key identifier: AB:E5:E0:1D:AC:13:00:78:F6:89:B7:40:94:2A:1A:D4:8D:2C:1A:ED
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018930347145EDACFDE6C2CB8A5C45796EF5
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/q-XgHawTAHj2ibdAlCoa1I0sGu0.roa
Signing time: Fri 07 Jul 2023 11:54:50 +0000
ROA not before: Fri 07 Jul 2023 11:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 185.218.84.0/22 maxlen: 24
94.156.239.0/24 maxlen: 24
194.113.36.0/22 maxlen: 24
178.215.236.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
185.252.176.0/24 maxlen: 24
147.78.101.0/24 maxlen: 24
147.78.100.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
45.95.0.0/22 maxlen: 24
94.103.124.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
87.121.45.0/24 maxlen: 24
185.218.137.0/24 maxlen: 24
194.169.174.0/24 maxlen: 24
94.154.163.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
185.219.126.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:30:34:71:45:ed:ac:fd:e6:c2:cb:8a:5c:45:79:6e:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 7 11:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=abe5e01dac130078f689b740942a1ad48d2c1aed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:8f:60:a9:f5:ba:88:a2:5e:7f:1e:4e:44:2e:
82:d8:e7:b6:88:7f:d1:d1:17:54:84:af:e6:b0:e7:
4c:f5:22:22:d7:ef:a6:da:07:df:f4:41:e1:9f:29:
68:6e:88:75:48:cd:b3:13:db:42:4d:4e:af:6c:00:
60:df:56:d6:e7:a1:7d:77:51:98:f1:ab:fd:99:8d:
46:e1:25:87:05:b5:38:cc:79:0c:72:d2:ca:42:9a:
85:6b:27:ab:36:5b:ce:9a:2e:e4:1e:6d:64:ab:67:
9a:11:eb:66:a3:e5:d1:bc:90:f6:5a:7d:62:60:07:
cf:85:24:7d:24:66:2a:e3:ec:64:0c:28:9e:c5:d0:
f0:d7:fe:31:d9:fb:24:5f:fd:2e:95:19:70:b3:ad:
32:6c:2e:99:d5:69:4e:b1:d5:18:2b:8c:b8:07:4b:
b8:99:e0:09:f6:f7:b0:9d:bf:1e:bc:30:ec:68:f3:
91:ec:d9:b6:3f:b7:da:81:c3:f9:5a:79:d7:86:d3:
c8:10:61:4d:06:77:7b:ab:0a:99:52:83:6e:e4:3d:
42:9a:d0:22:23:d0:13:a0:d5:8d:8f:d6:86:4e:1c:
23:62:ca:7f:11:88:02:21:39:d7:a3:55:e4:87:33:
6e:2f:01:d7:f5:9a:52:16:23:26:b9:bd:bf:f2:2b:
51:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:E5:E0:1D:AC:13:00:78:F6:89:B7:40:94:2A:1A:D4:8D:2C:1A:ED
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/q-XgHawTAHj2ibdAlCoa1I0sGu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.0.0/22
45.151.89.0/24
87.121.45.0/24
92.119.196.0/23
94.103.124.0/24
94.154.161.0-94.154.163.255
94.156.239.0/24
147.78.100.0/23
171.22.72.0/22
178.215.236.0/24
185.216.84.0/22
185.218.84.0/22
185.218.137.0/24
185.219.126.0/24
185.252.176.0/24
194.113.36.0/22
194.169.174.0/24
Signature Algorithm: sha256WithRSAEncryption
50:d1:36:82:b2:55:3d:80:b5:a3:0a:eb:62:a6:ec:b8:82:55:
cd:5a:c3:f0:16:94:06:d2:61:0f:4d:f4:93:7f:11:73:15:27:
c3:2a:78:92:b2:c3:7f:d9:e9:a2:ad:e6:57:a0:2a:18:ba:ea:
96:a7:01:33:5e:c3:f9:a5:5f:d3:a9:d2:14:b6:a0:7e:f2:66:
fe:f0:44:26:36:d7:00:9f:72:89:93:10:fc:83:80:13:3c:39:
47:f8:3e:8a:94:58:d4:c7:d6:a1:d4:cd:05:9c:97:e2:57:5c:
66:b7:6c:88:02:34:ae:93:41:23:29:e3:48:e4:66:0c:34:23:
7e:be:af:87:e8:56:7f:31:c6:7b:e6:83:38:63:79:02:16:96:
78:22:e1:96:90:19:22:6e:27:e1:d7:57:12:cc:73:8f:3d:b1:
a0:cc:8c:37:ad:b3:ef:59:3c:e1:4e:c3:f2:ce:ac:37:46:24:
36:53:ba:23:15:2d:c3:06:37:93:1d:c5:09:08:a7:9a:dd:57:
37:83:54:bd:21:e1:21:38:4a:0a:31:f9:b6:90:71:2d:6e:eb:
11:81:05:7d:c5:18:88:03:8e:e4:23:42:5d:23:23:ca:27:23:
14:67:54:4f:8e:a6:40:09:b5:b2:42:38:e9:a2:e8:fd:74:08:
86:ee:1e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:42 2023 by rpki-client on console-ams.rpki-client.org