Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/q3DvLhFLRU1bJ-_GlulZGexoJvQ.roa
File: q3DvLhFLRU1bJ-_GlulZGexoJvQ.roa (raw, json)
Hash identifier: e268IM3m9vEAB6P2KbLiJKHgP5EK+BFeOjqBtnyEQ/k=
Subject key identifier: AB:70:EF:2E:11:4B:45:4D:5B:27:EF:C6:96:E9:59:19:EC:68:26:F4
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018800E8B151B6C03A172C6DD61438B7C540
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/q3DvLhFLRU1bJ-_GlulZGexoJvQ.roa
Signing time: Tue 09 May 2023 14:27:09 +0000
ROA not before: Tue 09 May 2023 14:27:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61302
IP address blocks: 81.161.230.0/24 maxlen: 24
87.121.124.0/23 maxlen: 24
81.161.239.0/24 maxlen: 24
178.215.226.0/24 maxlen: 24
91.200.192.0/22 maxlen: 24
45.9.156.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
147.78.100.0/23 maxlen: 24
185.246.223.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
171.22.17.0/24 maxlen: 24
171.22.18.0/24 maxlen: 24
194.180.39.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
45.139.104.0/24 maxlen: 24
82.115.210.0/23 maxlen: 24
45.129.84.0/24 maxlen: 24
45.129.86.0/24 maxlen: 24
94.154.172.0/24 maxlen: 24
87.121.220.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:00:e8:b1:51:b6:c0:3a:17:2c:6d:d6:14:38:b7:c5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 9 14:27:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab70ef2e114b454d5b27efc696e95919ec6826f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:77:03:28:84:58:c6:a8:83:51:06:7b:bf:d4:
19:2c:e7:0a:8c:9b:c0:1d:b6:af:57:7e:55:14:ac:
99:a9:f5:3e:c0:0f:06:71:5c:ca:51:a5:fd:11:a6:
2c:72:b2:4f:60:00:1d:fd:1e:8e:91:cf:c5:d3:85:
b2:70:8c:f2:e9:3a:e0:8e:85:81:80:e3:bc:13:ba:
e8:e2:03:69:27:0e:39:cb:21:f4:1a:47:f6:da:f9:
5d:ea:10:49:93:6f:97:16:98:d7:68:80:1f:ae:61:
0c:5e:ad:69:72:f0:4d:bc:90:e8:bd:fb:0c:c9:ab:
00:75:50:bf:be:3a:26:05:7f:d6:e9:d5:ec:1e:e4:
ff:35:94:ba:4f:43:ab:f8:7c:c0:4d:fa:97:6a:2f:
ad:fc:2f:f2:70:ec:cb:14:b1:ed:5b:91:24:22:e7:
f8:df:f4:c5:e0:66:f7:1d:e9:fd:c7:f0:52:59:24:
b1:16:ef:ef:53:51:3a:df:be:0a:51:90:5f:f4:59:
32:ff:6d:d3:00:8c:70:73:c1:37:57:f8:f6:47:c4:
38:a7:36:27:71:b1:11:68:8e:52:90:1b:d6:ff:c5:
1c:5c:d7:d9:77:d4:fe:27:64:06:b0:f5:7f:8a:61:
1c:18:c2:cd:96:a7:45:e4:cb:01:7c:a5:d3:16:7d:
07:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:70:EF:2E:11:4B:45:4D:5B:27:EF:C6:96:E9:59:19:EC:68:26:F4
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/q3DvLhFLRU1bJ-_GlulZGexoJvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.156.0/24
45.66.228.0/24
45.129.84.0/24
45.129.86.0/24
45.139.104.0/24
45.141.158.0/24
81.161.230.0/24
81.161.239.0/24
82.115.210.0/23
83.219.97.0/24
87.121.124.0/23
87.121.220.0/24
91.200.192.0/22
94.154.172.0/24
147.78.100.0/23
171.22.17.0-171.22.18.255
178.215.226.0/24
185.246.223.0/24
194.180.39.0/24
Signature Algorithm: sha256WithRSAEncryption
64:3f:43:b2:66:86:b5:14:c5:5d:ba:2d:a9:bc:9b:33:97:a5:
a9:ab:5e:1d:46:44:74:8b:68:c3:38:07:5b:29:b1:21:15:93:
71:65:48:23:ec:e1:78:6d:0c:f4:37:2d:81:73:15:c9:c3:7a:
c6:96:2e:49:dd:1f:01:3f:8b:a5:19:27:03:27:69:34:c2:ed:
a7:14:86:f0:cb:72:82:88:bc:e1:d4:bd:77:6c:d7:06:1d:8d:
4a:9c:4c:2f:88:d8:a0:83:d2:ad:d2:b2:e9:7f:1e:39:88:9c:
c7:c9:12:a1:71:cb:39:c6:28:fc:c5:4b:b6:40:25:09:ef:5e:
ea:d3:0f:66:a0:86:69:0d:41:38:44:bf:b2:a8:74:5f:a7:52:
28:94:6b:76:64:01:87:2a:5b:52:2b:6e:1c:59:ba:85:18:84:
ba:40:0c:2f:19:f9:9d:53:a7:f8:45:a5:62:74:36:a7:e0:5e:
2d:32:79:63:12:be:b3:7f:3c:26:13:20:fb:58:69:1f:ac:54:
7c:50:a4:68:29:36:e3:e3:58:f7:82:48:f1:1b:22:a0:c7:fe:
89:8a:30:dd:6a:e3:c4:05:1f:d0:d2:12:bd:85:1f:fd:43:3b:
b9:2e:f5:e5:7e:db:36:62:46:1b:34:5a:cc:42:6c:9b:da:5b:
95:22:da:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:42 2023 by rpki-client on console-ams.rpki-client.org