Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qfC86gIjXadLzol--6-gDlFy5gU.roa
File: qfC86gIjXadLzol--6-gDlFy5gU.roa (raw, json)
Hash identifier: cYssL0PQdJ6As0Tx0tPF8JLS5Fcq6fymXVqNRajWKBQ=
Subject key identifier: A9:F0:BC:EA:02:23:5D:A7:4B:CE:89:7E:FB:AF:A0:0E:51:72:E6:05
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018A2120040D97A3F54179B79F3A83D6FAFA
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qfC86gIjXadLzol--6-gDlFy5gU.roa
Signing time: Wed 23 Aug 2023 06:41:00 +0000
ROA not before: Wed 23 Aug 2023 06:41:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 185.218.84.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
91.92.21.0/24 maxlen: 24
94.156.239.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
185.252.176.0/24 maxlen: 24
147.78.101.0/24 maxlen: 24
147.78.100.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
193.37.41.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
185.216.84.0/22 maxlen: 24
87.121.45.0/24 maxlen: 24
194.169.174.0/24 maxlen: 24
94.156.78.0/24 maxlen: 24
94.154.163.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
185.219.126.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:21:20:04:0d:97:a3:f5:41:79:b7:9f:3a:83:d6:fa:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 23 06:41:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a9f0bcea02235da74bce897efbafa00e5172e605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0a:e5:9b:fd:1e:37:df:40:24:e8:2f:a3:45:
db:56:be:1b:32:68:37:d8:91:32:7b:ba:3a:8e:1b:
65:43:57:82:71:1c:f6:2a:94:97:9e:80:30:71:0d:
b6:aa:47:47:2a:12:5b:d5:20:7f:f3:d2:5d:38:13:
72:5d:71:e2:1f:62:e8:03:1b:77:d9:bf:72:39:1e:
a0:f7:07:4d:7e:7c:c4:e8:e8:d2:eb:ac:1e:b1:8f:
c3:34:2f:4b:4e:fa:23:f2:4b:82:45:6d:fa:5d:9b:
e2:d1:be:5b:cb:27:e8:62:d7:76:80:7c:a9:44:17:
c1:83:58:fa:38:71:69:4f:69:99:8f:51:8e:2e:c3:
3c:f7:5c:79:c2:4a:c8:e8:53:85:7c:f3:76:f3:4d:
ef:4d:5a:dc:6e:39:d9:4a:64:b4:2b:08:3c:9b:02:
94:4b:2a:6f:41:1c:5c:5e:f6:d5:7d:65:6b:94:0c:
c9:78:43:2b:fe:74:a1:0c:10:0d:fd:59:ad:4b:35:
2b:ac:8f:09:80:e4:b7:2d:33:37:1f:f0:c7:4f:21:
41:97:78:9e:88:ff:b3:b6:0b:7d:86:70:a0:aa:a0:
1e:64:d0:72:6f:c6:58:7d:bf:d9:e7:58:ce:07:17:
86:7b:7a:a1:fa:64:bb:c9:29:a1:b6:84:53:ed:f8:
48:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F0:BC:EA:02:23:5D:A7:4B:CE:89:7E:FB:AF:A0:0E:51:72:E6:05
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qfC86gIjXadLzol--6-gDlFy5gU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.89.0/24
87.121.45.0/24
91.92.21.0/24
92.119.196.0/23
94.154.161.0-94.154.163.255
94.156.78.0/24
94.156.239.0/24
147.78.100.0-147.78.102.255
171.22.72.0/22
178.215.224.0/24
178.215.236.0/24
185.216.84.0/22
185.218.84.0/22
185.219.126.0/24
185.252.176.0/24
193.37.41.0/24
194.169.174.0/24
Signature Algorithm: sha256WithRSAEncryption
93:fb:48:91:c8:72:b1:7e:98:5b:64:36:f4:44:2e:6c:11:c9:
18:f0:ba:b0:9a:f4:f3:9b:25:65:b0:60:8c:14:8a:22:ba:c2:
a0:2c:dc:ff:f1:d4:cf:35:a4:c3:5c:ad:f0:36:25:c8:b3:07:
be:80:45:de:f9:7c:72:f2:34:0a:ba:14:d4:a1:90:33:7d:c6:
75:da:b4:4d:da:76:b8:32:e9:38:3c:b1:d3:c7:5c:14:a8:cf:
b7:e4:f3:7a:26:e5:d3:92:a5:7c:ed:d8:2d:66:a4:d3:ea:ba:
f9:71:3c:aa:94:c8:1e:35:dc:44:b9:b2:d9:16:0c:41:08:3e:
3c:a0:63:12:58:52:03:54:10:d0:67:e8:ca:15:07:61:2a:2f:
a6:35:58:71:dc:e6:71:62:13:13:05:52:89:2c:c2:1f:0c:cc:
31:00:de:9f:19:98:a9:f0:90:eb:fc:da:44:ad:3f:9d:13:cb:
d9:a6:d4:89:60:fc:73:b9:ee:e8:84:de:71:f4:ba:b6:a9:49:
0d:8f:7c:b6:5a:61:a7:32:08:c4:6e:d9:68:00:c9:1c:18:c3:
b0:e4:b8:be:21:2a:e6:53:3b:be:f0:31:38:4b:3b:41:73:65:
6f:22:04:b4:25:8c:a9:cc:9c:50:0f:79:63:25:e8:84:57:74:
eb:2b:5d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 12:41:24 2023 by rpki-client on console-ams.rpki-client.org