Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qrSojL7NdZgD8edTIivBZgxHnMg.roa
File: qrSojL7NdZgD8edTIivBZgxHnMg.roa (raw, json)
Hash identifier: l+B/i4GU4Jt3XjEWJj0dOrv6QxwH14Swd40fQ8Kwm54=
Subject key identifier: AA:B4:A8:8C:BE:CD:75:98:03:F1:E7:53:22:2B:C1:66:0C:47:9C:C8
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018805C4E54B6B72A6BEAAEE16355A2A5F00
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qrSojL7NdZgD8edTIivBZgxHnMg.roa
Signing time: Wed 10 May 2023 13:06:09 +0000
ROA not before: Wed 10 May 2023 13:06:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204843
IP address blocks: 94.156.11.0/24 maxlen: 24
94.156.10.0/24 maxlen: 24
45.81.241.0/24 maxlen: 24
94.156.239.0/24 maxlen: 24
94.156.236.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
37.221.121.0/24 maxlen: 24
37.221.122.0/24 maxlen: 24
37.221.123.0/24 maxlen: 24
37.221.120.0/24 maxlen: 24
94.156.176.0/24 maxlen: 24
193.149.2.0/24 maxlen: 24
193.149.3.0/24 maxlen: 24
45.144.153.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:05:c4:e5:4b:6b:72:a6:be:aa:ee:16:35:5a:2a:5f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 10 13:06:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aab4a88cbecd759803f1e753222bc1660c479cc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bb:51:43:ec:2b:9f:00:2d:09:03:1a:af:68:
75:82:3b:f4:b7:d6:0a:bd:56:5e:2c:ab:7a:21:04:
b0:2f:a8:23:46:b9:b3:1b:21:f6:35:9c:8e:33:74:
b4:c3:b3:fb:d1:ea:c7:26:fb:fa:12:f5:f1:ba:a5:
b1:7d:d2:4a:26:5c:46:73:1c:79:a9:53:5e:6e:22:
2b:b9:3d:8e:d0:d9:6c:63:b9:fa:d1:c0:2c:c8:03:
4a:82:7d:86:f8:86:7b:8b:5d:2b:f9:e0:3a:0b:ab:
2e:1d:54:ef:3c:19:ac:b9:50:c7:53:c4:0f:3a:15:
ae:7e:fe:a3:c4:2b:57:2c:1f:30:2c:6f:55:ef:f5:
66:7d:fe:d0:f9:b8:60:b3:ad:a2:db:5d:3a:d6:b2:
41:e9:69:ae:fc:09:48:e1:75:58:4a:62:f4:8a:76:
47:37:e7:7c:09:f5:d8:ea:a6:30:d6:4c:51:83:bf:
4f:ab:e3:51:ed:d0:0c:02:90:5f:04:d3:94:d3:99:
68:89:5c:20:44:92:cf:88:72:8a:0f:06:f3:c3:6e:
2f:1d:b1:50:15:6e:4c:2a:d0:cb:87:ec:c6:77:e3:
eb:63:d8:5f:61:1f:a0:91:f9:e7:46:36:a4:e8:cc:
18:7e:56:b8:cb:c9:0d:79:05:b0:ae:e1:2a:d9:73:
93:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B4:A8:8C:BE:CD:75:98:03:F1:E7:53:22:2B:C1:66:0C:47:9C:C8
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qrSojL7NdZgD8edTIivBZgxHnMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.120.0/22
45.81.241.0/24
45.144.153.0/24
94.156.10.0/23
94.156.176.0/24
94.156.236.0/24
94.156.239.0/24
141.98.1.0/24
193.149.2.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:a8:4c:cc:45:dc:ba:9e:e2:6e:81:40:fb:c5:d5:93:98:e9:
ae:1e:1a:45:fb:17:5f:4c:20:d5:24:9d:ef:fd:42:c2:b5:23:
ec:1e:29:8b:a4:77:c3:59:2a:83:7f:c1:36:a3:7b:56:06:53:
1e:ea:6d:b6:99:df:d1:e1:33:3e:01:c3:ff:df:02:7f:c4:6b:
c7:cc:7f:bc:35:e8:7b:ed:39:09:36:2f:81:02:c8:84:a9:34:
ea:b6:a9:d0:55:21:e1:28:f8:22:6b:46:ec:aa:2b:b6:91:00:
16:3e:cf:05:37:84:5d:ef:0d:81:c9:42:9d:11:a3:c1:c4:a8:
61:59:61:0d:52:7b:26:67:50:15:d1:f9:a3:4a:16:9e:b8:99:
e7:48:09:45:0f:36:5c:4d:48:2f:df:2c:db:ed:4c:d6:b5:35:
e8:16:87:77:62:8c:21:e2:20:c2:c4:d0:de:f8:b6:88:0c:62:
4e:16:40:17:3f:9b:cf:78:dc:a4:54:02:fc:14:bc:52:1d:a4:
10:7d:3d:40:b1:00:e9:d7:dd:13:16:9a:b0:09:3e:bd:ef:59:
82:f7:cd:87:a9:1d:b4:82:88:f2:9b:8b:8a:f0:70:26:47:f0:
37:0d:6a:35:1c:76:ef:e3:f1:1c:86:2f:94:56:61:c9:f8:bc:
48:ba:75:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:42 2023 by rpki-client on console-ams.rpki-client.org