Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/rtG8JrvHlN1F9WEBvTTdgsZHPxs.roa
File: rtG8JrvHlN1F9WEBvTTdgsZHPxs.roa (raw, json)
Hash identifier: v6wTwN5xaKl02isdOIvr+tqyBwKVs5aFQO0gBJZxHLY=
Subject key identifier: AE:D1:BC:26:BB:C7:94:DD:45:F5:61:01:BD:34:DD:82:C6:47:3F:1B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018ADBED28F9582CBFA82E9BE3D5DFAA2A49
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/rtG8JrvHlN1F9WEBvTTdgsZHPxs.roa
Signing time: Thu 28 Sep 2023 13:14:27 +0000
ROA not before: Thu 28 Sep 2023 13:14:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 185.218.84.0/22 maxlen: 24
91.92.24.0/23 maxlen: 24
147.78.101.0/24 maxlen: 24
147.78.100.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.59.0/24 maxlen: 24
194.180.50.0/24 maxlen: 24
194.169.174.0/24 maxlen: 24
82.115.208.0/24 maxlen: 24
94.156.78.0/24 maxlen: 24
94.154.163.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
178.215.224.0/24 maxlen: 24
94.156.239.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
87.121.69.0/24 maxlen: 24
185.252.176.0/24 maxlen: 24
94.156.177.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
185.216.84.0/22 maxlen: 24
87.120.87.0/24 maxlen: 24
93.123.116.0/24 maxlen: 24
185.219.126.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:db:ed:28:f9:58:2c:bf:a8:2e:9b:e3:d5:df:aa:2a:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 28 13:14:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aed1bc26bbc794dd45f56101bd34dd82c6473f1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b5:40:1d:90:f5:e0:de:67:7b:7b:ab:10:a9:
11:8e:ed:f3:7e:8c:a1:cb:25:5a:fa:32:ab:b4:7a:
a6:c4:28:a4:c8:24:0c:25:88:b9:7a:84:20:25:39:
fa:50:78:f2:38:e7:3e:2a:6a:24:f0:6a:37:07:f6:
24:e3:3b:9b:97:0b:8a:0f:c2:7b:a7:50:d0:b2:c8:
a1:c8:f7:69:7b:78:7c:9f:b3:67:79:4f:04:2f:d3:
4f:73:76:8c:8e:59:d3:65:ca:83:58:89:41:b2:01:
05:bb:ce:e2:a1:22:60:fc:e7:29:a3:68:4b:05:b8:
86:a6:ff:1f:aa:d5:fe:11:b8:fd:a2:b1:69:8f:b6:
1c:92:31:36:1d:01:b3:28:14:f8:8b:0f:33:63:90:
7c:51:e0:0f:78:0c:8e:3a:23:44:ba:69:4c:48:b3:
28:d1:e0:5f:d6:6c:93:2b:07:bc:2c:6e:50:84:30:
b8:9d:8a:04:83:80:2e:8b:57:de:2c:7a:b5:9a:21:
29:eb:bd:01:c9:92:06:69:d6:41:8e:46:e0:7f:e3:
94:ac:b2:ec:63:45:df:86:57:ba:23:83:d8:f1:05:
c2:8a:3b:82:cc:8d:33:cc:61:37:6b:67:1e:c7:ff:
5c:24:d2:37:35:92:e3:2d:13:f6:74:fb:2e:06:5e:
01:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D1:BC:26:BB:C7:94:DD:45:F5:61:01:BD:34:DD:82:C6:47:3F:1B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/rtG8JrvHlN1F9WEBvTTdgsZHPxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.89.0/24
82.115.208.0/24
87.120.87.0/24
87.121.45.0/24
87.121.59.0/24
87.121.69.0/24
91.92.24.0/23
92.119.196.0/23
93.123.116.0/24
94.154.161.0-94.154.163.255
94.156.78.0/24
94.156.177.0/24
94.156.239.0/24
147.78.100.0-147.78.102.255
171.22.72.0/22
178.215.224.0/24
178.215.236.0/24
185.216.84.0/22
185.218.84.0/22
185.219.126.0/24
185.252.176.0/24
194.169.174.0/24
194.180.50.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:53:38:39:24:59:73:50:35:69:30:9e:37:c2:bf:6a:d4:f2:
c7:b4:57:cf:ed:7c:c0:c7:e4:19:a2:c0:6e:64:9b:a1:d2:40:
be:13:d3:70:59:a6:f5:d3:1e:10:bc:c2:e4:bb:27:eb:b7:31:
92:76:ad:44:67:51:1a:30:ea:96:08:0b:f7:31:98:3e:a6:6b:
92:d2:fd:e0:86:3e:57:97:cb:fa:08:be:f8:e1:37:15:00:81:
ee:7c:3c:eb:c1:a3:d8:69:3f:54:4d:73:95:63:61:f8:c5:b5:
7b:fb:c6:ae:d6:f6:ab:91:6f:58:e0:95:26:5f:44:e0:5a:e9:
13:d8:7c:97:25:e3:c6:1a:97:f5:ad:e5:77:62:4f:f2:b4:a2:
89:88:6e:ce:f0:b2:9d:1d:6b:e4:84:47:79:d8:b0:35:34:d1:
cf:ad:69:1b:38:81:49:fa:17:8d:18:f4:b4:24:88:d1:1c:c4:
26:11:80:1d:93:c8:e2:ee:78:57:86:35:c7:c2:74:f4:9a:8c:
ad:9b:e3:09:6c:ab:5d:1f:44:53:3d:d6:fe:0a:d2:0d:be:a1:
3f:f5:80:60:20:96:a0:11:61:8c:00:40:d3:a8:e7:77:a6:2c:
f5:d0:a0:43:e4:6d:dd:36:7c:ac:bc:a4:ac:5d:74:5d:eb:01:
45:b7:be:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 29 06:49:59 2023 by rpki-client on console-ams.rpki-client.org