Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/s-bdsqH0N7dd4Ch31QEx3SQI8EI.roa
File: s-bdsqH0N7dd4Ch31QEx3SQI8EI.roa (raw, json)
Hash identifier: kGXC7z5M1wHMDb1ObBuvUSPqGzVodw+401rmBr+LqFU=
Subject key identifier: B3:E6:DD:B2:A1:F4:37:B7:5D:E0:28:77:D5:01:31:DD:24:08:F0:42
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018B5C3D32E7BE6E436A3061D6A7E8417A07
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/s-bdsqH0N7dd4Ch31QEx3SQI8EI.roa
Signing time: Mon 23 Oct 2023 11:13:16 +0000
ROA not before: Mon 23 Oct 2023 11:13:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207459
IP address blocks: 84.54.49.0/24 maxlen: 24
85.217.145.0/24 maxlen: 24
193.149.29.0/24 maxlen: 24
193.149.30.0/24 maxlen: 24
193.149.28.0/22 maxlen: 22
193.149.31.0/24 maxlen: 24
193.149.28.0/24 maxlen: 24
45.84.90.0/24 maxlen: 24
79.110.51.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
194.49.86.0/24 maxlen: 24
94.154.163.0/24 maxlen: 24
45.151.90.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5c:3d:32:e7:be:6e:43:6a:30:61:d6:a7:e8:41:7a:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 23 11:13:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b3e6ddb2a1f437b75de02877d50131dd2408f042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5a:94:d5:ee:db:dc:b5:a9:c5:fc:5d:c6:65:
80:12:21:5b:c8:87:86:92:10:69:db:01:89:d0:40:
a2:bf:d9:f3:dc:b5:71:4f:79:8b:19:13:03:82:a1:
fb:cf:d6:7e:6c:85:d8:93:85:f6:14:89:4a:b3:c0:
44:95:fd:24:be:00:62:b5:9d:6f:22:61:e6:24:26:
62:01:f1:ab:8b:d4:92:1c:9c:d0:1d:24:f2:22:78:
15:c6:b1:7c:d1:63:a3:89:5a:a9:e2:52:17:a2:e2:
9c:09:fa:85:e4:11:10:86:39:d2:53:93:22:cc:d7:
de:5d:29:a3:90:c7:f2:ac:bc:8e:9b:24:50:4b:67:
16:08:b4:c5:21:58:c6:2f:e0:0c:05:94:ab:ec:ef:
a1:33:79:5d:2a:bf:27:17:7a:c3:fd:e6:83:8f:98:
f5:49:15:6b:16:76:57:ec:bd:65:2e:ab:a7:57:de:
66:05:cc:bd:16:36:99:eb:50:22:37:f1:cf:a9:f0:
84:d0:1a:e0:6f:a9:42:02:32:07:98:fb:41:72:54:
50:25:bb:11:f9:9b:f1:af:27:9a:7a:07:ce:34:3f:
10:5a:f3:22:aa:bc:d6:80:ef:f1:67:42:9c:c6:f2:
c4:9f:68:99:e6:c4:ee:94:f0:5f:d5:e1:f0:2e:bb:
c4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E6:DD:B2:A1:F4:37:B7:5D:E0:28:77:D5:01:31:DD:24:08:F0:42
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/s-bdsqH0N7dd4Ch31QEx3SQI8EI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.90.0/24
45.151.90.0/24
79.110.51.0/24
84.54.49.0/24
85.217.145.0/24
87.120.87.0/24
94.154.163.0/24
193.149.28.0/22
194.49.86.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:b5:b5:bc:16:8d:c1:3f:a9:bb:1a:e8:4b:84:52:76:7f:9b:
9a:63:f3:65:e5:5f:3b:44:10:d7:3e:79:dc:87:ed:61:51:49:
51:03:6d:d3:2a:c8:ef:ff:3c:f9:be:57:49:f2:d5:49:ad:38:
41:32:21:b2:c2:95:7d:f7:63:bb:0f:78:9a:19:7c:92:7f:80:
67:d3:36:be:62:46:72:da:eb:46:3e:66:03:c2:c2:a8:be:4a:
70:43:4e:1a:2f:13:35:3c:c8:d6:e0:90:0b:6f:b0:c3:cd:9e:
17:7e:a4:95:cf:88:c2:1b:73:e8:ec:fc:3d:44:a9:1b:13:af:
9a:a5:e3:a7:9c:d9:48:90:5b:43:0b:6c:25:1c:51:79:db:37:
58:1e:cc:74:8c:7b:46:fc:57:f7:93:fb:81:0a:63:15:68:cb:
1a:65:55:5d:6a:f6:4e:c7:31:2a:ae:20:8a:e4:66:70:74:de:
9b:08:e0:79:09:f1:c0:6a:51:c2:10:97:db:eb:7a:cb:58:c2:
e0:74:d2:dc:7e:c1:e8:24:ad:8b:23:97:e8:b5:2b:86:62:22:
2b:1e:53:fa:f5:fc:15:da:aa:1e:ab:d4:51:e5:5c:3a:fe:1e:
58:a4:b3:8e:39:89:5f:85:df:a2:d1:98:f3:57:e2:6a:07:24:
9c:61:7f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 26 10:34:38 2023 by rpki-client on console-ams.rpki-client.org