Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/sPqMBU58IE5iYcRTnLFJTxRuV7s.roa
File: sPqMBU58IE5iYcRTnLFJTxRuV7s.roa (raw, json)
Hash identifier: X9HSOWPmWSSzQFRUTo0ehRb256bs4S0/H8WIceqXfC4=
Subject key identifier: B0:FA:8C:05:4E:7C:20:4E:62:61:C4:53:9C:B1:49:4F:14:6E:57:BB
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0188B3EA67EF7FA490241FBBEDF17786D6DD
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/sPqMBU58IE5iYcRTnLFJTxRuV7s.roa
Signing time: Tue 13 Jun 2023 08:41:03 +0000
ROA not before: Tue 13 Jun 2023 08:41:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 185.218.84.0/22 maxlen: 24
94.156.239.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
147.78.101.0/24 maxlen: 24
147.78.100.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
94.103.124.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
94.103.126.0/24 maxlen: 24
185.218.137.0/24 maxlen: 24
94.154.163.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
185.219.126.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b3:ea:67:ef:7f:a4:90:24:1f:bb:ed:f1:77:86:d6:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 13 08:41:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b0fa8c054e7c204e6261c4539cb1494f146e57bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:46:97:b5:32:db:07:4a:d2:96:52:99:97:4f:
76:9c:17:cf:1f:39:7a:36:98:fa:16:11:fc:bb:36:
c7:ff:05:df:60:25:b5:28:06:30:ac:3c:1d:e3:10:
2c:e3:fd:c0:49:2c:8a:f3:ed:86:19:59:13:ac:54:
d4:66:83:d1:9a:50:2c:05:ea:db:e0:e5:a8:22:e0:
a4:cd:4b:78:79:5f:27:99:ad:06:45:53:1a:f7:eb:
fc:93:4b:64:ea:cd:9f:3f:15:08:97:a6:9b:c7:36:
5d:42:d7:c4:99:fe:d5:2c:9c:09:23:97:e1:31:fe:
03:92:07:56:f3:75:22:fa:c3:7c:20:1f:07:62:87:
49:c4:c9:c9:8a:1d:5e:96:1d:d6:6a:ec:3c:e8:ac:
c2:29:d6:74:4d:b3:6c:96:a4:9e:3d:47:e9:9d:79:
79:ac:74:72:c6:aa:92:ab:8a:eb:48:6e:b4:78:f1:
b3:a5:fe:b7:3a:81:e1:db:00:12:90:6c:ee:9f:3f:
cb:05:ba:10:f1:32:c4:31:2f:56:d9:2f:2f:3d:9d:
5e:11:05:7e:b3:e4:41:01:47:4a:16:8a:d6:03:99:
6b:b6:82:e9:fe:8a:05:67:6a:b9:29:dd:11:a0:f5:
8f:b2:f5:9e:96:d9:5f:7d:f1:1c:61:c6:19:04:0b:
2f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:FA:8C:05:4E:7C:20:4E:62:61:C4:53:9C:B1:49:4F:14:6E:57:BB
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/sPqMBU58IE5iYcRTnLFJTxRuV7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.89.0/24
92.119.196.0/23
94.103.124.0/24
94.103.126.0/24
94.154.161.0-94.154.163.255
94.156.239.0/24
147.78.100.0/23
171.22.72.0/22
178.215.236.0/24
185.216.84.0/22
185.218.84.0/22
185.218.137.0/24
185.219.126.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:8b:90:d0:bd:c9:64:83:09:48:96:62:82:32:5d:2f:ed:6f:
10:45:e4:f5:b9:3a:0d:de:42:bb:3a:af:31:e5:ff:e6:0c:d7:
33:df:11:05:3d:b3:b1:0d:43:c8:82:65:c8:20:f8:81:29:c2:
d9:fb:42:68:15:3e:03:3f:c1:66:4c:4c:ee:6b:9c:27:2f:92:
69:22:41:ce:de:95:87:ef:3c:8a:6f:fd:55:c6:1c:b1:2e:1c:
37:05:d1:e8:0e:e9:1d:af:ad:60:30:c2:64:81:da:87:a8:12:
3f:68:3b:4f:3e:da:4e:5e:d6:47:95:be:d3:ae:d0:a2:01:d8:
e0:0c:1d:50:dd:23:bc:d3:0b:a1:7a:10:2e:85:0a:62:e0:fd:
62:8b:c8:a9:2e:81:61:f2:c1:aa:7b:10:ed:4c:96:02:24:85:
20:10:e1:38:8a:66:db:7b:83:17:b4:96:d2:0c:92:91:3d:09:
99:ec:e8:18:a0:22:d8:98:ef:35:af:f5:24:ca:91:8d:8d:c4:
f7:02:61:24:35:08:68:8e:79:5f:df:54:bc:6b:7e:ad:1b:15:
71:6d:9e:19:e7:c0:4f:50:63:9c:31:48:72:be:20:8d:a9:00:
6d:73:ac:bd:2e:e8:9e:ae:87:39:20:b7:a6:db:30:0c:69:f3:
3b:60:42:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:42 2023 by rpki-client on console-ams.rpki-client.org