Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/uQXXrFX96nsMa1u24oq2RhzftK8.roa
File: uQXXrFX96nsMa1u24oq2RhzftK8.roa (raw, json)
Hash identifier: 2uLIO+7sG9oIqTpq+KjcuMQSYqcdqaPv9qiV1adoXew=
Subject key identifier: B9:05:D7:AC:55:FD:EA:7B:0C:6B:5B:B6:E2:8A:B6:46:1C:DF:B4:AF
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01870D5A30BB926125FF39EE2B08E459DB3A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/uQXXrFX96nsMa1u24oq2RhzftK8.roa
Signing time: Thu 23 Mar 2023 07:23:47 +0000
ROA not before: Thu 23 Mar 2023 07:23:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 87.121.124.0/23 maxlen: 24
185.218.84.0/22 maxlen: 24
84.54.49.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
178.215.237.0/24 maxlen: 24
141.98.7.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
45.149.233.0/24 maxlen: 24
45.128.233.0/24 maxlen: 24
147.78.101.0/24 maxlen: 24
147.78.100.0/24 maxlen: 24
171.22.19.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
87.120.64.0/23 maxlen: 24
94.103.125.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.137.0/24 maxlen: 24
194.49.87.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
185.219.126.0/24 maxlen: 24
94.154.172.0/24 maxlen: 24
87.121.220.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0d:5a:30:bb:92:61:25:ff:39:ee:2b:08:e4:59:db:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 23 07:23:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b905d7ac55fdea7b0c6b5bb6e28ab6461cdfb4af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0e:e5:ba:63:5e:2c:1e:19:c3:99:8e:21:1e:
e8:f3:6c:c8:b3:8f:ac:89:ed:32:43:68:01:5f:21:
bd:c2:43:18:12:24:4a:8d:53:46:f0:4f:24:85:1a:
24:67:4f:a0:49:0b:95:1b:56:d1:68:b4:70:c5:1e:
9a:63:71:8d:f4:1c:ec:c2:f5:11:65:ca:c4:da:55:
0a:b9:48:b4:a9:9d:fe:df:e7:b0:dc:7e:0e:07:90:
3c:64:3f:bb:89:15:3b:4f:b1:51:dc:4f:97:c3:f7:
49:89:bb:ff:db:b3:58:f6:fe:1f:98:08:ed:c0:d6:
36:db:45:63:78:2d:e0:11:51:10:e0:f3:2b:f5:52:
80:ea:82:d3:05:ce:7b:3c:6b:d1:38:a9:4b:55:d8:
6d:e1:36:03:c5:2c:a9:34:a6:03:ce:36:a7:b0:e3:
20:bd:e4:f9:bb:be:ca:be:99:ac:58:d1:7a:52:85:
17:af:dd:c7:ec:7d:53:72:d8:02:41:50:28:c3:aa:
de:81:a8:92:b9:45:da:fa:4f:f9:e5:f5:1b:bf:57:
6f:e9:e5:e2:2f:27:d8:75:d2:3c:2a:da:e5:e6:e1:
90:2c:49:12:b3:8e:7e:5c:56:51:1a:75:e6:95:55:
d8:f8:4a:65:06:c9:5b:9a:43:df:eb:09:89:0b:fc:
cf:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:05:D7:AC:55:FD:EA:7B:0C:6B:5B:B6:E2:8A:B6:46:1C:DF:B4:AF
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/uQXXrFX96nsMa1u24oq2RhzftK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.233.0/24
45.149.233.0/24
45.151.89.0/24
84.54.49.0/24
87.120.64.0/23
87.121.124.0/23
87.121.220.0/24
92.119.196.0/23
94.103.125.0/24
94.154.161.0-94.154.163.255
94.154.172.0/24
141.98.7.0/24
147.78.100.0/23
171.22.19.0/24
171.22.72.0/22
178.215.236.0/23
185.216.84.0/22
185.218.84.0/22
185.218.137.0/24
185.219.126.0/24
194.49.87.0/24
Signature Algorithm: sha256WithRSAEncryption
47:ae:bf:04:45:ad:5a:9c:2d:42:35:d8:48:f0:8a:6b:a9:bb:
7b:72:14:6a:9a:9e:df:40:44:21:dc:0f:a5:1e:dd:4a:2d:87:
04:e7:86:a4:1b:09:f5:4c:75:7f:6c:70:2b:d4:c3:cd:9d:41:
5f:db:b5:44:11:d5:a8:d5:2d:47:4e:64:1b:c1:19:7c:a0:97:
00:72:5d:c6:20:36:1a:36:f4:b0:52:f8:39:c4:02:ad:49:1f:
73:46:01:a3:61:22:ee:5b:d0:2b:f4:c3:d3:a3:b4:00:8e:86:
c3:f7:93:f6:e6:d4:68:a1:7b:10:bf:5a:1e:59:e7:2a:19:e5:
52:a0:d5:3c:42:cf:6f:1e:43:a5:0c:cb:c9:78:12:c6:e8:e6:
be:3c:90:41:d8:4e:3a:07:18:f9:af:4d:ab:1c:51:ae:35:f0:
ca:4b:7d:20:8f:e0:71:65:8d:18:21:47:a6:06:47:21:81:e6:
56:15:4b:e2:90:56:85:7a:2d:93:23:af:53:2a:3f:d8:de:35:
8f:97:b6:1b:bf:68:84:c3:21:fe:f7:ab:22:80:13:2f:3d:3c:
77:d5:bc:b2:97:4f:e5:66:cb:d5:59:6e:d6:ed:e1:0f:6e:22:
1c:84:48:28:6c:10:0d:11:27:7b:6c:27:79:0a:50:dd:8b:11:
0f:12:52:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:43 2023 by rpki-client on console-ams.rpki-client.org