Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/uuujOU5eBy-w6UIxURcAMswT7R8.roa
File: uuujOU5eBy-w6UIxURcAMswT7R8.roa (raw, json)
Hash identifier: kQyw375p8KBOI3W46nq0RRNiAIzVXy6+gnHtBfAbq/E=
Subject key identifier: BA:EB:A3:39:4E:5E:07:2F:B0:E9:42:31:51:17:00:32:CC:13:ED:1F
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CD83D0B65C7CFDB6E853F917677B16935
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/uuujOU5eBy-w6UIxURcAMswT7R8.roa
Signing time: Fri 05 Jan 2024 06:08:48 +0000
ROA not before: Fri 05 Jan 2024 06:08:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 185.218.84.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
94.156.239.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
185.252.176.0/24 maxlen: 24
147.78.101.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
185.226.172.0/24 maxlen: 24
45.84.89.0/24 maxlen: 24
185.226.175.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
185.216.84.0/22 maxlen: 24
45.88.90.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
94.154.172.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d8:3d:0b:65:c7:cf:db:6e:85:3f:91:76:77:b1:69:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 5 06:08:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=baeba3394e5e072fb0e9423151170032cc13ed1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f5:f0:bf:7e:66:8c:0b:c9:bc:b9:72:1d:d2:
a2:de:5f:81:76:5f:cf:a3:dc:be:86:76:38:68:3f:
cc:7a:2e:7a:16:b7:29:41:6c:74:f8:c7:ac:7f:0e:
57:8b:8a:85:87:41:88:f1:46:65:c2:4d:06:6e:15:
04:fe:3c:fd:cc:c8:ac:65:23:37:4f:e0:8b:7f:46:
0f:0b:23:4b:ec:4a:c3:f8:bb:dc:6a:e4:29:9c:fc:
d9:2c:93:ef:49:61:a9:8a:8e:2d:6d:fe:d7:bc:42:
4b:89:44:9f:dd:d5:4d:b8:5e:65:42:90:f7:09:98:
7d:90:81:4d:2a:89:a9:58:19:78:81:26:be:04:6e:
e8:2e:ec:6d:f5:77:aa:18:0d:52:b8:40:13:7f:60:
3f:28:37:79:64:c6:bd:a9:70:97:e2:be:db:68:44:
38:74:ad:ec:ac:9d:bd:90:56:48:14:c4:11:cd:f8:
33:ee:d7:b5:d0:92:5d:d5:6b:75:54:d6:84:1e:a4:
7b:3e:73:9d:d1:e4:62:73:08:a5:d1:da:dd:f6:4b:
96:d6:5b:89:01:ed:db:1d:20:23:0b:c1:ea:92:1d:
4e:0f:82:a2:37:37:db:39:14:3e:12:e1:d2:65:a9:
50:98:68:2e:12:ae:2e:9a:18:08:66:43:fa:71:e7:
89:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:EB:A3:39:4E:5E:07:2F:B0:E9:42:31:51:17:00:32:CC:13:ED:1F
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/uuujOU5eBy-w6UIxURcAMswT7R8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.89.0/24
45.88.90.0/24
45.151.89.0/24
87.120.87.0/24
87.121.45.0/24
87.121.221.0/24
92.119.196.0/23
94.154.161.0-94.154.163.255
94.154.172.0/24
94.156.239.0/24
147.78.101.0-147.78.102.255
171.22.72.0/22
178.215.224.0/24
178.215.236.0/24
185.216.84.0/22
185.218.84.0/22
185.226.172.0/24
185.226.175.0/24
185.252.176.0/24
Signature Algorithm: sha256WithRSAEncryption
36:4a:95:4e:36:ce:a9:6a:09:cc:6f:e9:8b:d0:38:3e:64:31:
f1:2d:25:2b:aa:35:03:51:86:e5:9a:5b:b9:80:d2:6c:e1:a4:
cc:2e:18:98:b5:4b:46:92:ec:83:96:6e:fe:83:1f:89:2d:a1:
83:1a:2b:f4:f3:0b:bc:05:00:0f:b4:f9:72:ab:5f:e2:d5:de:
7f:fa:81:a9:53:63:ea:bd:92:bf:4e:ec:dd:f7:63:c2:ea:f8:
5a:c2:21:48:bd:98:12:99:34:da:22:2a:1e:a2:81:67:39:4e:
d9:20:f0:1e:20:6a:f6:6f:d7:ff:b1:80:c5:3a:4a:12:5a:7d:
67:7f:d1:d7:2c:16:72:48:8d:e9:00:ac:84:07:d7:62:7c:d1:
8b:21:62:57:3b:b9:69:cd:8b:b2:7f:08:9b:3b:4f:e2:a5:10:
eb:63:90:99:a4:6b:59:8b:db:bc:35:fc:c3:9e:ae:ed:ad:83:
8c:30:85:ed:1b:d8:19:4d:f7:96:c1:47:32:4a:b6:1f:8c:b0:
0c:e2:10:20:f8:19:38:81:ca:9c:06:e6:0c:46:6c:c8:a7:f5:
b4:71:74:02:e1:2a:91:03:8c:f4:f1:06:c0:1b:5f:c2:d5:d9:
c0:5c:6d:02:6d:fe:e9:5f:21:8d:fa:6f:e1:b9:1d:f6:84:6f:
8c:30:91:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 17:14:09 2024 by rpki-client on console-ams.rpki-client.org