Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/v7gsvNPLUYC6h5zVhVCxdVyoYHA.roa
File: v7gsvNPLUYC6h5zVhVCxdVyoYHA.roa (raw, json)
Hash identifier: NZqjVoQ/dqlMZ6G6xV4r9BTqDSkWKHxD73Xau6zkR7Y=
Subject key identifier: BF:B8:2C:BC:D3:CB:51:80:BA:87:9C:D5:85:50:B1:75:5C:A8:60:70
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018C1A37EBB3B9EADB0A4657628656257253
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/v7gsvNPLUYC6h5zVhVCxdVyoYHA.roa
Signing time: Wed 29 Nov 2023 08:35:21 +0000
ROA not before: Wed 29 Nov 2023 08:35:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8100
IP address blocks: 94.156.2.0/24 maxlen: 24
91.92.16.0/24 maxlen: 24
91.92.27.0/24 maxlen: 24
193.58.121.0/24 maxlen: 24
193.58.123.0/24 maxlen: 24
87.121.38.0/24 maxlen: 24
94.156.152.0/24 maxlen: 24
45.8.92.0/24 maxlen: 24
94.156.154.0/23 maxlen: 24
87.121.60.0/22 maxlen: 24
91.92.67.0/24 maxlen: 24
45.139.123.0/24 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.173.0/24 maxlen: 24
94.156.237.0/24 maxlen: 24
94.156.238.0/24 maxlen: 24
93.123.76.0/22 maxlen: 24
141.98.5.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
94.156.178.0/24 maxlen: 24
193.47.62.0/24 maxlen: 24
94.156.180.0/23 maxlen: 24
87.121.104.0/24 maxlen: 24
93.123.24.0/24 maxlen: 24
87.121.103.0/24 maxlen: 24
93.123.26.0/23 maxlen: 24
87.121.114.0/23 maxlen: 24
93.123.112.0/22 maxlen: 24
5.253.58.0/23 maxlen: 24
193.25.219.0/24 maxlen: 24
5.253.56.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1a:37:eb:b3:b9:ea:db:0a:46:57:62:86:56:25:72:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 29 08:35:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bfb82cbcd3cb5180ba879cd58550b1755ca86070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b8:9b:b5:23:d6:96:96:72:9c:17:0f:22:dd:
a3:57:27:de:53:8e:52:24:da:8e:fd:15:cb:5e:94:
5f:9e:d2:a1:4f:75:0b:7d:25:b4:1c:10:6a:92:05:
db:b2:45:df:6f:98:cf:12:eb:4e:c0:a5:6c:c0:e3:
95:86:98:85:64:01:1b:24:1f:47:93:49:ae:73:24:
cf:b3:ff:1b:57:72:3b:a0:01:62:01:2a:e9:f1:97:
b4:76:5e:5f:7b:b4:c4:63:27:c1:21:39:f4:ac:97:
5a:6b:97:b8:73:49:a3:6d:93:ad:85:b3:4d:15:1d:
43:a9:68:96:03:ae:8d:9f:fa:7b:42:07:a6:6d:be:
d4:f6:db:04:89:f0:df:e2:c6:bb:b8:dc:20:92:72:
ce:64:37:e5:38:33:88:2c:98:7e:63:29:ee:72:f8:
2f:e2:fc:20:fc:1d:9d:60:24:fd:de:e4:3f:a1:ca:
f1:7e:d9:a7:c4:b3:37:24:59:13:c8:81:09:9c:f2:
1b:43:71:0a:e1:d5:fc:e8:6a:b5:6c:68:3a:85:ce:
8d:dd:11:f8:f1:d1:89:e9:e1:2d:51:eb:3f:f0:56:
88:12:9c:1a:ee:31:92:4b:59:91:b4:3a:cf:37:20:
46:e6:91:b6:58:62:04:f8:06:23:71:f7:c2:fc:4a:
29:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B8:2C:BC:D3:CB:51:80:BA:87:9C:D5:85:50:B1:75:5C:A8:60:70
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/v7gsvNPLUYC6h5zVhVCxdVyoYHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.56.0/22
45.8.92.0/24
45.139.123.0/24
87.121.38.0/24
87.121.60.0/22
87.121.103.0-87.121.104.255
87.121.114.0/23
91.92.16.0/24
91.92.27.0/24
91.92.67.0/24
93.123.24.0/24
93.123.26.0/23
93.123.76.0/22
93.123.112.0/22
94.154.160.0/23
94.154.173.0/24
94.156.2.0/24
94.156.152.0/24
94.156.154.0/23
94.156.178.0/24
94.156.180.0/23
94.156.237.0-94.156.238.255
141.98.5.0/24
185.252.177.0/24
193.25.219.0/24
193.47.62.0/24
193.58.121.0/24
193.58.123.0/24
Signature Algorithm: sha256WithRSAEncryption
51:38:f1:d6:a1:8e:8a:60:a8:fb:71:60:e4:c8:bb:d6:76:03:
4c:ab:47:bd:df:7e:07:e7:b0:29:1d:8c:e9:1d:2d:39:3a:02:
19:41:44:22:3e:36:be:fa:28:05:e0:93:ba:2f:1a:b1:ba:6f:
b9:64:e7:f2:c8:75:2e:a4:6f:b2:67:ca:2d:bb:57:0a:2f:0f:
ad:21:35:20:6e:eb:42:eb:11:e2:91:69:52:78:13:1e:cb:ab:
ad:12:34:47:b2:1a:13:ba:06:01:f6:42:a4:3a:47:cf:1e:f4:
a7:85:78:8b:be:a4:2e:5d:e8:c2:75:0b:7a:14:a4:32:ff:91:
29:e4:66:69:1b:e9:33:3c:0e:3c:f1:30:48:03:70:35:81:a3:
24:83:b7:31:a6:e7:73:1f:8c:4b:25:dc:bf:6a:84:ef:3f:fc:
e6:47:51:14:62:81:d6:5c:ca:27:7b:de:db:d3:57:41:0d:a8:
71:4d:d0:62:16:84:14:b1:f5:c2:f9:dd:01:85:fe:fa:c6:02:
de:2b:b0:d2:a0:25:89:20:68:88:57:4c:99:c2:c1:aa:09:ee:
b3:ac:7c:73:84:0b:9c:43:82:85:e4:0e:f8:4e:5f:da:a4:2a:
e6:71:33:7c:ac:a9:e8:b5:04:db:31:b8:c1:c0:d0:40:ce:5c:
ec:af:d8:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:18:49 2024 by rpki-client on console-fra.rpki-client.org