Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/voxsM1ez34e1cdYH5jI0E6q_-qw.roa
File: voxsM1ez34e1cdYH5jI0E6q_-qw.roa (raw, json)
Hash identifier: ov39nh69u0zbGADz1mJtFThStfulQATk/Oj/wDv12Jw=
Subject key identifier: BE:8C:6C:33:57:B3:DF:87:B5:71:D6:07:E6:32:34:13:AA:BF:FA:AC
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0189638CB268C07EE7266838BE28F34BB36E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/voxsM1ez34e1cdYH5jI0E6q_-qw.roa
Signing time: Mon 17 Jul 2023 11:11:52 +0000
ROA not before: Mon 17 Jul 2023 11:11:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 109.206.242.0/24 maxlen: 24
185.216.69.0/24 maxlen: 24
93.123.84.0/24 maxlen: 24
80.76.51.0/24 maxlen: 24
185.218.138.0/24 maxlen: 24
185.246.222.0/24 maxlen: 24
109.206.237.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:63:8c:b2:68:c0:7e:e7:26:68:38:be:28:f3:4b:b3:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 17 11:11:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be8c6c3357b3df87b571d607e6323413aabffaac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ad:6a:32:08:dc:ee:9c:39:ed:bb:61:db:2b:
33:ca:6e:13:95:a8:29:df:1e:61:52:8c:87:6e:d3:
32:8c:0c:a3:cb:3f:2e:ef:e6:cc:e2:63:70:78:df:
2a:d0:13:04:c1:a7:f9:5f:13:03:32:56:e5:fe:bd:
22:f9:92:25:30:cd:0d:4d:d3:d7:cf:0d:f5:34:ed:
cf:27:96:2f:f8:21:65:81:2b:44:55:6c:6a:3d:e9:
8c:2c:e3:8e:3a:f8:82:bb:43:42:47:ba:c9:04:fb:
f4:9a:82:15:97:79:9a:49:66:fb:2f:2a:4b:57:4a:
16:fb:98:24:64:7c:93:33:e6:e6:88:d9:27:a8:ae:
12:5f:07:24:d9:e5:d6:de:c6:ad:7f:5d:58:c9:32:
48:0e:c4:df:3c:28:f7:53:65:f8:74:01:e2:0d:3f:
5a:9f:fd:0d:a1:9a:c0:53:16:60:52:a3:1d:80:c2:
d6:93:73:7a:ac:3b:97:7f:35:e1:71:3b:fe:6f:2f:
85:fb:fc:5b:04:04:83:1d:19:73:c1:8e:ff:62:d0:
3a:0f:af:5f:40:f4:d1:8f:be:84:12:95:2a:96:26:
28:0c:b9:5d:07:ee:73:04:9d:cf:a8:1b:2a:36:85:
10:da:f3:f5:49:47:a4:a0:63:23:eb:5a:2b:56:99:
ff:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:8C:6C:33:57:B3:DF:87:B5:71:D6:07:E6:32:34:13:AA:BF:FA:AC
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/voxsM1ez34e1cdYH5jI0E6q_-qw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.76.51.0/24
93.123.84.0/24
109.206.237.0/24
109.206.242.0/24
185.216.69.0/24
185.218.138.0/24
185.246.222.0/24
Signature Algorithm: sha256WithRSAEncryption
76:8d:df:54:8f:a6:44:83:dd:1b:c8:c3:26:ae:02:cc:96:e5:
4b:41:4d:41:e5:a9:7e:38:a6:7b:07:af:d5:0b:4d:43:75:04:
3f:2e:b7:98:c6:68:57:b1:85:30:f4:00:e5:7a:f2:4f:0b:b1:
e1:72:fb:bf:e4:fe:fa:50:b0:dd:67:0f:a9:08:f1:8b:5b:58:
55:93:d0:e0:28:a3:eb:2e:a4:a6:e9:02:87:0c:1c:aa:5e:b4:
57:3c:cb:ac:c6:80:98:1e:c5:ef:75:9b:6a:84:db:d3:34:3a:
3c:81:5d:4b:f5:98:77:39:83:58:52:09:a3:1a:af:e8:c6:88:
e6:50:18:f3:f1:ba:13:01:ec:50:b7:81:41:da:4f:94:93:63:
0d:ec:c1:d2:36:1b:d7:c5:d5:c4:63:ec:ee:b6:39:5b:d9:1c:
e6:58:c3:df:fa:bb:a8:de:d9:8b:82:bf:43:8f:85:34:83:ea:
2c:ed:06:76:d8:32:88:e1:8e:cb:a7:47:b2:05:eb:7d:62:e9:
de:ef:0d:e2:26:c8:da:6b:8c:fc:ae:8e:9e:5b:53:33:21:d5:
7c:30:68:77:7a:2d:fe:9a:fc:40:13:35:f2:3f:9b:e5:be:9f:
02:2c:01:2c:6b:0e:4a:b6:fe:6f:45:c6:ae:2e:58:18:8f:5c:
ad:ad:c9:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 10 09:06:08 2023 by rpki-client on console-ams.rpki-client.org