Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vs07gh8hhBP5Aa1eeg_W_lcWo7Q.roa
File: vs07gh8hhBP5Aa1eeg_W_lcWo7Q.roa (raw, json)
Hash identifier: sJEPZXz8QgVabFTKvJ48ROcimirKBqeblJVzZkiPTBY=
Subject key identifier: BE:CD:3B:82:1F:21:84:13:F9:01:AD:5E:7A:0F:D6:FE:57:16:A3:B4
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018AD59D410598A05B9DA438D0DAC082466D
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vs07gh8hhBP5Aa1eeg_W_lcWo7Q.roa
Signing time: Wed 27 Sep 2023 07:49:27 +0000
ROA not before: Wed 27 Sep 2023 07:49:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49217
IP address blocks: 212.115.41.0/24 maxlen: 24
45.84.222.0/24 maxlen: 24
79.110.50.0/24 maxlen: 24
45.88.89.0/24 maxlen: 24
178.215.237.0/24 maxlen: 24
193.42.34.0/24 maxlen: 24
94.156.176.0/24 maxlen: 24
87.120.33.0/24 maxlen: 24
185.226.173.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d5:9d:41:05:98:a0:5b:9d:a4:38:d0:da:c0:82:46:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 27 07:49:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=becd3b821f218413f901ad5e7a0fd6fe5716a3b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e5:6d:6b:01:95:99:73:4c:33:b2:e1:fb:95:
d5:b9:5e:34:04:cd:51:27:88:b0:ae:5d:2b:67:b5:
b4:81:d6:13:50:a8:e6:03:95:04:1a:b0:bd:c9:b8:
b0:3e:e5:b9:c3:53:bd:57:c1:ef:f4:53:e3:09:c8:
e9:eb:b7:fe:e2:7e:a3:c9:b3:27:a7:d7:83:9d:84:
c0:b9:50:02:a7:1a:fe:64:ca:60:98:3a:bd:96:fe:
6d:0b:89:bf:44:c6:89:92:8b:b6:e0:39:26:54:97:
fe:ed:b6:3d:2b:96:4e:cb:cc:4a:e0:c1:52:aa:66:
48:02:61:88:a8:2d:56:8b:28:6e:bc:f2:6a:63:bc:
1a:57:f0:75:cb:59:c1:78:b8:b4:c1:ce:c6:4a:ad:
74:cc:8e:45:f6:6f:7d:e7:af:f0:01:82:e8:28:3d:
21:90:61:51:15:20:17:14:53:5a:a2:6e:c9:09:b0:
64:a0:db:26:40:2d:24:dc:30:88:02:44:60:cf:3e:
2c:5f:1f:4e:a0:7a:e9:a4:af:51:a7:cc:12:a1:f6:
e2:17:2e:63:e9:94:de:ef:1b:e5:6c:2b:cc:da:85:
3f:57:1d:9e:83:34:fe:d4:92:71:85:33:ce:13:14:
46:60:4e:54:58:b1:1e:c2:a5:4b:69:cf:0e:5e:15:
2f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:CD:3B:82:1F:21:84:13:F9:01:AD:5E:7A:0F:D6:FE:57:16:A3:B4
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vs07gh8hhBP5Aa1eeg_W_lcWo7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.222.0/24
45.88.89.0/24
79.110.50.0/24
87.120.33.0/24
94.156.176.0/24
178.215.237.0/24
185.226.173.0/24
193.42.34.0/24
212.115.41.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:30:05:57:66:8a:1c:51:f0:c9:07:5c:9b:f3:a2:33:6d:c1:
77:8d:37:23:b5:4f:6e:49:8f:f0:9e:d3:84:22:94:69:ef:53:
96:14:db:78:c9:74:21:d7:0d:d4:f8:67:f0:06:15:fe:6d:e7:
c5:e7:23:2a:b1:ba:5a:16:7d:aa:74:39:f2:1e:ba:53:47:b3:
6b:fc:6b:cc:3d:27:33:ea:49:ca:60:b5:cd:2b:35:97:2d:4a:
50:85:1a:7b:ef:93:8c:74:b5:f5:02:c6:77:05:ee:0f:ab:04:
2f:9b:91:8e:ad:d0:c6:5e:68:ff:cb:7d:0c:b7:ef:fe:18:b2:
8f:9c:56:0c:e5:22:2f:38:ff:2a:f7:4c:0e:06:3c:d4:b7:55:
cf:ed:da:54:90:af:ee:19:44:63:a0:a2:13:d2:fc:d5:bb:48:
65:5a:94:9e:15:95:bc:81:a0:3c:32:c2:08:11:1f:7b:19:f5:
31:3f:47:73:b7:90:a5:e4:20:71:66:28:0b:a4:45:b8:06:f1:
c8:4e:64:f0:7e:ab:f9:63:18:82:75:97:27:fa:1d:ca:40:a0:
e2:08:40:99:01:aa:ff:b1:b1:28:94:83:cc:3b:f7:a6:13:78:
36:07:04:55:6d:8b:c1:61:36:8a:2f:71:bf:07:b5:60:36:fa:
9a:33:36:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 5 14:12:25 2023 by rpki-client on console-ams.rpki-client.org