Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/y9JacihpK-e9ybXkKS6PVHRm78g.roa
File: y9JacihpK-e9ybXkKS6PVHRm78g.roa (raw, json)
Hash identifier: y3suJqxrY0eq+zAAnimbR/+4kbfnr3uDo98qWZhqMXU=
Subject key identifier: CB:D2:5A:72:28:69:2B:E7:BD:C9:B5:E4:29:2E:8F:54:74:66:EF:C8
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018BECBB557530A2988588D33946B7F8F688
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/y9JacihpK-e9ybXkKS6PVHRm78g.roa
Signing time: Mon 20 Nov 2023 12:36:21 +0000
ROA not before: Mon 20 Nov 2023 12:36:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61302
IP address blocks: 45.9.156.0/24 maxlen: 24
147.78.100.0/23 maxlen: 24
92.249.48.0/24 maxlen: 24
194.180.39.0/24 maxlen: 24
45.139.104.0/24 maxlen: 24
82.115.210.0/24 maxlen: 24
45.129.84.0/24 maxlen: 24
45.129.86.0/24 maxlen: 24
94.154.172.0/24 maxlen: 24
193.35.19.0/24 maxlen: 24
37.139.130.0/24 maxlen: 24
171.22.31.0/24 maxlen: 24
81.161.230.0/24 maxlen: 24
87.121.124.0/23 maxlen: 24
81.161.239.0/24 maxlen: 24
178.215.226.0/24 maxlen: 24
91.200.192.0/22 maxlen: 24
94.156.250.0/24 maxlen: 24
178.215.238.0/24 maxlen: 24
94.156.248.0/24 maxlen: 24
87.121.162.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
171.22.17.0/24 maxlen: 24
171.22.18.0/24 maxlen: 24
79.110.61.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
193.25.216.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ec:bb:55:75:30:a2:98:85:88:d3:39:46:b7:f8:f6:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 20 12:36:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cbd25a7228692be7bdc9b5e4292e8f547466efc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a8:c3:cb:64:75:cb:d2:58:6b:53:c0:ea:a0:
d2:f2:bd:d7:dc:72:64:b8:5d:e9:d7:99:8e:12:93:
f8:7b:02:4e:c3:5b:74:e5:6b:42:79:f5:a8:05:ce:
33:b0:13:90:2e:91:c1:bd:ef:c5:25:bc:32:25:fb:
65:40:df:64:58:a3:de:ef:32:47:78:c9:84:40:2e:
53:43:fe:b3:0f:75:78:64:a2:33:ed:e2:16:d9:96:
80:42:13:0f:cd:56:7a:fb:4c:16:cb:fb:29:27:7a:
42:70:51:09:4e:f0:20:ff:b5:06:74:e7:80:16:71:
a7:76:1e:f5:04:46:3e:6c:f8:13:14:d4:f9:07:83:
54:7d:2b:45:76:fb:3a:c5:d9:7e:9c:ba:a6:33:3f:
63:c8:de:aa:53:b8:21:d2:68:9e:03:f0:d3:86:18:
1d:44:07:ed:4b:5a:d3:70:bc:ef:68:d4:3d:ac:6e:
e9:52:1b:d0:2b:07:2d:9a:ea:bc:a9:d2:f7:ba:18:
e3:c9:f1:9c:83:23:ce:68:84:87:38:cb:87:22:62:
4e:e2:ea:03:6f:72:24:d1:24:0d:94:fd:e3:85:7c:
8b:e4:03:13:d2:ed:4e:79:6b:4a:85:e8:ab:2b:76:
34:fd:da:98:ed:0a:2a:63:ea:dd:fd:95:e5:b8:57:
83:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D2:5A:72:28:69:2B:E7:BD:C9:B5:E4:29:2E:8F:54:74:66:EF:C8
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/y9JacihpK-e9ybXkKS6PVHRm78g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.130.0/24
45.9.156.0/24
45.129.84.0/24
45.129.86.0/24
45.139.104.0/24
45.141.158.0/24
79.110.61.0/24
81.161.230.0/24
81.161.239.0/24
82.115.210.0/24
83.219.97.0/24
87.121.124.0/23
87.121.162.0/24
91.200.192.0/22
92.249.48.0/24
94.154.172.0/24
94.156.248.0/24
94.156.250.0/24
147.78.100.0/23
171.22.17.0-171.22.18.255
171.22.31.0/24
178.215.226.0/24
178.215.238.0/24
193.25.216.0/24
193.35.19.0/24
194.180.39.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:61:ba:b1:ba:0f:e5:46:d2:01:06:72:0b:20:89:41:e1:a8:
53:df:15:c4:3a:f0:3d:3e:4a:c5:9d:db:b2:bb:a4:1d:5e:70:
64:f8:fc:34:40:b7:94:61:24:b2:d2:45:fc:d8:03:bf:0c:e9:
e9:e5:76:fd:16:43:09:51:0f:3c:ab:d4:01:2a:79:ae:a2:d5:
50:b3:8a:c6:95:2b:c6:5f:52:78:b4:b7:c2:fb:89:d2:40:23:
95:79:a8:20:9a:12:b5:fb:ec:f7:b9:12:12:68:a3:ce:42:55:
6d:91:6e:22:e9:09:7b:ec:e2:69:f1:3a:02:e1:af:68:4a:28:
9c:ee:00:dd:88:79:dd:bd:0b:cb:90:d1:1e:42:56:12:47:60:
2f:97:b2:7f:ca:b3:1c:49:f1:64:8b:74:c3:c8:35:8c:fa:d8:
34:ab:32:a1:37:f8:c2:06:29:64:0d:36:1f:27:68:dd:b2:8e:
9c:ba:91:b9:26:94:74:73:34:31:5a:d9:47:fa:b4:c4:cb:29:
6b:6b:5e:96:c6:f9:d7:f6:bc:b7:42:87:c4:b4:5d:e5:75:30:
a6:ac:78:ca:ae:e5:38:71:fc:1c:07:39:04:5b:79:16:90:fb:
63:2e:20:2d:f8:39:b3:e2:6a:9d:5c:52:f7:ca:16:5f:b1:09:
5d:fa:6b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 27 07:55:46 2023 by rpki-client on console-ams.rpki-client.org