Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/yWUG5ES51f8GRdBeA1YoiwLUXrM.roa
File: yWUG5ES51f8GRdBeA1YoiwLUXrM.roa (raw, json)
Hash identifier: UGuwf3mj6AutmQqYXagwiUBNkdYeTH/G3OXbhCeYD3Q=
Subject key identifier: C9:65:06:E4:44:B9:D5:FF:06:45:D0:5E:03:56:28:8B:02:D4:5E:B3
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018C19C83A76A9B4B4C073261EA6788F01FF
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/yWUG5ES51f8GRdBeA1YoiwLUXrM.roa
Signing time: Wed 29 Nov 2023 06:33:21 +0000
ROA not before: Wed 29 Nov 2023 06:33:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8100
IP address blocks: 94.156.2.0/24 maxlen: 24
91.92.16.0/24 maxlen: 24
91.92.27.0/24 maxlen: 24
193.58.121.0/24 maxlen: 24
193.58.123.0/24 maxlen: 24
87.121.38.0/24 maxlen: 24
94.156.152.0/24 maxlen: 24
45.8.92.0/24 maxlen: 24
94.156.154.0/23 maxlen: 24
87.121.60.0/22 maxlen: 24
91.92.67.0/24 maxlen: 24
45.139.123.0/24 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.173.0/24 maxlen: 24
212.87.205.0/24 maxlen: 24
94.156.237.0/24 maxlen: 24
94.156.238.0/24 maxlen: 24
87.121.146.0/23 maxlen: 24
93.123.76.0/22 maxlen: 24
141.98.5.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
94.156.178.0/24 maxlen: 24
193.47.62.0/24 maxlen: 24
94.156.180.0/23 maxlen: 24
87.121.104.0/24 maxlen: 24
93.123.24.0/24 maxlen: 24
87.121.103.0/24 maxlen: 24
93.123.26.0/23 maxlen: 24
87.121.114.0/23 maxlen: 24
93.123.112.0/22 maxlen: 24
5.253.58.0/23 maxlen: 24
193.25.219.0/24 maxlen: 24
5.253.56.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:19:c8:3a:76:a9:b4:b4:c0:73:26:1e:a6:78:8f:01:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 29 06:33:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c96506e444b9d5ff0645d05e0356288b02d45eb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:bc:16:06:fb:35:4a:9d:6a:4d:63:c6:8a:c9:
c6:46:4d:d8:78:c2:5b:e2:9d:eb:a6:37:27:c7:5f:
6a:66:f4:07:f5:ea:73:14:21:c8:e6:11:82:a0:9a:
04:15:54:43:0f:3c:bb:f2:85:6c:07:e2:eb:47:69:
26:5f:32:95:fb:ee:d8:d2:6e:e5:62:84:12:4b:0f:
eb:b3:9a:ef:2b:e9:8b:e7:6d:80:c7:cf:92:2e:d7:
ab:9f:7b:c5:ad:73:d3:93:e3:e7:01:0c:67:53:9d:
0c:3b:6b:c5:27:dc:24:ce:c4:9f:23:de:86:3c:1e:
d7:44:65:48:e3:4b:b0:6f:4f:5b:d9:7e:ef:a8:ed:
a2:16:19:fa:46:2f:b8:fb:f6:44:81:17:48:73:2f:
71:8f:90:f9:f6:f2:e5:8d:ab:d8:b9:af:0d:a9:42:
f8:af:ff:21:28:98:95:ce:12:a8:dc:a8:d3:cb:9a:
5a:6b:48:89:7f:62:17:8a:dd:ca:97:02:cc:ec:0b:
f7:ed:38:fa:77:d3:70:60:9d:27:56:5d:5c:26:33:
a5:a9:ab:ca:07:1a:bd:e4:15:66:4e:96:b7:cb:36:
83:9a:bf:b0:5e:97:cd:82:4c:59:f5:54:b9:34:78:
7c:65:6f:d3:54:88:6e:8e:83:ee:7f:60:c0:81:94:
d3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:65:06:E4:44:B9:D5:FF:06:45:D0:5E:03:56:28:8B:02:D4:5E:B3
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/yWUG5ES51f8GRdBeA1YoiwLUXrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.56.0/22
45.8.92.0/24
45.139.123.0/24
87.121.38.0/24
87.121.60.0/22
87.121.103.0-87.121.104.255
87.121.114.0/23
87.121.146.0/23
91.92.16.0/24
91.92.27.0/24
91.92.67.0/24
93.123.24.0/24
93.123.26.0/23
93.123.76.0/22
93.123.112.0/22
94.154.160.0/23
94.154.173.0/24
94.156.2.0/24
94.156.152.0/24
94.156.154.0/23
94.156.178.0/24
94.156.180.0/23
94.156.237.0-94.156.238.255
141.98.5.0/24
185.252.177.0/24
193.25.219.0/24
193.47.62.0/24
193.58.121.0/24
193.58.123.0/24
212.87.205.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:70:f8:e3:55:61:a7:21:d9:94:72:6a:78:03:50:37:48:0a:
e4:ba:41:18:89:20:9a:55:d8:38:69:60:8a:53:b2:d3:67:ec:
33:8e:ba:26:a8:c5:aa:e8:10:a6:2c:97:a4:1e:f7:9d:d9:60:
ea:25:b9:af:28:23:65:6e:53:c3:40:e4:d3:e5:ec:9e:b6:8f:
ad:3a:4f:b3:de:ad:cd:4e:8e:9b:e1:d9:b0:6a:73:11:80:ed:
af:99:cd:86:71:d3:47:21:27:c9:1e:76:d7:0c:80:8e:80:b0:
15:35:92:8c:ae:e0:33:60:3f:47:d5:05:d4:b3:ea:21:6b:a7:
12:7c:02:cb:53:3a:76:f8:b5:5b:58:fd:22:e4:67:4f:83:96:
cb:76:e2:e5:89:04:aa:85:74:42:b7:fc:1c:83:1d:3f:ac:c5:
c0:f5:39:a1:75:bf:14:ce:ef:c0:36:4e:4b:49:89:7a:37:4f:
57:ac:2a:dd:ef:1e:20:eb:16:9d:be:e2:93:06:e8:55:7f:ee:
48:c8:9a:5e:f5:06:44:fd:d7:ae:59:ef:3a:cb:25:77:2b:e3:
48:46:d5:2c:98:83:3b:e0:d6:e1:76:4e:d4:89:f2:e2:80:63:
40:15:65:df:b8:d7:88:5e:60:f8:c9:5e:e3:17:0b:1e:94:b7:
b7:a0:63:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 29 09:35:40 2023 by rpki-client on console-ams.rpki-client.org