Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zlbcOfdKtHvIXh9rP3JNiiWGL4k.roa
File: zlbcOfdKtHvIXh9rP3JNiiWGL4k.roa (raw, json)
Hash identifier: N+lz90Rbbka/tExEgi8Gp7/ZK+iZGiBS4UrRvdXp9Z0=
Subject key identifier: CE:56:DC:39:F7:4A:B4:7B:C8:5E:1F:6B:3F:72:4D:8A:25:86:2F:89
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018C8D0C3E02CEBA5E1E79785CB268BB7452
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zlbcOfdKtHvIXh9rP3JNiiWGL4k.roa
Signing time: Thu 21 Dec 2023 15:43:58 +0000
ROA not before: Thu 21 Dec 2023 15:43:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 185.218.84.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
94.156.239.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
185.252.176.0/24 maxlen: 24
147.78.101.0/24 maxlen: 24
147.78.100.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
185.226.172.0/24 maxlen: 24
185.226.175.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
185.216.84.0/22 maxlen: 24
45.88.90.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
45.129.86.0/24 maxlen: 24
93.123.116.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8d:0c:3e:02:ce:ba:5e:1e:79:78:5c:b2:68:bb:74:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 21 15:43:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ce56dc39f74ab47bc85e1f6b3f724d8a25862f89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b3:ac:e2:a7:11:f3:bf:7c:58:40:66:57:02:
6e:51:ad:98:81:c9:66:c3:c1:c7:6b:52:e0:a3:5a:
1a:71:90:ad:4b:8e:a5:f3:58:26:be:6a:80:40:78:
94:f6:04:16:b4:db:41:62:4e:75:a9:d7:02:d3:da:
e2:67:a5:80:64:2a:9b:3a:26:35:07:3e:b1:e5:a8:
9f:03:48:56:df:9d:86:2f:80:69:5a:9c:e6:11:21:
11:ff:6e:0d:1b:29:fd:a5:82:75:37:5f:6c:1c:fa:
2e:6c:fb:81:a9:9a:2f:8b:34:eb:c8:6c:38:8e:dc:
f2:cf:fd:c6:a0:f6:43:c7:5a:6e:ff:9d:7f:65:32:
11:51:12:78:a5:ee:4f:c5:3a:73:a9:8c:3e:9c:46:
2f:f3:3e:fb:e4:8b:3e:b2:60:f0:69:f5:1a:6b:3f:
39:39:cd:e2:e7:18:5d:7d:ad:ee:42:47:f0:1a:ee:
9c:3a:c7:39:92:70:28:2e:1e:da:7e:77:f9:04:86:
19:a1:2c:5d:36:c7:ac:83:c2:0d:42:40:45:26:73:
4d:c9:ef:34:93:f0:63:91:df:b4:d1:4a:18:60:fd:
cd:3b:38:d3:c8:b4:44:b5:61:f4:50:5a:fd:9b:0f:
e2:e5:ba:7f:31:fe:d1:0b:04:72:cd:d1:d0:b2:80:
9e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:56:DC:39:F7:4A:B4:7B:C8:5E:1F:6B:3F:72:4D:8A:25:86:2F:89
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zlbcOfdKtHvIXh9rP3JNiiWGL4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.90.0/24
45.129.86.0/24
45.151.89.0/24
83.219.97.0/24
87.120.87.0/24
87.121.45.0/24
87.121.221.0/24
92.119.196.0/23
93.123.116.0/24
94.154.161.0-94.154.163.255
94.156.239.0/24
147.78.100.0-147.78.102.255
171.22.72.0/22
178.215.224.0/24
178.215.236.0/24
185.216.84.0/22
185.218.84.0/22
185.226.172.0/24
185.226.175.0/24
185.252.176.0/24
Signature Algorithm: sha256WithRSAEncryption
30:5a:d9:2c:d3:ae:3e:60:2a:32:30:be:5b:be:98:01:e7:53:
a8:3b:2f:5a:95:03:d9:2d:09:e4:6e:1d:75:7b:04:48:a1:70:
16:a9:89:59:e7:61:e0:9a:61:c5:10:de:6e:1f:0e:4e:0a:7f:
e0:a7:ef:f0:c6:a1:91:b3:5e:0a:15:c0:94:b8:c4:9a:b5:ce:
5d:4d:23:52:24:13:63:02:17:51:a8:f1:9b:fb:9f:25:72:92:
6b:53:0b:de:e1:ee:e0:63:18:ca:b6:6c:f5:73:40:2b:6c:d6:
ab:90:39:25:48:c7:11:34:8f:e0:a2:0b:ba:1a:62:8b:75:e3:
43:0e:1c:3c:dd:fb:88:8f:95:c4:a2:a7:0b:81:4f:ae:d7:a3:
fe:18:d8:7d:f2:b0:f9:19:f5:73:b9:2c:88:50:5e:23:3d:a6:
36:3f:88:68:cd:69:be:0b:65:b8:d5:e8:13:f2:67:da:7f:30:
02:c6:c9:7a:a1:69:71:00:82:c1:c3:19:54:18:9c:bc:18:fd:
62:f1:58:4d:73:82:b9:0a:e4:ca:71:49:2b:80:35:a0:67:5b:
47:f1:2d:f7:e1:f0:44:ef:fe:f3:84:0d:d2:61:cb:dc:2b:5f:
dd:a9:50:42:19:c4:e6:66:9f:d5:01:31:06:88:4e:53:28:f8:
31:1c:0e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 22 13:12:40 2023 by rpki-client on console-ams.rpki-client.org