Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/9YqPryQnuMCTzQNR45XUaQDhjv0.roa
File: 9YqPryQnuMCTzQNR45XUaQDhjv0.roa (raw, json)
Hash identifier: oiEDgG2aC+9eu9f3dhkuGTaJjbf2ZwwqMBWmQguC7M8=
Subject key identifier: F5:8A:8F:AF:24:27:B8:C0:93:CD:03:51:E3:95:D4:69:00:E1:8E:FD
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 01895830FA4F8906DE7B6D822CC56022EA49
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/9YqPryQnuMCTzQNR45XUaQDhjv0.roa
Signing time: Sat 15 Jul 2023 06:15:51 +0000
ROA not before: Sat 15 Jul 2023 06:15:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 195.180.128.0/22 maxlen: 24
194.163.68.0/24 maxlen: 24
194.233.151.0/24 maxlen: 24
194.233.148.0/24 maxlen: 24
194.233.149.0/24 maxlen: 24
194.64.89.0/24 maxlen: 24
194.163.92.0/24 maxlen: 24
195.252.175.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:58:30:fa:4f:89:06:de:7b:6d:82:2c:c5:60:22:ea:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Jul 15 06:15:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f58a8faf2427b8c093cd0351e395d46900e18efd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:84:5e:5b:b2:8b:f3:74:2b:b6:3a:e6:f2:a0:
14:42:01:a6:dd:45:8b:76:9a:62:bc:3a:ed:63:c2:
b4:32:9c:bd:24:ee:77:ed:db:34:ac:33:d0:18:fa:
72:8e:49:a0:54:53:76:5f:e8:7b:cb:66:1a:2c:36:
66:67:05:49:a8:6d:3c:7b:b8:d5:ec:6d:b9:a3:99:
94:e2:29:ca:97:f4:60:39:c3:fd:54:30:cd:d1:06:
d2:2d:fc:de:43:cc:b1:a0:ff:cf:e9:bc:0a:92:82:
4a:35:d3:52:74:d7:1e:52:a7:7f:c7:d4:23:a9:3d:
c3:8d:f2:7b:7c:0c:08:ad:4f:09:fe:1e:4f:51:29:
46:d0:e2:1e:36:9f:d1:5b:88:7e:be:df:7b:44:12:
99:e9:30:e1:55:08:a3:4e:00:66:a8:9e:26:7f:ba:
8f:78:45:5a:a5:c5:44:f6:2a:ae:71:b2:b2:39:c4:
1a:13:8a:59:88:ea:de:7a:cf:49:f7:30:c1:05:24:
13:e3:98:ec:57:d5:2c:7f:31:98:e1:0c:06:f5:b3:
d7:f1:16:17:22:4e:1d:99:0c:ce:7d:3d:5d:3e:e0:
67:46:c1:34:07:72:11:ae:89:25:e7:fe:2e:58:3f:
0a:22:6a:d1:4e:b6:b5:8d:85:0b:8d:b2:07:7f:24:
51:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:8A:8F:AF:24:27:B8:C0:93:CD:03:51:E3:95:D4:69:00:E1:8E:FD
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/9YqPryQnuMCTzQNR45XUaQDhjv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.64.89.0/24
194.163.68.0/24
194.163.92.0/24
194.233.148.0/23
194.233.151.0/24
195.180.128.0/22
195.252.175.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:45:ee:ee:af:57:db:28:fa:13:0f:ff:0e:91:37:9a:3a:40:
43:2d:73:28:7b:0b:2e:92:75:7a:a8:08:91:fb:1d:2d:d2:0d:
48:ca:26:6b:0c:98:ca:d3:b6:11:e3:81:bb:51:14:4e:e7:ed:
5a:97:ee:99:64:3d:fa:23:ce:ec:b0:3c:5d:d9:44:00:e7:8f:
70:04:40:e1:11:f2:e3:49:2d:1a:a6:f2:1d:f9:33:a3:05:a8:
7b:d3:10:bf:0b:4a:7a:f5:be:45:c9:b5:a5:26:fb:51:bf:e2:
b4:6c:07:4c:6a:f0:8f:88:3c:57:0c:b2:0c:4d:e5:a3:27:6e:
2c:91:04:11:15:20:d2:70:13:46:59:82:e8:b5:8f:33:99:a5:
d5:bb:e6:0a:58:54:d5:46:9b:23:83:0d:5a:07:25:f7:ae:c5:
81:0b:ea:db:a1:ee:3f:1e:07:46:e4:ef:3c:3c:4e:aa:7d:0e:
46:f1:67:7d:d1:10:e2:7f:f4:90:c0:b1:52:1b:bf:9a:14:10:
43:9f:95:37:05:73:a3:34:b6:83:7a:84:8d:6a:fe:6b:8f:15:
8a:12:57:9d:bb:02:4f:dc:48:73:e3:4e:dc:21:00:d6:04:18:
62:e0:45:17:52:6d:32:07:ef:f8:bf:9d:55:80:0d:54:50:ac:
1b:2a:1b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 25 07:37:22 2023 by rpki-client on console-ams.rpki-client.org