Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/339lBBBHvEkr4gHvPMfv_NNLsO4.roa
File: 339lBBBHvEkr4gHvPMfv_NNLsO4.roa (raw, json)
Hash identifier: LrHZeAZj5eGigRMrFeTYBFR5XpiXjVkPZ7lwSwjBBG8=
Subject key identifier: DF:7F:65:04:10:47:BC:49:2B:E2:01:EF:3C:C7:EF:FC:D3:4B:B0:EE
Certificate issuer: /CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba
Certificate serial: 0186505BB55E011D2AC856026E7A1DFA9B81
Authority key identifier: 9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/339lBBBHvEkr4gHvPMfv_NNLsO4.roa
Signing time: Tue 14 Feb 2023 14:37:12 +0000
ROA not before: Tue 14 Feb 2023 14:37:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 45.94.136.0/24 maxlen: 24
45.94.137.0/24 maxlen: 24
45.94.138.0/24 maxlen: 24
45.94.139.0/24 maxlen: 24
5.253.184.0/23 maxlen: 23
185.114.204.0/24 maxlen: 24
5.253.187.0/24 maxlen: 24
193.135.220.0/22 maxlen: 22
88.214.0.0/24 maxlen: 24
88.214.1.0/24 maxlen: 24
88.214.2.0/24 maxlen: 24
88.214.3.0/24 maxlen: 24
88.218.196.0/22 maxlen: 22
185.219.160.0/24 maxlen: 24
185.219.163.0/24 maxlen: 24
45.81.161.0/24 maxlen: 24
45.81.162.0/24 maxlen: 24
45.81.163.0/24 maxlen: 24
45.130.33.0/24 maxlen: 24
45.130.34.0/23 maxlen: 23
193.111.184.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:50:5b:b5:5e:01:1d:2a:c8:56:02:6e:7a:1d:fa:9b:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba
Validity
Not Before: Feb 14 14:37:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=df7f65041047bc492be201ef3cc7effcd34bb0ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f1:e8:1a:19:7c:68:3a:a6:48:18:2b:da:61:
bd:53:3a:1c:a1:74:ea:fc:d1:84:46:9d:3c:c7:c2:
da:31:d5:11:94:0b:f2:c0:dd:4a:fe:a1:b7:38:d7:
61:bb:c8:da:ba:60:00:7a:d4:f8:c5:4e:5b:90:c8:
40:05:8e:2e:91:72:af:d1:f0:b6:be:15:23:9a:85:
d9:96:4b:f2:7f:c4:54:1b:0d:63:5a:65:c6:4d:9f:
1e:58:0d:30:b8:78:83:91:d8:08:3b:dc:13:35:48:
10:b7:18:2a:c4:9f:e9:0f:dc:21:ac:31:92:c8:8c:
6c:eb:12:4f:fc:83:78:6e:f9:b5:ef:99:4a:a8:8c:
f4:e4:14:a9:8f:e0:5a:a9:90:18:3a:39:4b:65:ae:
36:2d:3a:75:d7:f9:f4:59:ee:37:a3:3c:08:4a:bd:
e8:9f:ee:42:e2:d2:89:9f:59:99:c3:f2:0e:9f:ef:
74:53:e2:97:83:b6:8f:0c:a3:12:87:fa:c2:90:cc:
41:43:db:99:c0:34:7f:4d:bf:8a:44:b3:de:d8:aa:
ed:0a:27:29:69:17:80:b0:c7:57:97:43:6b:2d:f4:
1a:fe:74:01:42:66:6f:14:e4:66:47:55:df:6f:e0:
a1:47:01:67:17:8f:77:83:25:72:ec:de:64:5a:a9:
59:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:7F:65:04:10:47:BC:49:2B:E2:01:EF:3C:C7:EF:FC:D3:4B:B0:EE
X509v3 Authority Key Identifier:
keyid:9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/339lBBBHvEkr4gHvPMfv_NNLsO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.184.0/23
5.253.187.0/24
45.81.161.0-45.81.163.255
45.94.136.0/22
45.130.33.0-45.130.35.255
88.214.0.0/22
88.218.196.0/22
185.114.204.0/24
185.219.160.0/24
185.219.163.0/24
193.111.184.0/22
193.135.220.0/22
Signature Algorithm: sha256WithRSAEncryption
90:ca:22:14:34:af:e3:dd:97:04:a5:50:62:9c:bb:3b:20:71:
c4:dd:a4:e6:7a:2e:f9:c8:24:3f:cb:d8:b1:56:ea:ce:b0:a7:
c6:04:ed:67:04:30:63:87:75:5b:c9:5b:c6:ed:db:b0:7e:5b:
cf:bc:1c:75:be:d4:90:7b:95:fa:69:bf:30:44:2d:9e:55:20:
ef:ad:de:fb:fd:23:ba:43:af:d4:28:44:22:35:cd:5d:e0:3a:
d1:f1:55:f4:f5:07:c2:06:58:be:dd:ed:21:83:dc:c0:04:3f:
97:60:69:58:0c:66:a2:62:cd:0f:69:f9:8e:0f:b8:25:77:97:
84:1e:6b:e2:a8:3d:29:2c:14:7d:8d:e5:11:06:4e:4f:d7:58:
28:3e:f4:c8:eb:03:2e:66:9d:dc:af:99:d3:7e:67:fe:34:9b:
bb:ef:4a:c7:ae:a7:54:8c:19:33:d3:28:bf:1f:c2:7b:b5:dc:
b4:e7:b8:29:73:c9:99:74:44:07:24:4c:43:18:0e:72:99:a5:
07:1c:08:62:0d:19:5e:76:ee:aa:06:64:06:99:17:57:b9:30:
2d:54:1d:0b:20:2e:f2:50:0a:1b:e2:25:6a:92:11:c2:53:28:
0a:a7:c5:df:f7:95:13:f0:f9:dc:f9:f3:5a:5e:74:ba:5f:66:
b9:d8:d5:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:39 2023 by rpki-client on console-ams.rpki-client.org