Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/7RGwojpIvxN_i95fJvu90FD9gNw.roa
File: 7RGwojpIvxN_i95fJvu90FD9gNw.roa (raw, json)
Hash identifier: AgoWgGTzx2O5tZiykYeW6GzYwluA0vExFrPHyhHPsq8=
Subject key identifier: ED:11:B0:A2:3A:48:BF:13:7F:8B:DE:5F:26:FB:BD:D0:50:FD:80:DC
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018B86BE3C005BB67D61C3BD5BCEFCA284C7
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/7RGwojpIvxN_i95fJvu90FD9gNw.roa
Signing time: Tue 31 Oct 2023 17:18:15 +0000
ROA not before: Tue 31 Oct 2023 17:18:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7029
IP address blocks: 185.255.99.0/24 maxlen: 24
195.138.107.0/24 maxlen: 24
195.138.111.0/24 maxlen: 24
195.138.112.0/24 maxlen: 24
195.138.114.0/24 maxlen: 24
195.138.118.0/24 maxlen: 24
195.138.120.0/24 maxlen: 24
185.15.136.0/23 maxlen: 24
185.243.140.0/22 maxlen: 24
194.180.238.0/24 maxlen: 24
195.149.127.0/24 maxlen: 24
89.32.126.0/24 maxlen: 24
92.118.108.0/24 maxlen: 24
45.149.160.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:86:be:3c:00:5b:b6:7d:61:c3:bd:5b:ce:fc:a2:84:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Oct 31 17:18:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed11b0a23a48bf137f8bde5f26fbbdd050fd80dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d1:fb:39:b0:a3:9c:42:22:d9:bf:6c:5a:73:
28:73:28:5c:85:4c:d6:7f:e2:20:37:80:81:38:00:
dc:ad:b1:51:75:a0:f5:60:71:1e:06:c0:d4:93:b8:
38:7e:1c:02:16:c5:19:de:f5:b8:b2:00:e5:32:81:
be:a3:a4:1d:6a:26:eb:a7:61:3f:3d:6c:ef:0b:bf:
7e:ce:31:db:a3:dd:6e:0d:7d:ff:9d:be:f0:e8:e8:
72:30:8d:7a:a0:f5:21:0c:e8:54:31:e5:d8:af:52:
fd:84:df:df:3e:16:a3:a0:e4:de:19:cb:78:2f:9a:
63:41:02:68:cb:2c:b9:9c:4e:01:d3:77:11:87:b3:
e2:f4:16:86:73:14:79:97:e7:33:05:07:00:13:f1:
55:f8:a0:ea:cc:e6:c7:77:c8:07:e8:c4:d9:46:f3:
a4:b4:b2:00:04:d3:0e:d3:ce:82:3a:a4:56:ec:de:
0b:9d:cf:be:81:cb:37:7e:65:dd:2d:20:ee:4e:64:
39:0e:af:b8:46:97:61:6e:27:4d:2e:1c:d8:da:53:
00:39:e5:b6:70:68:ed:ff:7b:22:eb:f1:c2:23:e4:
61:e5:5b:e6:d7:b6:33:a3:94:cb:88:1f:2c:38:0b:
3d:1a:11:9c:2f:78:53:2f:5f:eb:ac:86:6e:fb:4a:
1e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:11:B0:A2:3A:48:BF:13:7F:8B:DE:5F:26:FB:BD:D0:50:FD:80:DC
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/7RGwojpIvxN_i95fJvu90FD9gNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.160.0/22
89.32.126.0/24
92.118.108.0/24
185.15.136.0/23
185.243.140.0/22
185.255.99.0/24
194.180.238.0/24
195.138.107.0/24
195.138.111.0-195.138.112.255
195.138.114.0/24
195.138.118.0/24
195.138.120.0/24
195.149.127.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:2b:f6:d6:11:46:be:a0:e0:54:cc:39:81:6e:31:b6:9a:5a:
35:ed:01:a1:2e:97:8e:5a:6a:94:50:43:7e:3c:12:05:1b:f5:
60:1c:04:bc:25:91:b3:cd:9e:4b:66:6a:0f:37:c7:2a:74:63:
10:48:ce:13:84:f7:1a:b8:92:d2:23:24:f1:fe:02:b8:3a:93:
08:96:cd:8c:1a:dc:f5:ff:89:03:47:01:e1:bb:62:4f:94:db:
fc:6c:dc:e2:86:a7:d0:17:fb:dc:47:c2:7d:cf:e8:99:2d:15:
d6:ab:bb:3b:0a:27:13:54:30:55:93:58:7b:2c:79:71:e1:fd:
a4:61:11:82:c6:a2:4d:4b:4e:e9:57:71:e8:5a:07:51:56:af:
cb:a5:92:0a:d4:45:c3:ca:dd:27:89:0b:5d:34:17:1d:75:41:
5d:cd:0e:a0:97:29:0b:a1:23:99:27:f0:17:df:5f:47:a3:25:
54:d4:1d:2d:b8:54:b4:38:8a:cc:73:4f:25:ce:a7:ed:a4:52:
ad:1a:b6:a2:c4:ff:f7:d2:1e:48:2c:b9:e1:26:15:d5:e5:2f:
e2:83:78:15:62:8a:4a:53:61:5a:76:23:76:d5:ce:79:01:62:
be:3f:94:34:00:e0:3e:91:db:ae:4f:15:58:e4:0c:8b:74:74:
a9:1f:44:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 4 17:57:18 2023 by rpki-client on console-fra.rpki-client.org