Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/Y0RrZecTCNdUGO55K5lm_k3L-5Q.roa
File: Y0RrZecTCNdUGO55K5lm_k3L-5Q.roa (raw, json)
Hash identifier: 64ZmNYYQhwXSPjRA6etBo1uecllyBdQ1XW5SCbg8gH8=
Subject key identifier: 63:44:6B:65:E7:13:08:D7:54:18:EE:79:2B:99:66:FE:4D:CB:FB:94
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018A197F9024F27D165171680CD23EA40D98
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/Y0RrZecTCNdUGO55K5lm_k3L-5Q.roa
Signing time: Mon 21 Aug 2023 19:08:24 +0000
ROA not before: Mon 21 Aug 2023 19:08:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7029
IP address blocks: 195.138.108.0/24 maxlen: 24
195.138.107.0/24 maxlen: 24
195.138.111.0/24 maxlen: 24
195.138.112.0/24 maxlen: 24
195.138.114.0/24 maxlen: 24
195.138.118.0/24 maxlen: 24
185.180.145.0/24 maxlen: 24
195.138.120.0/24 maxlen: 24
185.15.136.0/23 maxlen: 23
91.201.107.0/24 maxlen: 24
185.243.140.0/22 maxlen: 24
193.30.30.0/24 maxlen: 24
194.180.238.0/24 maxlen: 24
195.149.127.0/24 maxlen: 24
89.32.126.0/24 maxlen: 24
193.46.220.0/24 maxlen: 24
45.149.160.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:19:7f:90:24:f2:7d:16:51:71:68:0c:d2:3e:a4:0d:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Aug 21 19:08:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=63446b65e71308d75418ee792b9966fe4dcbfb94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ea:bc:3c:4e:72:61:a9:b3:15:d7:28:93:23:
a0:42:df:29:49:67:0d:5c:bb:06:a5:9c:fe:92:ca:
48:46:de:47:e6:13:31:2f:ae:25:50:1a:45:94:37:
ce:9c:ec:fa:fb:9d:99:fe:be:ed:bf:ea:fd:88:52:
0f:aa:ef:ab:16:b4:aa:57:5f:b3:25:89:9c:d5:14:
4b:b2:42:a6:66:41:59:a6:b1:1d:f1:c6:a0:cb:3b:
23:29:e2:91:8e:6b:fa:1a:7b:92:ed:9b:97:97:3a:
ee:32:6c:64:8b:07:3e:7e:a1:0d:89:39:e6:fc:97:
72:40:0f:dd:41:92:88:b0:4b:a4:37:71:35:c2:34:
3f:25:b8:c2:ea:3f:7b:3f:87:20:24:8c:ab:16:6f:
dd:4d:b6:ca:df:c9:71:d1:92:68:63:61:e9:ce:7d:
34:1c:96:8b:ed:8d:4f:c2:76:25:16:43:c0:04:db:
c8:61:c9:99:69:c4:74:d5:ac:d1:52:5d:12:dd:3a:
ac:7d:54:01:2f:ef:07:64:2f:7f:a7:b5:0f:81:fd:
72:17:a8:84:13:3b:73:d2:54:df:c7:9f:0a:5b:f5:
fd:89:d4:16:04:79:fd:f6:ba:29:93:f9:d7:4a:8d:
ba:4e:52:96:b1:a7:da:2c:90:17:af:b1:12:bb:e2:
1b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:44:6B:65:E7:13:08:D7:54:18:EE:79:2B:99:66:FE:4D:CB:FB:94
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/Y0RrZecTCNdUGO55K5lm_k3L-5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.160.0/22
89.32.126.0/24
91.201.107.0/24
185.15.136.0/23
185.180.145.0/24
185.243.140.0/22
193.30.30.0/24
193.46.220.0/24
194.180.238.0/24
195.138.107.0-195.138.108.255
195.138.111.0-195.138.112.255
195.138.114.0/24
195.138.118.0/24
195.138.120.0/24
195.149.127.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:0d:4f:54:19:72:d5:5a:98:b2:5a:c0:9b:3f:fd:88:91:48:
f0:7e:68:d3:8f:88:5b:71:2f:89:4d:1b:c9:02:6c:69:6a:24:
20:7f:c1:30:52:ba:66:65:92:6d:c8:a4:fe:d9:3c:fa:9c:35:
f5:be:4c:84:0c:f6:53:4b:b5:f3:53:43:5e:c3:ef:cd:2f:de:
28:8c:2a:9e:9c:cd:a6:ae:e9:aa:c0:c0:ec:20:38:49:1c:57:
75:51:6d:a7:6d:54:11:ef:eb:db:cd:df:25:67:6f:b9:cf:5e:
6a:7c:7f:cd:54:45:b8:90:85:80:10:a4:50:04:af:20:ef:4e:
27:0b:57:22:3a:f7:9a:4c:f7:91:5b:03:7c:e8:49:20:3f:81:
e8:16:88:22:34:d8:b7:70:8c:7c:8f:09:77:cc:ea:ee:5e:1a:
b1:ff:2e:e1:f6:85:bb:e1:eb:73:6f:a4:24:4a:f2:2d:18:de:
4d:69:25:f9:24:58:3d:2b:dc:9c:30:c4:07:6c:d9:4c:eb:1d:
74:9e:77:96:d9:6c:df:70:ad:1f:a3:c5:7f:f7:bb:87:25:ad:
1c:93:f9:a6:61:eb:65:00:92:e0:94:54:e2:b3:10:e8:b4:cc:
ae:67:a7:13:0b:70:0c:d8:53:41:1f:90:af:05:3f:06:f3:5f:
9e:e3:9f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 22 12:13:03 2023 by rpki-client on console-fra.rpki-client.org