Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/_gEW7TTdWT8xhJS_jg2Cny0OgXw.roa
File: _gEW7TTdWT8xhJS_jg2Cny0OgXw.roa (raw, json)
Hash identifier: YTSpw/eFbRrqK/oA3s4i5+lKrwDtQXpJR23LzpQZ0uU=
Subject key identifier: FE:01:16:ED:34:DD:59:3F:31:84:94:BF:8E:0D:82:9F:2D:0E:81:7C
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018A1D0F0EE49D27BD04C7C963219B0DD1F5
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/_gEW7TTdWT8xhJS_jg2Cny0OgXw.roa
Signing time: Tue 22 Aug 2023 11:44:00 +0000
ROA not before: Tue 22 Aug 2023 11:44:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7029
IP address blocks: 195.138.108.0/24 maxlen: 24
195.138.107.0/24 maxlen: 24
195.138.111.0/24 maxlen: 24
195.138.112.0/24 maxlen: 24
195.138.114.0/24 maxlen: 24
195.138.118.0/24 maxlen: 24
185.180.145.0/24 maxlen: 24
195.138.120.0/24 maxlen: 24
185.15.136.0/23 maxlen: 24
91.201.107.0/24 maxlen: 24
185.243.140.0/22 maxlen: 24
193.30.30.0/24 maxlen: 24
194.180.238.0/24 maxlen: 24
195.149.127.0/24 maxlen: 24
89.32.126.0/24 maxlen: 24
193.46.220.0/24 maxlen: 24
45.149.160.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1d:0f:0e:e4:9d:27:bd:04:c7:c9:63:21:9b:0d:d1:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Aug 22 11:44:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe0116ed34dd593f318494bf8e0d829f2d0e817c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b3:41:39:26:df:71:b6:0b:2b:1f:37:fa:78:
d7:b7:bc:ed:a8:33:83:75:83:61:65:76:4a:bf:26:
ea:7f:4a:6f:61:1e:62:67:8c:d2:ea:cc:0e:1e:b4:
58:8d:db:4f:32:70:c1:2d:e1:9f:52:68:48:26:0a:
27:85:f9:db:9a:c1:62:98:92:d5:92:2a:c2:a6:90:
c3:bf:17:5d:59:69:0f:14:12:7b:8e:e3:a2:e4:13:
3d:78:b0:db:f5:4a:c0:7b:10:7e:31:95:a7:61:27:
86:dc:cb:5e:49:f8:bd:28:02:8f:47:a3:69:b1:00:
b8:02:8f:c9:c5:b1:4d:cc:3d:6e:29:13:7c:68:2b:
1f:ca:80:12:80:16:c9:c2:bd:21:88:3e:d7:c5:32:
21:1c:3e:53:68:60:64:3f:e4:25:e2:1c:b0:76:21:
80:0a:c4:d4:73:4a:6a:ce:c3:cb:7b:c3:15:06:04:
cb:31:43:14:f1:56:50:cc:2d:63:f8:ea:c2:e3:c3:
95:ac:20:0d:67:b7:b7:d0:0b:6b:cc:09:20:c6:78:
db:ba:0b:30:40:d2:7a:12:48:f4:63:db:91:6f:d2:
d1:d2:34:f6:0d:97:58:6d:58:b0:a1:a0:58:54:21:
68:0d:bf:16:0d:35:66:e8:5d:f9:dd:f0:ca:0f:ae:
19:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:01:16:ED:34:DD:59:3F:31:84:94:BF:8E:0D:82:9F:2D:0E:81:7C
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/_gEW7TTdWT8xhJS_jg2Cny0OgXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.160.0/22
89.32.126.0/24
91.201.107.0/24
185.15.136.0/23
185.180.145.0/24
185.243.140.0/22
193.30.30.0/24
193.46.220.0/24
194.180.238.0/24
195.138.107.0-195.138.108.255
195.138.111.0-195.138.112.255
195.138.114.0/24
195.138.118.0/24
195.138.120.0/24
195.149.127.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:e8:ec:aa:3a:41:49:e8:31:92:d1:b2:be:04:46:56:7f:fb:
7a:aa:ae:69:c6:39:ea:4a:d5:8d:ae:19:03:34:c1:82:92:92:
02:79:6e:24:50:3c:90:40:99:e9:6e:9b:f9:9c:0b:54:84:42:
08:91:3a:2e:34:90:ac:36:bd:41:4e:e5:b9:a7:1b:08:b4:62:
55:c7:0a:e9:46:1d:8c:98:24:60:72:20:7d:cb:0f:32:70:bc:
d6:a9:8d:f5:9b:45:c7:de:5c:2a:e4:02:88:62:77:c7:5e:4d:
8e:52:83:89:23:1b:84:4b:e3:bf:b7:82:fa:78:7e:e7:b3:9a:
3d:6c:f7:02:34:64:6b:56:d0:c4:3b:b9:6a:11:31:65:f6:c7:
32:8b:3d:dc:4f:c8:c6:0e:ec:eb:d8:41:76:81:35:69:93:8d:
cb:00:ab:53:27:94:c1:69:9e:7b:3d:22:4d:26:8e:e7:9f:19:
21:ec:b4:38:c6:63:6a:e2:19:7f:bc:37:9b:93:02:3c:de:88:
be:3b:86:72:d5:fb:bb:cc:f1:9e:93:b2:90:48:a5:67:b0:bc:
d2:39:a5:70:a7:22:0a:ce:b6:63:99:ba:0f:fa:93:88:fa:ab:
20:12:04:d9:f5:d3:1b:e1:4a:e4:c8:fb:f1:24:5c:50:37:48:
f4:81:c9:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 5 17:51:02 2023 by rpki-client on console-fra.rpki-client.org