Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/1Q-B6YCr5fdx33XsrnpVaH3xaVA.roa
File: 1Q-B6YCr5fdx33XsrnpVaH3xaVA.roa (raw, json)
Hash identifier: x9N9SJNk250774GccRKQ7ZcBcCj+aLeIG5pzmT/eOgk=
Subject key identifier: D5:0F:81:E9:80:AB:E5:F7:71:DF:75:EC:AE:7A:55:68:7D:F1:69:50
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 0189890BA8B936FB8EDCD2E32E27A1EC6E49
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/1Q-B6YCr5fdx33XsrnpVaH3xaVA.roa
Signing time: Mon 24 Jul 2023 17:56:29 +0000
ROA not before: Mon 24 Jul 2023 17:56:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 176.96.93.0/24 maxlen: 24
46.151.32.0/24 maxlen: 24
46.151.34.0/24 maxlen: 24
46.151.35.0/24 maxlen: 24
46.151.33.0/24 maxlen: 24
77.36.57.0/24 maxlen: 24
77.36.60.0/24 maxlen: 24
77.36.65.0/24 maxlen: 24
93.120.120.0/22 maxlen: 22
77.36.68.0/22 maxlen: 22
176.96.48.0/22 maxlen: 22
77.36.4.0/22 maxlen: 22
91.239.222.0/23 maxlen: 23
188.191.252.0/22 maxlen: 22
178.159.147.0/24 maxlen: 24
93.120.12.0/22 maxlen: 22
93.120.38.0/24 maxlen: 24
93.120.36.0/24 maxlen: 24
93.120.37.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:89:0b:a8:b9:36:fb:8e:dc:d2:e3:2e:27:a1:ec:6e:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Jul 24 17:56:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d50f81e980abe5f771df75ecae7a55687df16950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:49:61:23:fe:10:c3:28:79:46:04:92:b2:df:
e9:3e:a1:8c:18:35:64:2b:24:74:ad:d5:dd:ec:06:
aa:c3:4e:73:c2:4d:06:1c:87:51:3d:8a:a4:7b:62:
bf:67:3a:01:b7:66:61:16:59:c5:35:00:e8:0c:82:
71:48:96:c9:05:a2:58:f6:8b:19:c4:89:5b:f0:36:
d6:68:e9:05:53:68:cf:b4:2d:d9:77:1b:1b:8c:1b:
e9:f9:be:f5:eb:41:eb:ca:f7:26:36:c8:94:55:c9:
a8:e9:da:e5:01:21:2c:d9:3b:11:79:06:fa:87:77:
c4:d7:74:8e:d2:f9:84:b6:c1:a5:7a:f3:12:29:1c:
eb:68:8d:9f:7c:0c:0c:17:4f:35:78:df:69:7a:96:
eb:70:aa:3c:c2:fd:8b:89:7f:b2:77:53:0a:bc:b8:
9f:dc:ee:61:a7:a7:4e:27:dc:54:8e:16:d8:c0:d7:
74:d1:aa:cf:66:95:ed:04:d7:d1:b8:0c:75:59:cb:
be:ca:9d:81:d8:ee:f1:13:cf:de:56:8b:f1:5f:de:
8d:7a:0e:1c:7b:bb:21:28:04:63:17:97:fc:5c:bd:
67:fd:76:f5:ba:c5:96:f7:0f:dc:e1:65:b0:39:14:
9a:6e:91:19:dd:cb:79:20:08:70:70:69:0e:30:23:
c1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:0F:81:E9:80:AB:E5:F7:71:DF:75:EC:AE:7A:55:68:7D:F1:69:50
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/1Q-B6YCr5fdx33XsrnpVaH3xaVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.151.32.0/22
77.36.4.0/22
77.36.57.0/24
77.36.60.0/24
77.36.65.0/24
77.36.68.0/22
91.239.222.0/23
93.120.12.0/22
93.120.36.0-93.120.38.255
93.120.120.0/22
176.96.48.0/22
176.96.93.0/24
178.159.147.0/24
188.191.252.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:d6:51:be:59:1e:62:ef:38:9d:db:eb:d3:2b:8c:ae:c9:8a:
71:36:01:d8:f8:c9:f0:a4:f6:5d:2d:79:b7:26:bf:a4:93:a6:
f3:83:83:f5:d3:4d:dc:bf:2e:4a:a7:eb:f5:ed:ec:00:87:f9:
92:c8:05:36:db:2d:2f:a2:8f:5a:14:b7:7b:1a:f5:fc:0e:ba:
1c:15:cc:e8:77:8c:8b:47:36:45:06:4c:0b:f4:0d:79:b1:38:
03:e4:4d:2b:2e:a6:84:54:c6:60:a2:99:94:ae:1c:18:94:bb:
ff:7f:49:b6:2e:db:68:6f:64:0c:0e:03:24:dd:ae:5c:c4:10:
e8:c5:97:f5:23:86:c1:40:4e:98:bd:24:a9:c0:45:62:1a:55:
8f:3c:31:9e:77:a2:55:4d:63:9f:b2:d8:f9:ee:4d:c3:51:2a:
f2:a4:e1:5a:b3:63:fe:1b:71:9e:c2:6f:38:3c:19:1c:e2:cb:
e7:5d:a7:84:f2:fb:17:98:db:6c:76:99:55:05:65:07:5f:a9:
9c:82:42:8e:61:4b:c1:f8:58:24:d5:08:a3:a7:56:d2:b1:9e:
15:11:56:d1:b7:34:1d:f3:39:4c:14:4f:ca:26:70:0c:7e:10:
e6:d1:a8:8d:4b:88:55:75:87:f3:4d:f9:54:9e:c7:65:4c:22:
d4:97:87:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 25 18:20:02 2023 by rpki-client on console-ams.rpki-client.org