Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/shhUqWLsVEHa08ifORV96CsobYc.roa
File: shhUqWLsVEHa08ifORV96CsobYc.roa (raw, json)
Hash identifier: 1JEd/rnQhtDGnG7qsVWoeqmwmPQ5F2MAO+gC8mqBggM=
Subject key identifier: B2:18:54:A9:62:EC:54:41:DA:D3:C8:9F:39:15:7D:E8:2B:28:6D:87
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 0189796716B7AA76D3C7DB94227414DAFC2B
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/shhUqWLsVEHa08ifORV96CsobYc.roa
Signing time: Fri 21 Jul 2023 17:02:26 +0000
ROA not before: Fri 21 Jul 2023 17:02:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50835
IP address blocks: 91.193.30.0/23 maxlen: 23
81.161.48.0/22 maxlen: 22
91.246.192.0/22 maxlen: 24
176.113.180.0/22 maxlen: 22
91.246.203.0/24 maxlen: 24
176.110.112.0/23 maxlen: 23
91.246.217.0/24 maxlen: 24
81.161.8.0/22 maxlen: 22
37.97.121.0/24 maxlen: 24
37.97.120.0/24 maxlen: 24
91.232.56.0/23 maxlen: 23
193.36.220.0/22 maxlen: 22
194.33.66.0/23 maxlen: 23
64.43.120.0/22 maxlen: 24
91.233.200.0/24 maxlen: 24
176.115.236.0/22 maxlen: 24
109.207.130.0/24 maxlen: 24
109.207.132.0/24 maxlen: 24
176.96.94.0/24 maxlen: 24
91.200.134.0/23 maxlen: 23
176.121.108.0/23 maxlen: 24
176.121.110.0/23 maxlen: 24
91.238.39.0/24 maxlen: 24
176.116.228.0/24 maxlen: 24
176.116.236.0/24 maxlen: 24
91.239.226.0/24 maxlen: 24
91.224.212.0/24 maxlen: 24
91.232.226.0/24 maxlen: 24
46.173.248.0/22 maxlen: 24
91.236.76.0/24 maxlen: 24
46.173.254.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:79:67:16:b7:aa:76:d3:c7:db:94:22:74:14:da:fc:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Jul 21 17:02:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b21854a962ec5441dad3c89f39157de82b286d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:82:51:82:20:48:21:dd:bb:de:2c:0f:f5:bf:
d7:92:b7:22:29:44:83:72:67:63:77:11:90:40:b4:
6a:08:a5:02:40:01:40:3e:f4:7f:fc:09:a8:2f:fd:
f8:00:56:20:15:43:1c:63:11:4b:33:dd:fe:3c:3a:
3f:c4:19:4c:91:d9:2b:54:96:7f:08:89:13:50:02:
64:2c:20:b9:43:e9:27:a4:1f:11:6c:c9:ce:70:8b:
f4:a5:72:23:10:7a:8d:c5:eb:91:76:44:28:e1:72:
f4:8e:8e:62:64:23:39:d9:8c:b2:3f:5e:ff:f5:99:
61:24:57:c2:10:f6:b7:1e:5a:e7:8d:7a:dc:0c:1c:
9a:75:26:b9:59:7a:df:b1:2b:aa:5c:30:a6:11:8a:
7c:58:a9:b9:e2:8b:28:1a:d0:16:cc:fb:46:ac:71:
f9:12:63:45:b4:4f:81:4f:55:00:9e:1f:82:d2:62:
fc:be:cc:fd:3a:03:e7:76:06:6b:5e:4e:97:2a:a9:
b2:46:b3:6b:0a:a9:8d:0b:35:cf:89:aa:ae:90:5c:
8b:03:80:6c:64:cf:ea:91:2c:b9:66:60:f2:7a:d8:
29:f2:fe:bf:ad:e2:7a:ae:d1:b6:71:b3:64:6c:30:
95:16:6f:2b:b1:2b:cc:12:23:4c:fd:2d:f8:a9:3d:
1b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:18:54:A9:62:EC:54:41:DA:D3:C8:9F:39:15:7D:E8:2B:28:6D:87
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/shhUqWLsVEHa08ifORV96CsobYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.97.120.0/23
46.173.248.0/22
46.173.254.0/23
64.43.120.0/22
81.161.8.0/22
81.161.48.0/22
91.193.30.0/23
91.200.134.0/23
91.224.212.0/24
91.232.56.0/23
91.232.226.0/24
91.233.200.0/24
91.236.76.0/24
91.238.39.0/24
91.239.226.0/24
91.246.192.0/22
91.246.203.0/24
91.246.217.0/24
109.207.130.0/24
109.207.132.0/24
176.96.94.0/24
176.110.112.0/23
176.113.180.0/22
176.115.236.0/22
176.116.228.0/24
176.116.236.0/24
176.121.108.0/22
193.36.220.0/22
194.33.66.0/23
Signature Algorithm: sha256WithRSAEncryption
85:fe:94:88:65:6c:40:15:dc:3a:3c:3a:88:10:50:2d:3a:17:
5c:23:92:60:bf:42:65:9a:be:ad:19:45:e7:b8:90:6e:c4:c7:
32:9a:10:34:a8:35:82:e0:da:49:3e:17:39:80:1c:58:fc:c8:
83:ee:23:07:66:bc:75:1f:0b:09:be:0a:c5:a9:50:1a:6c:6d:
bf:ba:a0:15:6d:bd:cf:a7:b5:8d:03:bc:82:69:cf:2e:3c:89:
a3:f8:4b:62:98:0c:f1:eb:e0:da:88:90:bf:43:2a:71:20:92:
bb:e2:fc:ca:7a:ae:d6:70:a6:fa:5a:3b:88:3a:96:e4:4b:63:
d0:13:c6:94:68:95:23:d8:6e:51:41:8f:7b:a1:31:ad:e3:d1:
27:51:80:b3:64:3b:54:17:66:d0:73:c8:d3:f9:7b:b7:04:79:
bb:01:36:6c:22:2c:a3:50:71:e6:2b:b1:6c:cf:12:45:8d:6e:
12:ef:22:67:31:6b:df:3e:62:1d:e3:6a:5f:2d:1a:dd:f4:92:
1e:0f:b8:0b:72:5f:c7:c1:34:47:cd:2e:80:99:b7:ec:f5:fe:
b2:e8:4e:24:51:63:5a:94:6c:58:6f:53:e4:c2:59:d5:a4:f9:
03:e9:74:58:2b:3d:38:f6:48:44:3a:cc:1a:f7:57:74:d5:3f:
a6:17:82:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 31 17:09:21 2023 by rpki-client on console-fra.rpki-client.org