Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/io0RImz9zoBV0xMXAe7_MwUy49M.roa
File: io0RImz9zoBV0xMXAe7_MwUy49M.roa (raw, json)
Hash identifier: sjjYo7+2+CJLzLUxkMatNCUcj6PMxhdAhb+K8FM8rIU=
Subject key identifier: 8A:8D:11:22:6C:FD:CE:80:55:D3:13:17:01:EE:FF:33:05:32:E3:D3
Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial: 01856CAF05EFFF894A60BDAC88F6D2B43A95
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/io0RImz9zoBV0xMXAe7_MwUy49M.roa
Signing time: Sun 01 Jan 2023 09:34:47 +0000
ROA not before: Sun 01 Jan 2023 09:34:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42303
IP address blocks: 193.149.178.0/24 maxlen: 24
185.55.8.0/22 maxlen: 22
5.35.184.0/21 maxlen: 21
77.72.96.0/21 maxlen: 21
94.127.32.0/21 maxlen: 21
46.182.200.0/21 maxlen: 21
185.153.212.0/22 maxlen: 24
151.236.200.0/21 maxlen: 24
2a02:470::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:af:05:ef:ff:89:4a:60:bd:ac:88:f6:d2:b4:3a:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Validity
Not Before: Jan 1 09:34:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8a8d11226cfdce8055d3131701eeff330532e3d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5c:32:30:82:37:04:3c:3c:25:f4:4a:4d:39:
c0:e7:d9:a7:78:fb:00:ed:f0:51:b7:93:ab:19:cb:
db:fe:45:5e:1b:d4:55:f8:b5:0e:85:a8:dc:bb:f1:
18:5c:d8:1b:90:ed:66:6d:02:94:31:a4:ba:b7:e1:
96:e0:7c:f8:6c:93:85:6c:4f:ba:75:3f:66:f5:ad:
7f:13:6c:f3:ff:91:ce:89:7b:99:31:fa:fd:3b:97:
48:bb:ee:e4:69:a8:97:69:6d:a3:77:10:19:86:8b:
db:73:5c:38:54:41:02:85:9f:ec:c2:4b:68:60:ec:
06:b4:a4:fd:66:98:3b:18:b7:32:72:bc:3c:6d:44:
33:f9:d3:90:c7:35:1b:19:36:13:9c:aa:94:74:fd:
96:9b:38:04:3a:a4:a9:9e:4b:34:09:ea:33:d3:ee:
02:bd:80:e6:f7:f4:2a:69:b0:c5:a3:50:b9:41:66:
47:7f:5b:65:9d:32:0e:32:3d:99:92:bb:50:17:70:
37:52:45:f2:7c:e7:82:fa:91:5e:a3:f2:b2:71:d5:
0d:b9:60:97:41:ed:55:08:a6:71:0b:39:50:eb:c7:
c0:81:75:35:bd:d1:86:41:cc:db:fa:3f:a9:5b:d1:
25:ff:1b:14:3e:18:0c:3f:72:75:25:92:be:a9:71:
79:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:8D:11:22:6C:FD:CE:80:55:D3:13:17:01:EE:FF:33:05:32:E3:D3
X509v3 Authority Key Identifier:
keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/io0RImz9zoBV0xMXAe7_MwUy49M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.184.0/21
46.182.200.0/21
77.72.96.0/21
94.127.32.0/21
151.236.200.0/21
185.55.8.0/22
185.153.212.0/22
193.149.178.0/24
IPv6:
2a02:470::/32
Signature Algorithm: sha256WithRSAEncryption
77:e4:74:60:2b:9b:b7:85:5b:2e:57:0e:27:2b:48:0f:82:e0:
9b:d9:23:3a:54:8e:16:5b:8f:a0:ae:dc:95:a0:03:5e:11:55:
ed:95:3d:8f:1d:7e:af:c9:79:33:f0:b6:5b:e1:56:7b:86:a4:
80:69:4f:ee:79:ba:fc:62:9e:a4:69:bd:23:c4:38:51:67:04:
38:7f:64:2a:20:65:20:61:8e:ea:91:2c:dc:e1:2e:fe:d1:59:
3f:7f:29:71:e9:65:de:4d:7a:de:bd:42:19:f7:aa:59:3a:01:
06:a7:99:4a:0d:72:9d:47:86:0e:10:be:b9:c4:24:31:de:76:
79:83:7f:dd:9c:70:85:df:23:0e:3c:73:2c:60:a2:cf:7f:75:
12:7d:3c:48:b4:da:de:1e:d6:c2:f4:a0:ee:ee:a8:85:e4:6d:
d9:0f:84:18:f9:48:7f:95:6d:44:63:36:63:80:f6:eb:c2:93:
c6:60:24:44:33:8e:82:ac:b7:53:28:86:07:e4:a9:1e:14:e1:
58:ef:4b:b0:c0:9f:e1:b9:1e:78:d8:14:3a:b1:93:21:bf:09:
88:51:d5:d9:c1:76:1a:03:a8:17:27:a8:9d:ab:d4:dd:4d:9f:
85:47:8d:67:21:7d:1a:d8:26:af:f3:8c:c6:0b:01:a0:db:a1:
39:c1:e9:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 1 13:51:51 2023 by rpki-client on console-fra.rpki-client.org