Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/D8msGQqJgkaOOtEjE01M5hjBmNs.roa
File: D8msGQqJgkaOOtEjE01M5hjBmNs.roa (raw, json)
Hash identifier: n/ISZjSAdEUJCOf4YHUOoGYJNOKidyXDqyT72TAoV9M=
Subject key identifier: 0F:C9:AC:19:0A:89:82:46:8E:3A:D1:23:13:4D:4C:E6:18:C1:98:DB
Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial: 018C1B1C06FC825A022875D20FD0F5E0D9F0
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/D8msGQqJgkaOOtEjE01M5hjBmNs.roa
Signing time: Wed 29 Nov 2023 12:44:30 +0000
ROA not before: Wed 29 Nov 2023 12:44:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212477
IP address blocks: 77.87.126.0/24 maxlen: 24
94.154.115.0/24 maxlen: 24
193.221.208.0/24 maxlen: 24
45.90.116.0/22 maxlen: 24
45.90.12.0/22 maxlen: 24
37.77.151.0/24 maxlen: 24
185.149.150.0/24 maxlen: 24
178.212.79.0/24 maxlen: 24
185.138.165.0/24 maxlen: 24
109.205.63.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1b:1c:06:fc:82:5a:02:28:75:d2:0f:d0:f5:e0:d9:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Validity
Not Before: Nov 29 12:44:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0fc9ac190a8982468e3ad123134d4ce618c198db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ef:70:d9:b5:f4:9c:b5:e4:0f:13:bf:88:3a:
bb:8e:ba:03:a0:73:dd:3c:b9:52:8e:d8:e2:3d:9d:
ab:20:53:1b:f8:d1:20:39:76:c1:de:bb:b1:ee:62:
b4:4a:be:39:e0:03:61:58:02:e7:9e:c6:da:0c:e9:
4f:38:25:91:c9:01:cc:c8:35:72:78:36:d4:02:61:
dd:4e:94:6b:08:35:1d:b8:df:cd:ad:42:a8:e3:67:
33:00:8b:ed:cb:36:eb:e1:56:18:ed:a3:a3:9f:d4:
1f:a2:18:8d:c4:ea:36:59:d8:99:60:75:df:b7:7b:
8a:43:06:76:17:88:ca:70:02:50:95:81:af:ec:e8:
ec:e9:da:9f:48:8b:52:48:b3:d8:34:3c:d2:f0:98:
bc:1b:5a:35:f3:c9:0b:77:e8:6f:0a:d7:6e:40:3b:
76:20:4d:a1:81:49:62:04:66:01:4a:f9:ac:96:dd:
1a:5d:2e:63:e2:8a:d5:e0:a4:57:dd:37:1c:cd:13:
9a:69:a2:d4:3d:d3:ad:4d:6d:e7:e5:65:a4:7d:12:
81:ab:60:0b:b3:7c:6e:05:00:5d:d7:e9:e8:f0:b8:
d1:99:2a:52:ea:f7:ba:40:af:20:c2:78:a0:9b:0d:
0d:be:96:3b:3b:cd:c1:77:4d:6d:11:23:af:b0:1d:
1b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:C9:AC:19:0A:89:82:46:8E:3A:D1:23:13:4D:4C:E6:18:C1:98:DB
X509v3 Authority Key Identifier:
keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/D8msGQqJgkaOOtEjE01M5hjBmNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.151.0/24
45.90.12.0/22
45.90.116.0/22
77.87.126.0/24
94.154.115.0/24
109.205.63.0/24
178.212.79.0/24
185.138.165.0/24
185.149.150.0/24
193.221.208.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:34:6f:91:3a:28:2e:8f:c3:dd:f8:e4:82:f3:f1:76:16:5b:
7b:6e:3a:a2:e3:d5:7a:94:42:ad:e1:f4:b6:e8:68:bf:73:e5:
20:24:51:4e:04:98:60:fc:b5:ac:df:a5:61:5d:d1:8d:b7:b6:
0a:ed:a2:32:46:04:9d:1a:89:59:0d:84:42:2c:5f:1e:02:b9:
95:a2:f2:e7:c7:03:3d:ea:0d:2c:43:3d:7a:de:31:5b:bf:7a:
75:2c:8f:2a:58:73:6c:23:97:06:94:cf:f2:aa:7d:d2:7f:9d:
c5:56:76:5a:39:85:91:04:bc:81:a5:9b:c5:9f:7f:51:ea:f6:
29:03:a8:9e:91:2d:e2:a4:4a:4f:66:b4:3e:d9:df:d1:7f:7e:
43:d2:3b:b6:dd:4a:6b:6d:bc:52:43:9b:3f:3e:3d:d8:af:b6:
c7:86:21:5e:a4:89:d2:69:c5:cd:ad:c7:d4:83:5f:31:5b:39:
1d:18:2e:66:77:4f:6c:19:ab:87:54:a6:72:3c:1e:a2:46:24:
13:f9:c8:4c:38:ac:dd:c3:ef:91:5c:d9:dc:28:0e:6f:b8:85:
c0:cd:18:19:fd:83:e1:c2:a1:9b:f2:28:29:13:20:7a:1d:0a:
40:d9:36:2b:e6:33:6f:87:42:41:0c:ac:98:39:7b:77:7e:20:
1c:db:14:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 1 06:59:54 2023 by rpki-client on console-fra.rpki-client.org