Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/s5J9lnuY-GtV9Lu7tHghFSIEO70.roa
File: s5J9lnuY-GtV9Lu7tHghFSIEO70.roa (raw, json)
Hash identifier: vbstIXRcjmEaAJMMKnAmP1rzakt1QyFYZfWbFi+bNpY=
Subject key identifier: B3:92:7D:96:7B:98:F8:6B:55:F4:BB:BB:B4:78:21:15:22:04:3B:BD
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 018B5CF18D75B1AA54E1CB4660F376A392E5
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/s5J9lnuY-GtV9Lu7tHghFSIEO70.roa
Signing time: Mon 23 Oct 2023 14:30:16 +0000
ROA not before: Mon 23 Oct 2023 14:30:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12679
IP address blocks: 94.137.78.0/24 maxlen: 24
94.137.72.0/24 maxlen: 24
94.137.91.0/24 maxlen: 24
94.137.90.0/24 maxlen: 24
94.137.89.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5c:f1:8d:75:b1:aa:54:e1:cb:46:60:f3:76:a3:92:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: Oct 23 14:30:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b3927d967b98f86b55f4bbbbb478211522043bbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:23:cf:fb:56:ff:ce:25:92:81:cd:47:50:1f:
1d:18:be:9f:81:6f:5f:aa:82:f0:30:72:d0:f9:5b:
13:53:51:de:06:8e:bf:05:8f:6b:9d:eb:f9:4a:7f:
d2:c1:42:33:8c:5d:2e:b6:94:90:30:86:7c:81:1c:
3c:80:61:ce:20:82:04:7d:b1:23:0e:2d:19:3f:dd:
db:1b:ac:fa:e8:65:4e:a0:2b:ad:1d:52:34:8c:6e:
ed:2f:ab:59:b1:8f:59:91:cf:b6:f9:03:67:c2:ca:
a0:f6:39:36:6a:a3:03:a3:f0:03:67:53:58:cb:5c:
ba:ee:9d:92:f0:19:db:26:90:49:42:aa:b5:5c:a2:
38:ef:54:44:7a:a1:3f:b2:3b:15:d3:c5:e1:83:ba:
57:c5:3f:5e:16:67:f5:0d:5d:1d:26:c4:37:bb:f8:
7a:bb:d0:ab:e9:fa:fd:fa:1b:06:a6:20:dd:0c:22:
b3:36:12:14:59:cc:cd:6a:1e:b7:e9:67:6a:de:f1:
63:3b:a2:3f:b3:fe:35:12:90:c9:32:3d:17:8a:d9:
23:ef:3b:fe:07:31:5d:72:ed:77:da:3d:c4:33:83:
41:8f:40:80:9b:2c:78:cc:50:ce:fe:18:e8:be:3d:
c7:52:87:b2:44:dd:fd:ae:ef:a8:d4:7c:52:56:17:
1a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:92:7D:96:7B:98:F8:6B:55:F4:BB:BB:B4:78:21:15:22:04:3B:BD
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/s5J9lnuY-GtV9Lu7tHghFSIEO70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.137.72.0/24
94.137.78.0/24
94.137.89.0-94.137.91.255
Signature Algorithm: sha256WithRSAEncryption
68:fa:e0:78:c3:50:24:b7:66:47:3a:a0:b7:83:35:9a:75:c4:
64:05:a0:f2:5e:b5:8b:7a:93:27:7d:71:d1:ed:64:15:f1:26:
82:1d:30:38:a3:58:15:ae:df:4d:8d:35:cc:f6:f1:f4:c5:be:
51:6b:59:11:e4:c2:f4:b4:33:73:19:0f:86:86:74:f2:37:03:
bd:e4:ce:aa:d3:c9:db:a0:02:fc:2c:d9:04:ea:84:38:81:29:
37:af:58:ab:b7:09:f3:4a:17:6b:9d:c9:a2:2c:98:ec:98:fe:
62:48:68:d8:2b:1a:5d:34:a0:0b:69:2e:e2:74:1c:ab:7f:bb:
d6:06:dc:12:62:8f:d6:e6:cc:5b:81:13:d7:c4:7c:c5:62:81:
c2:bc:d8:6b:d0:de:3f:6e:af:59:c3:47:cd:ac:78:81:19:c3:
49:06:32:55:5f:81:77:bc:58:ae:63:2a:0b:ea:14:95:92:02:
ea:97:09:12:4a:85:8c:18:70:21:a8:07:e9:c8:47:5d:ed:44:
ca:c1:35:4f:32:2d:b6:2a:1e:e8:72:b5:ff:b8:e8:b7:d5:30:
46:67:bc:1c:b0:98:38:54:93:a3:79:16:b7:91:da:d8:0b:ac:
8f:8f:86:b9:55:e9:d0:35:84:62:fa:5e:4d:68:e6:d0:d3:c8:
57:e7:8f:02
-----BEGIN CERTIFICATE-----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Generated at Wed Nov 8 20:03:29 2023 by rpki-client on console-fra.rpki-client.org