Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/VIfd5ZbjXnU-XEYJo2cyhJ5fE3w.roa
File: VIfd5ZbjXnU-XEYJo2cyhJ5fE3w.roa (raw, json)
Hash identifier: cyTqzNgN/qdYPAFvECmxy3q02KdapZxknYJSw2I8AaM=
Subject key identifier: 54:87:DD:E5:96:E3:5E:75:3E:5C:46:09:A3:67:32:84:9E:5F:13:7C
Certificate issuer: /CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Certificate serial: 0185727118D74E8F008EC95226FFB93954C5
Authority key identifier: 40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/VIfd5ZbjXnU-XEYJo2cyhJ5fE3w.roa
Signing time: Mon 02 Jan 2023 12:24:52 +0000
ROA not before: Mon 02 Jan 2023 12:24:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44043
IP address blocks: 176.223.120.0/23 maxlen: 23
176.223.124.0/23 maxlen: 23
176.223.122.0/23 maxlen: 23
176.223.126.0/23 maxlen: 23
94.176.105.0/24 maxlen: 24
94.176.104.0/24 maxlen: 24
188.240.2.0/23 maxlen: 23
188.241.183.0/24 maxlen: 24
188.213.20.0/23 maxlen: 23
92.114.95.0/24 maxlen: 24
92.114.94.0/24 maxlen: 24
91.195.28.0/24 maxlen: 24
91.195.29.0/24 maxlen: 24
46.102.249.0/24 maxlen: 24
188.215.244.0/23 maxlen: 23
89.44.47.0/24 maxlen: 24
188.212.156.0/24 maxlen: 24
188.215.250.0/23 maxlen: 23
188.240.235.0/24 maxlen: 24
185.92.192.0/24 maxlen: 24
185.92.195.0/24 maxlen: 24
185.92.193.0/24 maxlen: 24
185.92.194.0/24 maxlen: 24
89.44.120.0/24 maxlen: 24
89.44.139.0/24 maxlen: 24
89.44.138.0/24 maxlen: 24
176.126.201.0/24 maxlen: 24
176.126.202.0/24 maxlen: 24
176.126.200.0/24 maxlen: 24
176.126.203.0/24 maxlen: 24
89.46.7.0/24 maxlen: 24
31.14.15.0/24 maxlen: 24
31.14.13.0/24 maxlen: 24
31.14.14.0/24 maxlen: 24
31.14.12.0/24 maxlen: 24
31.14.22.0/24 maxlen: 24
31.14.23.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:71:18:d7:4e:8f:00:8e:c9:52:26:ff:b9:39:54:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Validity
Not Before: Jan 2 12:24:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5487dde596e35e753e5c4609a36732849e5f137c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:35:a8:14:85:43:95:6c:4e:f9:d6:e2:1d:52:
fc:6c:7a:48:72:4d:55:36:43:83:54:a7:4c:f0:70:
2c:aa:03:8c:1b:6e:88:b1:f9:c5:96:e5:45:04:17:
4e:7b:ba:ef:ee:13:2e:e0:9d:79:3e:ad:e6:95:be:
07:73:ca:36:e2:e2:cb:ca:57:96:59:71:45:8c:03:
e4:16:8e:29:54:83:b2:31:97:31:32:26:f0:4c:62:
81:61:1b:00:fd:a6:1e:b9:7f:59:5a:bf:50:7c:89:
71:c1:c3:6d:05:ac:ab:c3:a7:0b:ce:99:28:5a:67:
ed:23:34:e4:e3:9d:8c:b6:14:ca:a1:33:61:11:ef:
ad:5d:dd:53:a3:7e:b9:4d:39:b9:f1:91:f0:52:cf:
f6:ad:97:ae:00:ae:25:af:ad:20:66:b7:41:55:fc:
ce:6e:a8:ee:0a:65:2b:05:84:24:17:df:b9:f1:fa:
54:40:ac:dc:79:b5:e9:44:02:dd:fa:03:ae:af:bd:
6b:a8:c4:b6:f7:47:bc:66:72:ec:ee:ea:f8:fc:1f:
37:d2:09:46:b8:2a:a3:8b:2a:52:16:55:61:e8:53:
a0:3f:86:af:b1:5a:c7:a1:98:05:cc:01:21:b5:ac:
a0:b8:f6:ee:56:a2:d0:6f:97:b3:d0:7a:ea:73:75:
54:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:87:DD:E5:96:E3:5E:75:3E:5C:46:09:A3:67:32:84:9E:5F:13:7C
X509v3 Authority Key Identifier:
keyid:40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/VIfd5ZbjXnU-XEYJo2cyhJ5fE3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.12.0/22
31.14.22.0/23
46.102.249.0/24
89.44.47.0/24
89.44.120.0/24
89.44.138.0/23
89.46.7.0/24
91.195.28.0/23
92.114.94.0/23
94.176.104.0/23
176.126.200.0/22
176.223.120.0/21
185.92.192.0/22
188.212.156.0/24
188.213.20.0/23
188.215.244.0/23
188.215.250.0/23
188.240.2.0/23
188.240.235.0/24
188.241.183.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:9e:30:5b:ac:56:99:8d:d0:76:10:96:5a:a8:2f:3c:c9:e0:
86:26:43:07:52:d4:e4:4e:71:71:f4:7e:21:d6:63:7e:59:61:
e1:f5:b0:8c:67:12:1a:a1:bd:b3:2c:3a:24:d7:dc:09:47:89:
37:04:b0:4f:c6:29:b6:d0:79:09:e6:81:9d:c1:aa:61:77:02:
59:47:2c:b4:21:c9:59:f1:26:ef:91:db:6a:df:11:dc:ea:4f:
9d:e9:1e:02:62:61:b1:95:19:ba:30:07:e1:a8:cd:f3:2e:f1:
ba:97:d7:e9:e5:04:b8:57:e4:05:9f:4c:41:cb:5d:37:55:2a:
ae:fe:d1:39:9b:57:86:8b:ff:af:e5:06:ac:e2:27:e4:2f:51:
b0:3e:04:0f:1a:b6:08:26:89:e0:db:2b:cc:bd:36:4b:7b:d2:
71:48:51:f3:09:b1:55:a1:42:44:8c:c8:d1:24:27:49:d8:62:
83:be:e9:9b:e5:2f:ca:17:34:19:23:38:0b:3d:a2:5a:08:48:
91:2c:23:e4:b2:65:d3:04:6f:ff:77:9e:f4:d5:e5:ce:8f:db:
31:2b:a3:5e:66:dd:98:a1:89:65:53:05:f3:b5:36:b3:63:d5:
f0:c4:d6:33:26:1e:92:25:ad:bf:7a:00:01:af:a1:2b:64:3d:
bb:0a:28:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:09 2024 by rpki-client on console-ams.rpki-client.org