Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/E3kRs9cBUDJ7fuNXcHj75VswfVU.roa
File: E3kRs9cBUDJ7fuNXcHj75VswfVU.roa (raw, json)
Hash identifier: rabEqbJmBAx7OQ9SmeIOSaIj+tG5qL49fIFJ28c3bE0=
Subject key identifier: 13:79:11:B3:D7:01:50:32:7B:7E:E3:57:70:78:FB:E5:5B:30:7D:55
Certificate issuer: /CN=22c7cda75f4e15e486dee5a6501cbe2018bc0e0f
Certificate serial: 018ADAAE8D596CDFD28E23171D0AECA2482B
Authority key identifier: 22:C7:CD:A7:5F:4E:15:E4:86:DE:E5:A6:50:1C:BE:20:18:BC:0E:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsfNp19OFeSG3uWmUBy-IBi8Dg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/E3kRs9cBUDJ7fuNXcHj75VswfVU.roa
Signing time: Thu 28 Sep 2023 07:26:27 +0000
ROA not before: Thu 28 Sep 2023 07:26:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200845
IP address blocks: 91.209.234.0/24 maxlen: 24
185.154.8.0/22 maxlen: 24
77.75.180.0/24 maxlen: 24
185.193.68.0/22 maxlen: 24
213.148.192.0/19 maxlen: 24
212.121.224.0/19 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:da:ae:8d:59:6c:df:d2:8e:23:17:1d:0a:ec:a2:48:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c7cda75f4e15e486dee5a6501cbe2018bc0e0f
Validity
Not Before: Sep 28 07:26:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=137911b3d70150327b7ee3577078fbe55b307d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5f:b2:1c:a6:7f:10:6a:12:5d:e0:d5:c8:03:
ee:1b:36:fb:04:28:38:c1:d9:57:cd:29:22:f7:f6:
dc:a8:a3:de:88:f2:6e:95:2e:1e:d8:41:85:9c:86:
16:31:a4:14:ad:1e:68:93:31:f7:f3:e1:46:97:5e:
8f:c9:ff:2a:4e:1b:76:41:23:2a:78:d5:5b:f5:51:
a2:04:60:88:3c:56:af:d3:95:42:4d:90:7e:39:08:
19:1a:23:60:d7:c0:f0:7d:dd:43:96:94:0b:3d:b7:
d6:64:5a:aa:10:a1:db:49:0f:dd:bd:e8:c7:d8:ac:
4e:c0:0a:87:b6:de:86:db:d8:65:01:5b:32:98:1c:
05:e6:03:09:f0:09:80:8b:4b:1a:28:14:bf:9b:f5:
99:22:45:40:79:ad:5c:dd:39:ce:a7:88:df:59:0d:
66:1f:c1:48:1f:73:77:59:9b:ef:25:69:a0:77:d6:
49:c2:8a:05:76:d8:e5:8f:28:2f:15:c3:03:ef:5b:
a2:2c:e3:a0:5e:e7:c1:ec:36:34:70:bb:56:3a:56:
e5:2d:9c:e0:66:bc:24:8c:5b:81:e9:d2:57:86:42:
ef:09:2e:41:3c:dc:c3:28:d6:fa:ca:92:62:61:92:
e0:98:38:36:64:7c:a7:cb:32:e8:d8:5f:fd:dc:d6:
3c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:79:11:B3:D7:01:50:32:7B:7E:E3:57:70:78:FB:E5:5B:30:7D:55
X509v3 Authority Key Identifier:
keyid:22:C7:CD:A7:5F:4E:15:E4:86:DE:E5:A6:50:1C:BE:20:18:BC:0E:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsfNp19OFeSG3uWmUBy-IBi8Dg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/E3kRs9cBUDJ7fuNXcHj75VswfVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.75.180.0/24
91.209.234.0/24
185.154.8.0/22
185.193.68.0/22
212.121.224.0/19
213.148.192.0/19
Signature Algorithm: sha256WithRSAEncryption
d5:99:a6:29:dd:c2:de:d4:0c:93:c8:39:35:93:71:61:7b:fa:
0d:72:9a:8a:3e:57:4a:80:5b:c1:a6:f8:db:e1:44:0c:90:90:
a9:b9:ea:41:4e:30:7d:0f:d7:b6:2f:16:2e:1d:4c:0e:c9:a2:
7d:e9:ef:25:75:36:58:03:24:42:c2:a8:61:b4:88:b0:0e:fb:
ef:b2:db:5b:c9:2f:ce:7c:a1:74:f5:c0:6f:25:c5:3d:44:3c:
7a:32:97:c7:0c:da:07:41:af:8d:f8:3f:b8:8b:8b:83:1e:5f:
4e:24:b6:5b:3f:b7:78:53:4a:d6:a2:93:22:76:29:22:a4:a4:
17:e7:0f:6b:fc:e3:8e:cf:fa:40:18:a8:8b:bd:53:58:c6:6a:
41:77:34:da:9d:1e:77:8c:b2:bf:7d:95:40:f4:9e:0d:82:23:
c5:26:14:31:b2:13:7a:4a:fa:af:8e:d0:f8:1f:c2:85:a6:a4:
73:5e:9b:50:b8:78:90:96:62:ee:fb:ac:e1:c1:0b:8f:2b:1b:
43:4a:67:1e:6a:65:9d:47:c5:96:f8:34:27:18:14:ea:ad:0f:
d8:de:0c:30:9c:5b:5e:16:02:19:87:db:c6:2f:ee:08:98:ea:
fc:f5:10:3d:5a:01:f5:a0:d7:e4:3f:59:da:3f:77:5f:83:2e:
c9:ca:38:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 4 14:42:57 2023 by rpki-client on console-ams.rpki-client.org