Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/lOwS414OlzQhyVI_gV4wOntj0Yg.roa
File: lOwS414OlzQhyVI_gV4wOntj0Yg.roa (raw, json)
Hash identifier: A9f8KXEpaE44D9ezOBOjoAohEx7eTQDjWaU+XX/fpzc=
Subject key identifier: 94:EC:12:E3:5E:0E:97:34:21:C9:52:3F:81:5E:30:3A:7B:63:D1:88
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 018B84E2506AB65F58BB68BE629EDF3D5508
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/lOwS414OlzQhyVI_gV4wOntj0Yg.roa
Signing time: Tue 31 Oct 2023 08:38:26 +0000
ROA not before: Tue 31 Oct 2023 08:38:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12325
IP address blocks: 185.18.224.0/23 maxlen: 24
89.45.228.0/24 maxlen: 24
188.215.40.0/22 maxlen: 24
89.40.222.0/23 maxlen: 24
84.247.61.0/24 maxlen: 24
89.46.232.0/21 maxlen: 24
89.46.128.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:84:e2:50:6a:b6:5f:58:bb:68:be:62:9e:df:3d:55:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Oct 31 08:38:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=94ec12e35e0e973421c9523f815e303a7b63d188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a1:e1:04:8e:24:81:2a:17:5a:41:08:4c:60:
2d:f3:e7:4f:5c:03:22:15:32:0c:f6:55:63:cd:ff:
aa:df:b9:77:18:df:04:3e:b8:08:0e:a1:9e:39:a4:
86:ec:81:67:1e:3e:6c:8a:02:2e:42:2f:1d:6b:19:
2d:38:46:9c:60:db:cb:7a:dd:9c:35:a0:7f:af:65:
cf:2f:4d:90:7c:b7:03:fb:70:30:48:e5:db:8c:b3:
5c:80:dd:c5:58:f5:d3:a5:a0:4d:90:9c:dd:40:3c:
4f:9c:b7:5f:db:e4:60:7b:25:22:96:6a:4a:cc:46:
c4:7e:a0:56:05:38:28:00:bb:3b:ec:50:35:95:89:
db:e9:87:40:8a:42:d3:30:11:33:30:ce:b1:43:57:
27:15:95:05:69:16:d4:16:df:80:f5:f2:6c:47:1c:
45:6e:2a:07:3d:06:59:36:29:3a:3d:cd:80:76:56:
36:2e:8a:ab:e4:06:5d:c1:c3:c2:c4:79:9f:1f:e6:
e4:4f:b7:49:05:6a:6e:e1:dc:40:cd:5f:d9:57:ed:
12:28:fd:68:e3:09:9b:88:fd:ca:88:99:c3:a3:f7:
07:d0:78:1b:5f:04:3f:ab:73:98:58:13:64:ea:55:
47:88:39:f1:71:4e:11:83:51:74:ca:07:e9:8e:99:
06:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:EC:12:E3:5E:0E:97:34:21:C9:52:3F:81:5E:30:3A:7B:63:D1:88
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/lOwS414OlzQhyVI_gV4wOntj0Yg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.247.61.0/24
89.40.222.0/23
89.45.228.0/24
89.46.128.0/22
89.46.232.0/21
185.18.224.0/23
188.215.40.0/22
Signature Algorithm: sha256WithRSAEncryption
28:17:ca:98:01:b7:bf:99:45:b7:e4:50:33:88:da:a8:c8:e4:
40:cb:c2:dc:46:c4:a0:bd:2b:7e:37:fd:5f:67:4f:91:8d:9f:
e3:ee:13:9d:c3:c9:f7:ad:67:f2:24:ec:7f:5f:e7:d4:e0:5d:
0d:be:62:de:7c:fb:75:fe:a8:31:cf:06:46:ec:df:42:71:4c:
7e:4f:ad:15:0b:6c:ba:83:0f:c5:a9:28:3d:b8:5b:ed:53:51:
c0:48:9e:dd:0c:71:ad:62:49:a6:63:44:41:de:12:2e:50:ac:
ae:dc:57:14:dc:ab:b8:29:56:61:0d:08:1e:6f:65:39:b0:0b:
16:23:76:db:32:b2:92:5d:fb:29:ab:b6:a3:9f:36:f1:e2:c3:
a5:0d:92:4b:cc:b3:56:fc:3f:a3:bf:16:1b:ca:66:c0:88:48:
ad:c2:92:89:3e:81:ea:c2:71:d9:80:92:37:31:b9:05:ed:b3:
cc:94:51:fb:f0:11:21:0e:46:14:4c:d7:40:7a:c6:ef:d7:2e:
66:43:29:d5:ac:96:9d:7e:76:46:75:b6:bb:e0:de:9d:c3:42:
3f:af:0e:26:5e:b4:a4:e0:20:c1:16:19:ea:3e:f3:fa:6c:8b:
2b:21:8f:00:64:12:30:0a:4d:94:fe:34:f2:bd:a1:a6:58:f3:
0b:7c:f0:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 31 16:57:18 2023 by rpki-client on console-fra.rpki-client.org