Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/cljNOHbfWVEb71O0VZ_HVVxBtu8.roa
File: cljNOHbfWVEb71O0VZ_HVVxBtu8.roa (raw, json)
Hash identifier: 5VKxK7uILvkb2kaSDhFJJHje5hl7oU91VAFPyTKgw3s=
Subject key identifier: 72:58:CD:38:76:DF:59:51:1B:EF:53:B4:55:9F:C7:55:5C:41:B6:EF
Certificate issuer: /CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Certificate serial: 018B66EF886981CD0273C3DB556C577C1833
Authority key identifier: 22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/cljNOHbfWVEb71O0VZ_HVVxBtu8.roa
Signing time: Wed 25 Oct 2023 13:04:15 +0000
ROA not before: Wed 25 Oct 2023 13:04:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212212
IP address blocks: 151.248.70.0/23 maxlen: 23
195.54.54.0/24 maxlen: 24
91.239.164.0/23 maxlen: 23
91.242.48.0/23 maxlen: 23
91.242.50.0/23 maxlen: 23
91.239.166.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:66:ef:88:69:81:cd:02:73:c3:db:55:6c:57:7c:18:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Validity
Not Before: Oct 25 13:04:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7258cd3876df59511bef53b4559fc7555c41b6ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:65:33:a3:ce:6b:51:b3:de:8b:1c:89:a3:02:
13:a8:d2:ee:55:19:fe:ee:ac:ab:d4:44:d1:bd:54:
d8:0b:ed:0f:f0:e8:08:fe:a7:5a:d2:8d:9d:7e:84:
57:53:36:12:7a:0e:4e:ce:cd:5c:ac:8c:16:b5:b2:
36:6d:db:f9:0f:21:1f:33:7b:6a:a5:bf:a6:63:3c:
1a:1f:63:76:b0:3f:75:4f:1d:fe:c8:30:58:54:a5:
b8:a3:65:82:1d:63:67:42:56:36:1c:79:ed:27:12:
32:76:99:3f:10:2a:b7:1c:13:9c:a9:47:53:66:63:
05:ff:c7:cf:cf:fe:ed:f4:55:32:f0:ea:8d:1c:1d:
c2:9d:9d:51:19:c2:52:ff:3b:96:b5:bb:af:94:e9:
ec:aa:11:92:32:ed:02:3f:5c:49:0b:6d:f6:07:4b:
2a:d9:4f:57:a5:a5:67:0e:2c:6e:3c:37:8f:94:c0:
b1:b2:4a:6a:93:05:8d:bb:57:49:76:59:25:70:c0:
3a:4c:15:60:aa:0c:b1:4f:a8:c5:d1:b8:e0:55:27:
03:2a:7e:6a:93:1d:97:29:d4:c4:d5:d0:25:ef:ed:
4f:3f:c4:57:8c:38:cb:34:d1:50:f4:36:36:fa:48:
a5:20:45:52:c2:83:32:83:e9:7a:c2:30:dd:b7:35:
7c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:58:CD:38:76:DF:59:51:1B:EF:53:B4:55:9F:C7:55:5C:41:B6:EF
X509v3 Authority Key Identifier:
keyid:22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/cljNOHbfWVEb71O0VZ_HVVxBtu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.164.0/22
91.242.48.0/22
151.248.70.0/23
195.54.54.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:5a:e1:d4:69:57:6b:d0:d9:d0:ac:73:cb:4f:c9:2a:fd:63:
8f:ea:e2:45:c8:74:02:c3:e8:fb:61:d8:78:d9:a8:9e:bd:08:
5a:92:1e:9c:2f:f6:25:14:17:98:40:11:cb:78:b8:74:c8:c4:
74:6e:6d:d4:b3:9e:58:1b:d6:56:80:31:67:8e:0b:d9:d6:50:
8a:d3:88:9b:60:a5:e7:f1:f7:e2:22:61:13:71:a7:d2:17:78:
b6:d8:3e:4d:3c:9d:3f:56:6a:9e:2d:ea:f7:4d:fa:1c:f8:9e:
96:4b:1f:ac:74:31:3e:fd:b8:3e:78:2d:a7:91:fc:85:c2:2d:
5f:8a:c3:c3:69:45:6b:e9:b7:d0:7c:37:c8:35:3b:3b:0e:ff:
82:19:6e:22:b1:2c:d4:09:93:b5:94:0b:4b:27:4f:e7:b0:35:
c4:4d:3e:9d:1e:74:b3:bf:11:15:8d:4b:fd:b1:f4:ca:31:b8:
5c:66:b4:8a:02:2f:4c:b5:fe:96:e5:3b:fe:1a:2c:a0:67:9b:
78:84:f8:d6:da:80:51:0f:ad:a7:a7:5b:63:0e:03:6a:5a:c1:
ef:df:ea:6f:86:cb:de:b5:ff:8d:96:39:ef:48:f6:33:42:08:
62:97:2e:3f:e2:ef:61:2c:b6:99:1b:5e:cf:82:17:01:f6:b1:
f0:3f:4f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 25 14:00:05 2023 by rpki-client on console-fra.rpki-client.org