Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/iZisgcODdL9UMzTZm3RmFLAdhf4.roa
File: iZisgcODdL9UMzTZm3RmFLAdhf4.roa (raw, json)
Hash identifier: OF91Dw5npRIZy4yBoPF52Vp8gkZhl4ptPL8HrERX5/Y=
Subject key identifier: 89:98:AC:81:C3:83:74:BF:54:33:34:D9:9B:74:66:14:B0:1D:85:FE
Certificate issuer: /CN=3aba1172472ea80265d12982967de0a8b0bc5901
Certificate serial: 018B34641449D988A0EAC4B55AEF7329D56B
Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/iZisgcODdL9UMzTZm3RmFLAdhf4.roa
Signing time: Sun 15 Oct 2023 17:30:55 +0000
ROA not before: Sun 15 Oct 2023 17:30:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201942
IP address blocks: 185.58.196.0/22 maxlen: 22
185.119.112.0/22 maxlen: 22
195.184.72.0/24 maxlen: 24
45.130.16.0/22 maxlen: 22
193.56.3.0/24 maxlen: 24
46.226.144.0/21 maxlen: 21
194.26.143.0/24 maxlen: 24
195.182.205.0/24 maxlen: 24
193.163.117.0/24 maxlen: 24
193.46.216.0/24 maxlen: 24
185.232.41.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:34:64:14:49:d9:88:a0:ea:c4:b5:5a:ef:73:29:d5:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901
Validity
Not Before: Oct 15 17:30:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8998ac81c38374bf543334d99b746614b01d85fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d3:a4:8c:d7:57:c4:f2:60:d9:b4:b6:42:89:
e6:8e:be:28:6d:c6:17:4c:cc:96:28:71:97:09:fc:
a3:ed:b9:26:46:6d:b4:99:bf:0d:c0:21:9d:2d:d4:
4a:27:a1:63:47:2c:c9:48:d4:41:94:e4:e7:11:72:
88:f6:de:39:ee:a1:5e:62:0e:e9:a9:c3:d6:b3:41:
07:4a:8a:47:a8:95:5b:cb:ed:f0:c1:e1:aa:14:c0:
e1:c7:11:d9:eb:ba:63:75:e5:30:87:26:d4:0c:60:
69:2e:49:fe:82:e9:f4:f0:34:b4:43:2e:16:bf:ee:
87:a6:08:eb:11:27:56:d4:51:fc:b2:0d:02:de:60:
7f:f3:1a:17:12:d5:91:36:fc:27:37:29:90:5d:26:
2c:a8:23:f8:01:c1:c7:84:85:6c:57:27:da:2d:06:
5e:72:bf:b8:31:1a:4e:e6:f1:7d:d4:2d:71:19:cd:
10:70:be:4f:3e:38:0f:29:40:19:8b:21:fe:47:d6:
8b:7a:28:45:8f:5a:0f:cf:c2:aa:d2:0f:ca:67:a3:
f6:97:5a:93:5c:09:4f:02:65:6f:ad:50:56:c4:bc:
5a:0d:d9:ef:b7:3a:27:60:a4:84:e1:f0:6f:d4:52:
36:de:5f:e5:4e:ce:35:0e:b8:62:da:96:8c:96:c0:
48:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:98:AC:81:C3:83:74:BF:54:33:34:D9:9B:74:66:14:B0:1D:85:FE
X509v3 Authority Key Identifier:
keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/iZisgcODdL9UMzTZm3RmFLAdhf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.16.0/22
46.226.144.0/21
185.58.196.0/22
185.119.112.0/22
185.232.41.0/24
193.46.216.0/24
193.56.3.0/24
193.163.117.0/24
194.26.143.0/24
195.182.205.0/24
195.184.72.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:4b:77:b3:b7:09:2a:a0:54:08:09:6d:dc:68:9b:d7:af:64:
6a:d9:cb:1c:1c:4b:a4:cc:67:6f:b2:c5:6c:fc:dc:b4:24:f1:
2f:e3:75:9f:f8:93:55:17:14:55:b2:94:45:64:cb:13:72:11:
4a:1c:8e:21:30:81:47:17:e5:4f:a4:c3:41:ee:46:21:76:e4:
ef:db:04:6c:49:69:18:76:ec:0a:1f:1e:83:ac:71:cf:5a:01:
e6:9e:35:1f:34:22:c4:47:18:d7:ad:e4:e8:67:72:7d:56:eb:
98:26:45:51:06:7c:2f:5b:68:33:e5:4d:a2:74:14:7c:5a:56:
89:1e:86:8d:47:89:c1:06:5c:c2:23:78:d3:cc:6f:e6:b6:0f:
de:b8:d3:a0:89:9f:d5:27:6c:bd:5b:5f:6e:20:57:44:ce:e1:
3f:d7:6f:99:8a:72:9d:bf:30:5a:86:d4:89:ac:f5:04:13:23:
7b:80:a2:af:53:c5:92:81:f2:bd:9e:76:51:51:cf:5a:c3:57:
34:f8:31:cb:fc:2d:7d:1d:0f:49:18:b0:78:29:ad:95:52:b7:
13:a9:bf:0d:ae:0f:5d:38:cc:66:b8:a2:cf:3d:11:26:e6:16:
cb:d5:86:c1:c4:e9:24:b1:c1:ce:eb:6b:e7:92:7a:25:ea:2b:
ed:14:53:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 30 12:47:46 2023 by rpki-client on console-fra.rpki-client.org