Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/mrR3WGnzVC92_OCV0HKZ0NusdHs.roa
File: mrR3WGnzVC92_OCV0HKZ0NusdHs.roa (raw, json)
Hash identifier: kSjWUjGjnqS9IJDfjtAPUKvEABOOdyAVEJV152Ec0Vo=
Subject key identifier: 9A:B4:77:58:69:F3:54:2F:76:FC:E0:95:D0:72:99:D0:DB:AC:74:7B
Certificate issuer: /CN=20a7fcbe59314c372b68f232223828b1e33a03ec
Certificate serial: 018570CC145D8BAB761CA3CC14E13F42656B
Authority key identifier: 20:A7:FC:BE:59:31:4C:37:2B:68:F2:32:22:38:28:B1:E3:3A:03:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IKf8vlkxTDcraPIyIjgoseM6A-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/mrR3WGnzVC92_OCV0HKZ0NusdHs.roa
Signing time: Mon 02 Jan 2023 04:45:00 +0000
ROA not before: Mon 02 Jan 2023 04:45:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208365
IP address blocks: 81.22.33.0/24 maxlen: 24
81.22.35.0/24 maxlen: 24
81.22.32.0/24 maxlen: 24
81.22.34.0/24 maxlen: 24
45.151.76.0/24 maxlen: 24
31.223.186.0/24 maxlen: 24
45.151.78.0/24 maxlen: 24
45.151.77.0/24 maxlen: 24
45.151.79.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:cc:14:5d:8b:ab:76:1c:a3:cc:14:e1:3f:42:65:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20a7fcbe59314c372b68f232223828b1e33a03ec
Validity
Not Before: Jan 2 04:45:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ab4775869f3542f76fce095d07299d0dbac747b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:db:21:ca:14:96:f1:9e:9f:a9:9a:55:f8:93:
49:2f:c4:32:a9:47:55:94:e5:b4:04:af:57:59:00:
72:dd:88:85:5e:f4:59:34:cb:52:28:1c:74:33:8a:
4c:f3:cb:eb:6d:70:7f:dc:32:a7:f9:14:bc:01:3d:
7f:2f:a3:2e:4f:52:84:13:50:c1:25:a7:62:d2:67:
d3:73:07:ff:36:f7:64:71:02:75:be:78:fb:6e:f5:
cf:ec:7e:66:24:74:8c:f9:49:bc:e3:c6:9b:e7:17:
94:4f:d8:ce:d7:bc:86:6f:f4:60:59:00:86:2b:e7:
af:2e:81:5b:ec:82:c5:77:81:e2:36:87:4a:d2:a4:
03:8f:54:0a:b8:23:50:92:13:2b:09:e9:76:5e:65:
cc:a9:ed:9f:a5:06:25:13:ce:3f:eb:a0:0f:dd:4b:
17:b7:5b:83:15:e1:11:ad:35:63:aa:42:0a:47:87:
c5:33:27:10:ba:82:5c:c6:f3:d7:77:53:3a:01:c8:
8c:e0:dd:8f:51:19:7d:6f:67:aa:2c:68:2e:3f:5f:
e8:db:0d:6f:b1:ca:b8:42:cb:74:02:d7:f5:cf:f8:
28:22:6f:2d:79:20:2b:6c:da:ae:99:89:2a:8f:88:
5b:1c:a1:bd:72:28:67:d7:d3:81:8d:07:f1:4e:1d:
c7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B4:77:58:69:F3:54:2F:76:FC:E0:95:D0:72:99:D0:DB:AC:74:7B
X509v3 Authority Key Identifier:
keyid:20:A7:FC:BE:59:31:4C:37:2B:68:F2:32:22:38:28:B1:E3:3A:03:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IKf8vlkxTDcraPIyIjgoseM6A-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/mrR3WGnzVC92_OCV0HKZ0NusdHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.223.186.0/24
45.151.76.0/22
81.22.32.0/22
Signature Algorithm: sha256WithRSAEncryption
70:d8:45:2e:3a:7b:d3:03:e0:63:f3:5a:f5:c6:41:e2:e8:12:
29:1b:71:4a:00:23:5a:e3:a0:cc:b4:3d:a5:c4:68:e3:49:1d:
ca:7d:fa:66:57:7b:42:5e:82:f2:7c:38:68:8e:a2:56:a9:79:
8c:c8:d7:db:95:42:72:a1:32:9a:49:3b:6c:13:e5:a3:eb:45:
35:67:6b:6b:e8:21:ff:48:0e:89:8b:0f:bb:c2:54:5d:dd:db:
a4:f3:53:6f:d5:d7:32:05:bc:64:d2:be:47:c1:59:c2:f6:27:
8b:0a:ef:58:84:a6:43:00:7a:a9:9a:3b:3b:0e:8b:7d:ee:d7:
18:37:99:5d:aa:3c:c4:1f:33:ca:fe:e8:74:40:93:00:16:87:
21:3c:71:e3:5f:4b:82:1f:91:be:a0:59:9d:8a:f9:2a:eb:4d:
b8:cb:34:2c:f2:4b:e7:51:3b:66:b9:22:61:5b:cb:e8:8d:f3:
64:db:05:bc:1e:34:f5:d7:1c:66:6e:5c:d8:70:b0:c8:59:4e:
63:96:10:d9:cc:2b:11:41:06:ce:e5:f2:e2:ab:fc:da:56:f8:
71:39:90:cf:0a:cf:d1:5e:44:e6:8c:de:59:12:d8:c2:a4:58:
f0:fa:b3:05:11:e9:99:68:f8:f4:52:a4:88:28:2a:6b:1c:f1:
1e:ad:d5:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:52 2024 by rpki-client on console-fra.rpki-client.org