Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/31f27a-b57b-4780-84d0-271bd72cdf69/1/TAdj_fXiRekoWq-XpoUx3bdQg_0.roa
File: TAdj_fXiRekoWq-XpoUx3bdQg_0.roa (raw, json)
Hash identifier: WJm9T+Whvl0HBzF5H9OiOVSjAhvK1Jze1nh9jy2vXto=
Subject key identifier: 4C:07:63:FD:F5:E2:45:E9:28:5A:AF:97:A6:85:31:DD:B7:50:83:FD
Certificate issuer: /CN=7ae62148b30b66bd0a3da3897ecfbfd9af4f431e
Certificate serial: 0185715550F44638C34B12F9739EA650E5BA
Authority key identifier: 7A:E6:21:48:B3:0B:66:BD:0A:3D:A3:89:7E:CF:BF:D9:AF:4F:43:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/euYhSLMLZr0KPaOJfs-_2a9PQx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/31f27a-b57b-4780-84d0-271bd72cdf69/1/TAdj_fXiRekoWq-XpoUx3bdQg_0.roa
Signing time: Mon 02 Jan 2023 07:14:54 +0000
ROA not before: Mon 02 Jan 2023 07:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24592
IP address blocks: 217.13.112.0/24 maxlen: 24
217.13.116.0/24 maxlen: 24
217.13.115.0/24 maxlen: 24
217.13.114.0/24 maxlen: 24
217.13.112.0/20 maxlen: 20
217.13.113.0/24 maxlen: 24
217.13.118.0/24 maxlen: 24
217.13.117.0/24 maxlen: 24
185.86.35.0/24 maxlen: 24
185.86.34.0/24 maxlen: 24
185.86.33.0/24 maxlen: 24
185.86.32.0/24 maxlen: 24
185.86.32.0/22 maxlen: 22
212.92.32.0/24 maxlen: 24
212.92.38.0/24 maxlen: 24
212.92.37.0/24 maxlen: 24
212.92.36.0/24 maxlen: 24
212.92.35.0/24 maxlen: 24
212.92.34.0/24 maxlen: 24
212.92.32.0/19 maxlen: 19
212.92.33.0/24 maxlen: 24
212.92.44.0/24 maxlen: 24
212.92.43.0/24 maxlen: 24
212.92.42.0/24 maxlen: 24
212.92.41.0/24 maxlen: 24
212.92.40.0/24 maxlen: 24
212.92.39.0/24 maxlen: 24
212.92.46.0/24 maxlen: 24
212.92.45.0/24 maxlen: 24
212.92.51.0/24 maxlen: 24
212.92.50.0/24 maxlen: 24
212.92.49.0/24 maxlen: 24
212.92.48.0/24 maxlen: 24
212.92.47.0/24 maxlen: 24
212.92.52.0/24 maxlen: 24
212.92.58.0/24 maxlen: 24
212.92.57.0/24 maxlen: 24
212.92.56.0/24 maxlen: 24
212.92.55.0/24 maxlen: 24
212.92.54.0/24 maxlen: 24
212.92.53.0/24 maxlen: 24
212.92.59.0/24 maxlen: 24
212.92.63.0/24 maxlen: 24
212.92.62.0/24 maxlen: 24
212.92.61.0/24 maxlen: 24
212.92.60.0/22 maxlen: 22
212.92.60.0/24 maxlen: 24
89.45.38.0/24 maxlen: 24
89.45.37.0/24 maxlen: 24
89.45.36.0/22 maxlen: 22
89.45.36.0/24 maxlen: 24
89.45.39.0/24 maxlen: 24
217.13.125.0/24 maxlen: 24
217.13.124.0/24 maxlen: 24
217.13.123.0/24 maxlen: 24
217.13.122.0/24 maxlen: 24
217.13.121.0/24 maxlen: 24
217.13.120.0/24 maxlen: 24
217.13.119.0/24 maxlen: 24
217.13.127.0/24 maxlen: 24
217.13.126.0/24 maxlen: 24
2a02:23c8::/40 maxlen: 40
2a02:23c8:ff00::/40 maxlen: 40
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:55:50:f4:46:38:c3:4b:12:f9:73:9e:a6:50:e5:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ae62148b30b66bd0a3da3897ecfbfd9af4f431e
Validity
Not Before: Jan 2 07:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c0763fdf5e245e9285aaf97a68531ddb75083fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:52:66:fe:98:6a:fd:25:fb:33:bb:f9:0d:5a:
5f:4a:8c:21:61:09:b1:da:8f:ae:ee:50:98:be:3d:
51:8b:ac:00:ff:6f:a7:eb:19:91:fa:90:82:f9:04:
80:b4:f1:c4:bc:01:59:5c:92:8d:21:ad:24:81:70:
ff:48:ca:e5:0a:ff:79:89:90:02:f1:2e:80:d1:da:
6c:44:7e:ca:bb:61:1a:80:a0:d6:ec:08:bd:b0:f8:
f2:5b:00:17:c1:6b:7e:cf:a0:e6:42:fa:e4:ac:99:
ad:b2:86:b2:65:bb:0d:36:15:a5:3a:21:d1:df:9b:
d7:17:78:76:bc:4e:cb:6d:e7:bc:f6:be:3f:f5:da:
e0:26:08:bf:4f:ff:a3:db:3b:e4:cb:ec:ce:7c:dd:
4d:db:9e:6e:b9:86:4e:e8:1c:9f:52:6e:d9:99:db:
c0:7e:0b:fb:73:8a:b1:2a:5e:43:d3:4a:1f:78:59:
08:3e:62:fd:a0:51:e8:94:18:f1:e0:8a:84:f4:9f:
de:22:c7:af:2a:f8:87:c8:ba:94:b7:79:10:37:db:
0a:d9:95:5a:ed:6e:62:db:d2:7b:67:b6:84:7e:f2:
f8:50:86:e1:59:e5:41:25:f0:4c:ac:68:03:8b:22:
aa:91:e6:54:a1:f3:3b:0c:de:05:86:c9:01:b0:28:
d7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:07:63:FD:F5:E2:45:E9:28:5A:AF:97:A6:85:31:DD:B7:50:83:FD
X509v3 Authority Key Identifier:
keyid:7A:E6:21:48:B3:0B:66:BD:0A:3D:A3:89:7E:CF:BF:D9:AF:4F:43:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/euYhSLMLZr0KPaOJfs-_2a9PQx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/31f27a-b57b-4780-84d0-271bd72cdf69/1/TAdj_fXiRekoWq-XpoUx3bdQg_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/31f27a-b57b-4780-84d0-271bd72cdf69/1/euYhSLMLZr0KPaOJfs-_2a9PQx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.45.36.0/22
185.86.32.0/22
212.92.32.0/19
217.13.112.0/20
IPv6:
2a02:23c8::/40
2a02:23c8:ff00::/40
Signature Algorithm: sha256WithRSAEncryption
35:68:16:3d:0b:dd:c9:21:5f:a7:8e:d4:c0:be:5c:10:78:86:
3d:42:6d:9e:6d:87:29:3a:b9:69:3e:4a:e4:ff:4b:10:74:09:
2e:34:15:9c:47:37:13:db:72:8c:b8:8b:e8:21:53:1a:80:bd:
d2:ec:3e:2c:07:2b:c3:56:14:89:b7:5c:15:74:df:1d:c1:01:
f7:fa:52:65:23:84:59:9b:73:96:81:57:04:ce:42:53:19:63:
20:3b:58:8f:13:01:b8:8e:3a:21:18:80:8d:7e:62:c9:84:72:
88:22:c8:47:a8:0c:9d:07:29:81:86:47:dd:c6:a2:42:5e:ed:
6f:92:d6:a4:a0:2e:e1:4e:bc:a2:b0:81:e5:ad:00:08:7d:ba:
18:e4:61:6d:b7:af:1a:1d:6e:b7:b0:c2:a2:45:23:fb:4c:e2:
12:6d:31:6d:bc:1b:38:15:20:3f:e4:0a:88:40:e2:10:72:b9:
6b:31:04:14:d9:ad:99:aa:52:82:e6:7e:04:08:e7:29:ec:1f:
9e:99:89:cf:8f:a1:5f:00:bb:bc:2d:73:61:e7:5e:52:05:8b:
3b:d0:62:b7:2c:d9:1a:20:af:9f:a7:38:28:86:1b:b3:1a:8f:
1d:8a:f0:86:93:2c:4c:95:c9:46:77:8a:3a:ff:97:d6:04:43:
a0:91:0c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:23 2023 by rpki-client on console-ams.rpki-client.org