Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/hOZ1e8lS-v6s1gruNgep1nLJJ_4.roa
File: hOZ1e8lS-v6s1gruNgep1nLJJ_4.roa (raw, json)
Hash identifier: SZiIteKQKLLYdPRVn42fZG0liJFKCz3FDdTuWdeQe5Q=
Subject key identifier: 84:E6:75:7B:C9:52:FA:FE:AC:D6:0A:EE:36:07:A9:D6:72:C9:27:FE
Certificate issuer: /CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Certificate serial: 01856E7909912159C0D09FE0908BE923710C
Authority key identifier: F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/hOZ1e8lS-v6s1gruNgep1nLJJ_4.roa
Signing time: Sun 01 Jan 2023 17:55:04 +0000
ROA not before: Sun 01 Jan 2023 17:55:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40676
IP address blocks: 147.189.131.0/24 maxlen: 24
147.189.128.0/24 maxlen: 24
147.189.134.0/24 maxlen: 24
147.189.135.0/24 maxlen: 24
147.189.138.0/24 maxlen: 24
45.14.113.0/24 maxlen: 24
176.111.217.0/24 maxlen: 24
2.56.8.0/24 maxlen: 24
2.56.9.0/24 maxlen: 24
5.183.76.0/24 maxlen: 24
2a0e:c80:323::/48 maxlen: 48
2a0e:c80:403::/48 maxlen: 48
2a0e:c80:3::/48 maxlen: 48
2a0e:c80:743::/48 maxlen: 48
2a0f:9980:195::/48 maxlen: 48
2a0f:9980:598::/48 maxlen: 48
2a0f:9980:936::/48 maxlen: 48
2a0f:9980:6::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:79:09:91:21:59:c0:d0:9f:e0:90:8b:e9:23:71:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Validity
Not Before: Jan 1 17:55:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=84e6757bc952fafeacd60aee3607a9d672c927fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:af:14:78:ed:e4:7b:de:47:fe:dc:45:7b:3f:
f5:3e:78:09:b1:ad:a4:74:71:c1:d7:52:11:3d:d7:
21:7a:91:67:b9:71:aa:40:f2:c7:76:7a:34:e3:d5:
97:10:12:33:83:c6:6e:82:ad:22:44:8c:c8:54:d4:
f6:8a:07:91:79:6c:56:ce:0c:b8:56:ad:43:2a:ce:
40:79:6d:2a:29:1a:af:ae:d4:1b:fd:89:fe:d7:ac:
05:c7:0e:72:d5:8a:63:8a:67:8f:cc:d9:0c:cb:05:
a6:f3:f4:94:6a:26:cd:8f:8e:90:a6:e1:c8:e6:5a:
f3:12:1f:4d:34:2a:24:87:1d:db:f4:4e:da:1b:91:
f6:3b:09:1d:32:9e:e9:df:a8:fd:5a:26:b0:88:0c:
92:6b:84:3d:83:0d:2e:e8:3c:0b:0b:ff:c6:0e:89:
53:10:63:4c:40:88:2b:a2:a4:1d:a0:29:55:75:fe:
fd:bd:b7:a8:e7:41:2c:89:f0:f6:35:79:df:12:52:
f1:2b:c3:c4:f3:19:0e:98:e2:12:53:a2:c6:2c:b0:
77:37:f0:fb:64:ce:59:79:07:49:b7:a6:00:08:f6:
4d:1e:eb:be:a2:6d:da:6d:66:5c:d0:e3:06:12:9a:
c2:68:a8:9a:08:ab:97:c0:ef:f5:1e:a5:6d:ed:3d:
c7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:E6:75:7B:C9:52:FA:FE:AC:D6:0A:EE:36:07:A9:D6:72:C9:27:FE
X509v3 Authority Key Identifier:
keyid:F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/hOZ1e8lS-v6s1gruNgep1nLJJ_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.8.0/23
5.183.76.0/24
45.14.113.0/24
147.189.128.0/24
147.189.131.0/24
147.189.134.0/23
147.189.138.0/24
176.111.217.0/24
IPv6:
2a0e:c80:3::/48
2a0e:c80:323::/48
2a0e:c80:403::/48
2a0e:c80:743::/48
2a0f:9980:6::/48
2a0f:9980:195::/48
2a0f:9980:598::/48
2a0f:9980:936::/48
Signature Algorithm: sha256WithRSAEncryption
9d:19:05:d5:51:ba:79:67:4e:39:2b:37:ca:f5:5f:70:83:36:
6c:0a:a4:80:84:6f:1e:c3:1a:2c:d9:b0:66:b9:0d:c9:66:1d:
cb:84:92:77:53:da:bd:95:03:fa:06:75:87:ac:0e:3f:60:1e:
13:a7:c3:1d:ef:cb:2c:06:ee:56:c5:c0:24:23:51:24:a3:ae:
b1:13:08:03:9d:33:8c:e0:ab:50:42:be:40:67:57:54:e1:0b:
a4:16:56:df:52:ed:d2:1d:6a:20:02:0e:5d:62:6b:39:f1:c1:
b9:bc:d9:4d:8e:e5:79:d3:e2:c9:25:5f:d8:d1:b9:6d:9f:99:
03:19:75:57:86:29:f8:77:0f:11:c7:7d:d0:c2:cb:52:d0:54:
fb:fe:1a:16:35:56:71:00:69:1c:8f:73:a1:32:c7:5b:e4:67:
9d:cb:23:a4:24:a9:3a:d3:6c:7b:bb:30:a0:66:58:bd:3b:58:
05:b2:a5:e7:e1:45:01:f0:72:4c:fd:a8:f9:67:86:d9:4a:a1:
fa:5e:c1:81:89:1b:8d:3a:ba:3f:55:69:98:5a:99:fb:36:14:
c9:01:78:c7:07:f2:9d:b8:5d:98:b8:64:6c:81:f5:40:64:a0:
07:91:db:f8:ce:67:cc:5d:77:50:d7:d8:9f:99:16:75:10:cc:
3c:05:4c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:34 2023 by rpki-client on console-ams.rpki-client.org