Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/RHBqMil15TKp_MAXKhRi1A1dqwk.roa
File: RHBqMil15TKp_MAXKhRi1A1dqwk.roa (raw, json)
Hash identifier: 3bBCXixP6+tf34jN8pYx7mTYP1JpxLsPSwzuM3GOQCI=
Subject key identifier: 44:70:6A:32:29:75:E5:32:A9:FC:C0:17:2A:14:62:D4:0D:5D:AB:09
Certificate issuer: /CN=84f824d32df1a5113d82101345d785a38addbde5
Certificate serial: 01880A3D4CE0F0D88D908C8233646997D236
Authority key identifier: 84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/RHBqMil15TKp_MAXKhRi1A1dqwk.roa
Signing time: Thu 11 May 2023 09:56:09 +0000
ROA not before: Thu 11 May 2023 09:56:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209854
IP address blocks: 89.37.94.0/24 maxlen: 24
86.106.116.0/24 maxlen: 24
188.208.221.0/24 maxlen: 24
188.208.220.0/24 maxlen: 24
188.208.223.0/24 maxlen: 24
188.209.125.0/24 maxlen: 24
188.209.124.0/24 maxlen: 24
193.30.255.0/24 maxlen: 24
89.41.27.0/24 maxlen: 24
93.119.125.0/24 maxlen: 24
46.102.178.0/24 maxlen: 24
46.102.177.0/24 maxlen: 24
46.102.179.0/24 maxlen: 24
86.104.1.0/24 maxlen: 24
86.104.0.0/24 maxlen: 24
176.223.160.0/24 maxlen: 24
77.81.91.0/24 maxlen: 24
77.81.90.0/24 maxlen: 24
89.42.154.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0a:3d:4c:e0:f0:d8:8d:90:8c:82:33:64:69:97:d2:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f824d32df1a5113d82101345d785a38addbde5
Validity
Not Before: May 11 09:56:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=44706a322975e532a9fcc0172a1462d40d5dab09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:89:cd:2d:a9:b6:09:14:71:26:3e:79:e8:7e:
a4:02:4a:0c:97:55:86:c8:42:4a:4b:f3:d8:00:d3:
df:c1:23:de:77:a1:f5:db:e1:0f:c7:e0:f3:1c:6a:
87:e2:be:71:a4:43:d1:f8:c5:fb:19:69:a1:07:d3:
94:7e:b7:c0:2c:7a:ab:ec:c0:9d:f2:40:eb:e9:a0:
03:4f:ad:f4:21:4e:31:d0:aa:0a:f3:9e:a0:57:0a:
3e:25:8f:7f:9b:0d:68:79:a5:8a:b6:3a:2d:5f:5a:
f7:94:47:c1:a4:e5:3d:82:5a:73:c3:cb:9f:06:37:
33:69:cc:39:6f:27:d1:e6:1f:f7:b9:fb:e1:18:06:
d7:ca:01:a1:1f:04:79:f7:4d:7c:67:9a:7a:1d:b0:
05:a2:1d:3e:1c:ef:76:73:36:f5:0e:58:26:2a:6e:
71:57:96:fe:e6:b5:24:c9:d7:18:9a:fc:f9:e2:7e:
d5:e1:5b:48:e5:82:ac:7d:cc:70:65:93:d7:dc:73:
53:f0:e9:88:bc:b0:eb:e7:b7:94:a9:0b:e6:93:2b:
06:d5:a5:6c:8a:18:46:e3:55:e2:db:d9:af:2d:f7:
8d:b6:9f:87:9d:79:ef:14:62:b9:f1:e5:58:c2:79:
50:96:8a:7a:70:69:3f:0c:99:46:c7:f7:e5:52:16:
9a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:70:6A:32:29:75:E5:32:A9:FC:C0:17:2A:14:62:D4:0D:5D:AB:09
X509v3 Authority Key Identifier:
keyid:84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/RHBqMil15TKp_MAXKhRi1A1dqwk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.177.0-46.102.179.255
77.81.90.0/23
86.104.0.0/23
86.106.116.0/24
89.37.94.0/24
89.41.27.0/24
89.42.154.0/24
93.119.125.0/24
176.223.160.0/24
188.208.220.0/23
188.208.223.0/24
188.209.124.0/23
193.30.255.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:19:f4:1f:85:69:55:51:77:fe:86:83:4d:d7:9b:48:b6:de:
df:28:9b:ea:b7:f0:f2:4d:74:45:61:61:70:3e:0c:12:9d:4e:
51:8a:19:1a:29:80:9a:7e:13:82:71:88:06:5d:d3:89:91:ba:
d4:b2:b5:4b:9d:5f:b5:9b:12:4c:dc:91:0c:3e:4d:0f:30:72:
a2:94:f4:f4:34:7c:ec:a2:b8:86:f1:4c:cf:75:b1:f6:28:33:
a5:48:f7:6b:25:0d:3d:fa:f9:cc:ae:fc:7f:dd:54:33:e9:34:
59:58:11:fb:2b:52:53:a6:a9:83:49:eb:13:f9:7d:e7:38:a1:
ce:94:33:f7:4a:65:e3:0f:bf:74:e2:b3:c1:14:8e:98:f3:6f:
8f:32:0b:9b:8b:af:78:bd:1c:ca:39:7e:1c:c5:49:5d:4c:45:
dd:8d:b2:88:81:08:f6:bc:05:a2:0e:e0:12:c5:e4:4f:93:c5:
ea:59:c6:9c:67:a4:10:fd:04:17:7a:e3:dc:c5:73:f6:9f:27:
58:5d:47:15:b7:29:13:53:ca:a8:93:ed:ce:0d:93:b7:8c:cf:
81:4a:1c:d9:ec:73:22:d0:64:d1:ce:40:06:2b:db:f7:d5:04:
80:6e:c6:eb:df:77:6d:99:b0:1e:62:24:06:55:0a:66:12:5a:
b7:af:12:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:34 2023 by rpki-client on console-fra.rpki-client.org