Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/RRz2owzXbzpQANvthWPi-0Jyzyw.roa
File: RRz2owzXbzpQANvthWPi-0Jyzyw.roa (raw, json)
Hash identifier: nlue69Uc91NkM2RfPh3PkTLtQzs43r4Mc42FovpLRO4=
Subject key identifier: 45:1C:F6:A3:0C:D7:6F:3A:50:00:DB:ED:85:63:E2:FB:42:72:CF:2C
Certificate issuer: /CN=84f824d32df1a5113d82101345d785a38addbde5
Certificate serial: 018B1F07A177074966449A2F980C7E8A84CD
Authority key identifier: 84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/RRz2owzXbzpQANvthWPi-0Jyzyw.roa
Signing time: Wed 11 Oct 2023 13:57:55 +0000
ROA not before: Wed 11 Oct 2023 13:57:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209854
IP address blocks: 93.119.125.0/24 maxlen: 24
46.102.178.0/24 maxlen: 24
46.102.177.0/24 maxlen: 24
46.102.179.0/24 maxlen: 24
89.35.90.0/24 maxlen: 24
86.104.2.0/24 maxlen: 24
86.104.1.0/24 maxlen: 24
86.104.0.0/24 maxlen: 24
176.223.160.0/24 maxlen: 24
93.114.51.0/24 maxlen: 24
89.37.93.0/24 maxlen: 24
89.37.94.0/24 maxlen: 24
86.106.116.0/24 maxlen: 24
89.40.207.0/24 maxlen: 24
86.104.213.0/24 maxlen: 24
86.104.212.0/24 maxlen: 24
188.208.221.0/24 maxlen: 24
188.208.220.0/24 maxlen: 24
188.208.223.0/24 maxlen: 24
188.209.125.0/24 maxlen: 24
188.209.124.0/24 maxlen: 24
193.30.255.0/24 maxlen: 24
89.41.27.0/24 maxlen: 24
77.81.91.0/24 maxlen: 24
77.81.90.0/24 maxlen: 24
89.42.154.0/24 maxlen: 24
89.39.69.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1f:07:a1:77:07:49:66:44:9a:2f:98:0c:7e:8a:84:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f824d32df1a5113d82101345d785a38addbde5
Validity
Not Before: Oct 11 13:57:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=451cf6a30cd76f3a5000dbed8563e2fb4272cf2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:24:61:05:b9:bc:52:47:fa:59:df:e2:b4:8b:
75:68:e8:10:20:f3:15:5a:cd:80:63:65:e9:44:69:
67:32:57:11:9f:e4:fc:8c:a3:bd:ed:04:fa:32:93:
30:8a:51:64:db:c7:bd:01:68:96:72:3a:46:37:18:
2a:da:b1:a3:32:a1:b1:a8:0b:e0:9d:c2:d4:31:54:
4a:63:37:53:2f:07:eb:eb:60:0e:be:ea:3c:11:ec:
ec:fa:a8:9b:23:2d:21:84:37:eb:8b:39:4a:16:30:
04:31:db:0f:97:77:ab:81:01:64:36:29:c0:11:8a:
2c:2f:dd:89:5b:b4:ec:3f:51:f8:3d:40:c7:22:bf:
93:56:5b:3a:31:78:65:98:9b:ee:d9:58:7c:80:52:
9e:c7:24:2a:ff:2a:ba:25:33:f9:99:90:a4:56:1e:
94:40:7c:6c:41:59:6b:83:c4:d7:0f:5f:6f:df:76:
8c:27:46:c9:ae:20:bc:ac:ed:f6:9f:fd:03:67:c8:
dc:76:0b:f2:3a:26:78:e7:ce:7a:61:a7:10:d0:2a:
d0:4b:c1:40:ef:00:6b:ab:29:40:fe:71:0d:3d:5d:
3d:1e:12:0d:23:7e:9f:2c:0e:61:fc:38:0d:c3:b8:
ec:e6:cd:21:cb:2e:7c:3b:76:ab:82:66:d1:a9:51:
3d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:1C:F6:A3:0C:D7:6F:3A:50:00:DB:ED:85:63:E2:FB:42:72:CF:2C
X509v3 Authority Key Identifier:
keyid:84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/RRz2owzXbzpQANvthWPi-0Jyzyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.177.0-46.102.179.255
77.81.90.0/23
86.104.0.0-86.104.2.255
86.104.212.0/23
86.106.116.0/24
89.35.90.0/24
89.37.93.0-89.37.94.255
89.39.69.0/24
89.40.207.0/24
89.41.27.0/24
89.42.154.0/24
93.114.51.0/24
93.119.125.0/24
176.223.160.0/24
188.208.220.0/23
188.208.223.0/24
188.209.124.0/23
193.30.255.0/24
Signature Algorithm: sha256WithRSAEncryption
86:15:05:21:92:89:32:61:70:f0:fe:89:d5:fb:ce:2c:a0:2c:
2a:f2:ce:82:1e:56:9d:27:b7:58:5a:a8:9c:63:10:59:46:b7:
51:31:94:ec:78:9a:fb:f6:c1:ec:7e:0c:64:44:ed:81:42:8d:
ea:f7:e4:47:2d:16:4f:a9:31:56:a9:46:a2:d6:52:43:a8:3b:
47:4e:99:d1:15:4e:4f:33:31:d5:0e:f7:8d:c1:c4:6f:bc:72:
a2:7c:be:32:57:11:a5:63:d6:1e:73:75:5c:4b:11:b1:d1:df:
ee:74:fe:fb:12:d9:b2:32:98:a4:a0:63:92:5a:c9:c8:4a:36:
f3:c1:25:43:fd:dd:e5:69:a3:47:cd:5d:e0:46:9c:bf:20:21:
f6:96:20:e1:5b:c2:d1:a9:f3:02:37:89:e5:d6:55:ca:95:aa:
8d:61:65:66:49:8f:fc:06:33:11:18:2a:80:ad:b2:0f:a7:d4:
51:20:84:1d:4e:71:6d:18:0c:1b:c0:9c:6d:99:8c:d2:f1:af:
37:70:bd:f5:bd:89:c6:63:40:ea:c2:bd:c0:b2:7f:e9:54:cd:
da:1f:ef:e5:fe:4b:b7:ec:bd:9f:e9:68:cf:6c:30:a4:52:d5:
a8:c1:d6:85:f0:86:24:0e:6c:b1:66:73:f9:87:27:a1:57:c6:
78:73:b7:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 11 14:47:28 2023 by rpki-client on console-fra.rpki-client.org