Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/7vxM-oNsmk_10no43u3li8ozd44.roa
File: 7vxM-oNsmk_10no43u3li8ozd44.roa (raw, json)
Hash identifier: LB3QJxqY+fS29nFeA0U94ALlkSG+ScoC3c2W9Q3b9JY=
Subject key identifier: EE:FC:4C:FA:83:6C:9A:4F:F5:D2:7A:38:DE:ED:E5:8B:CA:33:77:8E
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0185822D43BAC61E0458B9A5AA1BC258EF46
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/7vxM-oNsmk_10no43u3li8ozd44.roa
Signing time: Thu 05 Jan 2023 13:44:42 +0000
ROA not before: Thu 05 Jan 2023 13:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20712
IP address blocks: 45.92.3.0/24 maxlen: 24
45.89.37.0/24 maxlen: 24
45.140.134.0/24 maxlen: 24
45.89.39.0/24 maxlen: 24
91.190.97.0/24 maxlen: 24
91.190.105.0/24 maxlen: 24
45.88.23.0/24 maxlen: 24
45.88.21.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:82:2d:43:ba:c6:1e:04:58:b9:a5:aa:1b:c2:58:ef:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 5 13:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eefc4cfa836c9a4ff5d27a38deede58bca33778e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:36:41:74:9c:2d:6b:12:a1:ec:5e:f7:91:dc:
41:2e:45:30:4a:e1:9f:23:d2:5a:53:05:c7:05:41:
f9:70:bd:1a:57:50:cb:a0:61:14:58:57:5a:23:62:
6f:7b:88:7b:98:0b:09:ec:48:98:ad:ca:9b:9f:96:
65:cf:66:46:68:8f:84:bf:34:27:d6:8e:ea:d1:2e:
be:3e:e8:81:86:bc:d8:7b:32:17:77:d6:65:3a:9f:
31:80:ce:91:77:df:e9:a7:64:80:1a:b9:c5:a1:93:
ea:10:ed:41:2b:15:3f:b1:67:85:a1:da:d0:9b:3c:
46:75:2b:48:1d:0a:cd:a8:dc:aa:09:22:9d:71:07:
cc:cb:72:c7:87:f7:12:83:45:70:1a:03:f7:d6:63:
f6:7a:95:e6:82:5f:72:f7:80:59:49:91:10:81:26:
63:08:28:5c:5e:8e:20:72:cf:1f:7d:57:b0:03:e9:
09:f4:83:4f:a9:35:30:f4:47:77:5f:a5:b5:d5:63:
86:33:cf:2c:3c:d9:54:f0:f3:67:3a:86:0c:8f:9a:
cc:8e:1d:72:1f:b1:5f:4c:e7:5d:6e:97:07:93:fa:
6c:60:1a:23:a7:2b:7c:63:f4:28:5f:21:c6:f1:08:
db:67:60:f1:45:11:31:81:5d:02:c1:a8:19:d5:34:
05:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:FC:4C:FA:83:6C:9A:4F:F5:D2:7A:38:DE:ED:E5:8B:CA:33:77:8E
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/7vxM-oNsmk_10no43u3li8ozd44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.21.0/24
45.88.23.0/24
45.89.37.0/24
45.89.39.0/24
45.92.3.0/24
45.140.134.0/24
91.190.97.0/24
91.190.105.0/24
Signature Algorithm: sha256WithRSAEncryption
20:36:19:6c:94:d0:d0:12:cb:34:60:9c:9e:75:1d:68:6d:ca:
07:57:93:5e:a6:42:18:24:f3:1d:9f:77:f4:68:8d:64:21:da:
a3:0c:5f:4a:ed:a4:fc:36:f0:1f:6d:32:1c:96:7e:8c:0a:9f:
d1:b5:fc:c5:01:76:02:4d:7b:2f:9a:2b:41:fd:71:24:3e:70:
c6:ea:80:6e:c9:a7:99:6d:9f:0d:ed:d6:eb:c2:67:5d:44:49:
27:6c:49:a9:46:59:dd:89:ab:71:5e:01:7f:24:a9:a2:f2:92:
1a:82:53:d1:f3:bd:a6:b4:74:cd:1e:bf:26:f7:3e:da:01:43:
01:82:1c:2a:01:9c:65:a0:90:35:22:38:15:85:49:49:a3:bf:
28:e3:15:67:e1:d5:2b:ff:77:45:37:63:5d:7a:75:ca:57:d1:
ae:19:a7:a0:4b:85:96:33:e1:0b:d2:ab:da:36:3b:75:4c:df:
e5:da:fd:cc:5a:aa:b7:29:48:5c:6a:8e:78:5e:00:cd:5d:72:
d0:c8:05:b8:ab:9e:fc:ea:81:17:6c:5c:bc:a9:84:03:a4:0d:
d3:1b:47:db:76:f6:6b:70:c6:f1:95:10:0f:78:93:af:91:c1:
14:00:ee:3b:66:2b:23:bb:50:ad:7c:e8:1a:de:f1:e5:d9:eb:
9e:84:4a:4d
-----BEGIN CERTIFICATE-----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Generated at Tue Oct 17 16:29:17 2023 by rpki-client on console-ams.rpki-client.org