Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/QS7I6bZ1U18L8yGztzbpMj8D_8g.roa
File: QS7I6bZ1U18L8yGztzbpMj8D_8g.roa (raw, json)
Hash identifier: wWu9CboSlD1X1KPYAnLqxYTqVc4Nhma8bogUjFwn6rw=
Subject key identifier: 41:2E:C8:E9:B6:75:53:5F:0B:F3:21:B3:B7:36:E9:32:3F:03:FF:C8
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018A150CA57926B1869C2E6B108888DC9FC7
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/QS7I6bZ1U18L8yGztzbpMj8D_8g.roa
Signing time: Sun 20 Aug 2023 22:24:24 +0000
ROA not before: Sun 20 Aug 2023 22:24:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 188.241.243.0/24 maxlen: 24
185.255.39.0/24 maxlen: 24
188.214.209.0/24 maxlen: 24
185.241.210.0/23 maxlen: 24
188.241.214.0/24 maxlen: 24
93.115.255.0/24 maxlen: 24
93.115.254.0/23 maxlen: 24
188.213.203.0/24 maxlen: 24
188.213.202.0/24 maxlen: 24
193.23.129.0/24 maxlen: 24
193.23.128.0/24 maxlen: 24
213.232.93.0/24 maxlen: 24
213.232.92.0/24 maxlen: 24
213.232.94.0/23 maxlen: 24
45.156.157.0/24 maxlen: 24
89.33.85.0/24 maxlen: 24
89.33.84.0/24 maxlen: 24
185.255.169.0/24 maxlen: 24
185.255.170.0/23 maxlen: 24
185.255.170.0/24 maxlen: 24
89.35.154.0/24 maxlen: 24
89.35.155.0/24 maxlen: 24
188.212.132.0/24 maxlen: 24
188.212.133.0/24 maxlen: 24
188.212.155.0/24 maxlen: 24
188.212.158.0/24 maxlen: 24
87.247.148.0/24 maxlen: 24
87.247.150.0/24 maxlen: 24
87.247.149.0/24 maxlen: 24
87.247.151.0/24 maxlen: 24
188.240.224.0/24 maxlen: 24
188.240.225.0/24 maxlen: 24
188.240.227.0/24 maxlen: 24
188.240.233.0/24 maxlen: 24
91.188.205.0/24 maxlen: 24
91.188.204.0/24 maxlen: 24
91.188.206.0/24 maxlen: 24
91.188.207.0/24 maxlen: 24
89.37.63.0/24 maxlen: 24
185.135.140.0/24 maxlen: 24
185.135.141.0/24 maxlen: 24
185.135.143.0/24 maxlen: 24
185.238.10.0/24 maxlen: 24
188.241.110.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:15:0c:a5:79:26:b1:86:9c:2e:6b:10:88:88:dc:9f:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Aug 20 22:24:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=412ec8e9b675535f0bf321b3b736e9323f03ffc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8f:af:3d:c0:68:67:e7:6c:5f:0e:93:2d:ee:
07:2b:cb:f1:5a:d0:39:a8:9e:ce:79:62:a0:26:8b:
01:4f:00:66:2a:f9:a5:66:b3:15:75:fc:a3:f2:37:
f5:8c:80:7b:e6:7a:77:77:91:56:76:fc:2f:37:a1:
89:8f:d7:eb:d2:ff:0f:a4:d7:d5:a5:26:d9:43:43:
39:32:6e:d6:01:f1:89:b1:61:a5:86:81:fc:36:13:
88:c7:7a:3d:ed:63:37:d5:b3:38:c3:65:2c:b1:0a:
c6:47:15:19:01:ea:b4:e5:0d:90:c0:a1:2e:62:72:
51:86:22:cc:ca:5d:54:c7:cd:3e:fa:09:aa:a4:07:
1b:02:89:a6:f2:53:9c:00:4f:dc:c0:c2:5f:77:1f:
e0:e6:c3:4b:84:e3:bc:81:bf:29:d7:cd:e0:e9:68:
33:4e:f6:68:2f:0d:c2:c6:4b:69:e2:8b:56:f6:0d:
4f:93:66:c3:7d:97:0a:f0:d7:40:e4:6a:02:1c:dc:
db:45:cc:09:a6:81:ad:ee:26:de:1d:f4:09:28:f0:
6c:a4:e5:44:42:2b:57:59:45:f2:a6:aa:46:6c:14:
0b:c0:40:7a:48:8a:bb:5a:41:ae:43:02:59:4a:b6:
99:cf:ae:1a:40:dc:4f:e3:74:64:cd:ea:8b:05:0b:
14:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:2E:C8:E9:B6:75:53:5F:0B:F3:21:B3:B7:36:E9:32:3F:03:FF:C8
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/QS7I6bZ1U18L8yGztzbpMj8D_8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.157.0/24
87.247.148.0/22
89.33.84.0/23
89.35.154.0/23
89.37.63.0/24
91.188.204.0/22
93.115.254.0/23
185.135.140.0/23
185.135.143.0/24
185.238.10.0/24
185.241.210.0/23
185.255.39.0/24
185.255.169.0-185.255.171.255
188.212.132.0/23
188.212.155.0/24
188.212.158.0/24
188.213.202.0/23
188.214.209.0/24
188.240.224.0/23
188.240.227.0/24
188.240.233.0/24
188.241.110.0/24
188.241.214.0/24
188.241.243.0/24
193.23.128.0/23
213.232.92.0/22
Signature Algorithm: sha256WithRSAEncryption
04:ee:bb:1a:d7:07:00:f7:3e:3b:aa:fc:da:d9:c5:2c:cb:f3:
86:c8:0f:05:b0:42:f7:65:96:70:8c:ae:3d:36:dc:f1:c4:d4:
05:ba:c9:fb:31:67:72:ae:9e:79:38:5b:85:22:9f:33:09:b2:
5b:3c:4d:fa:be:b4:6d:db:50:17:89:6e:27:9e:2d:f1:dc:44:
be:56:67:d1:74:87:90:25:2a:6a:ff:6a:82:82:8d:24:0b:e3:
ec:97:02:4c:f7:23:f3:0f:fd:d8:8f:32:f2:8a:6a:4b:f1:b8:
7a:38:9f:78:79:bd:f6:23:b2:a6:83:1a:6d:1b:36:34:5e:c0:
40:9b:ee:b0:ca:be:ff:7c:91:84:11:f0:29:06:45:19:65:80:
3e:3e:12:68:48:0f:5c:ca:11:75:fd:ea:2a:dc:22:2e:5d:ef:
50:0f:20:47:69:e4:ea:6e:09:3a:e7:fb:7c:d9:fc:ba:19:21:
62:5a:5b:7e:41:54:56:0c:51:77:0a:81:9f:44:2d:f1:87:a0:
3c:4a:c5:e2:ff:f8:64:7f:11:f9:a4:7f:93:12:ba:61:bc:71:
1d:7d:c4:be:7f:21:cf:1f:a2:c3:53:d9:a9:da:aa:96:b5:1f:
e6:d5:83:ee:0c:97:40:6d:67:8b:d7:f0:1e:f5:f8:35:98:a0:
2f:88:84:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 29 18:05:02 2023 by rpki-client on console-ams.rpki-client.org