Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/RQyYl8Hsuw7ntZAQVfqJiF6ImRk.roa
File: RQyYl8Hsuw7ntZAQVfqJiF6ImRk.roa (raw, json)
Hash identifier: +FA+H2jX2UsThqgCHr6BmS2On8fm9yZxgbjcBR9jtHw=
Subject key identifier: 45:0C:98:97:C1:EC:BB:0E:E7:B5:90:10:55:FA:89:88:5E:88:99:19
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0189CF9333DC140B85BD82E56261B1E510C9
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/RQyYl8Hsuw7ntZAQVfqJiF6ImRk.roa
Signing time: Mon 07 Aug 2023 10:37:58 +0000
ROA not before: Mon 07 Aug 2023 10:37:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 45.130.200.0/24 maxlen: 24
188.241.243.0/24 maxlen: 24
185.255.39.0/24 maxlen: 24
188.214.209.0/24 maxlen: 24
185.241.210.0/23 maxlen: 24
188.241.214.0/24 maxlen: 24
93.115.255.0/24 maxlen: 24
93.115.254.0/23 maxlen: 24
188.213.203.0/24 maxlen: 24
188.213.202.0/24 maxlen: 24
193.23.129.0/24 maxlen: 24
193.23.128.0/24 maxlen: 24
213.232.93.0/24 maxlen: 24
213.232.92.0/24 maxlen: 24
213.232.94.0/23 maxlen: 24
45.156.157.0/24 maxlen: 24
89.33.85.0/24 maxlen: 24
89.33.84.0/24 maxlen: 24
185.255.169.0/24 maxlen: 24
185.255.170.0/23 maxlen: 24
185.255.170.0/24 maxlen: 24
89.35.154.0/24 maxlen: 24
89.35.155.0/24 maxlen: 24
188.212.132.0/24 maxlen: 24
188.212.133.0/24 maxlen: 24
188.212.155.0/24 maxlen: 24
188.212.158.0/24 maxlen: 24
87.247.148.0/24 maxlen: 24
87.247.150.0/24 maxlen: 24
87.247.149.0/24 maxlen: 24
87.247.151.0/24 maxlen: 24
188.240.224.0/24 maxlen: 24
188.240.225.0/24 maxlen: 24
188.240.230.0/24 maxlen: 24
188.240.227.0/24 maxlen: 24
188.240.233.0/24 maxlen: 24
91.188.205.0/24 maxlen: 24
91.188.204.0/24 maxlen: 24
91.188.206.0/24 maxlen: 24
91.188.207.0/24 maxlen: 24
89.37.63.0/24 maxlen: 24
185.135.140.0/24 maxlen: 24
185.135.141.0/24 maxlen: 24
185.135.143.0/24 maxlen: 24
185.238.10.0/24 maxlen: 24
188.241.110.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:cf:93:33:dc:14:0b:85:bd:82:e5:62:61:b1:e5:10:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Aug 7 10:37:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=450c9897c1ecbb0ee7b5901055fa89885e889919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:09:8a:9e:a1:4f:38:7c:34:cb:16:3f:f3:23:
7b:fa:7b:d5:80:82:a4:a4:d9:53:7d:e2:dd:4a:f2:
65:c0:e1:67:f5:36:01:68:26:01:4d:0b:59:6a:d5:
bb:db:e4:47:4e:3a:9f:fd:1b:6a:78:60:4e:06:a3:
5c:65:0b:e8:39:d5:7b:f7:8e:99:05:c2:86:d9:fc:
04:f1:b0:cf:e8:93:88:e9:48:cd:cf:e6:6d:5f:94:
21:bd:c4:a3:79:ba:93:49:5a:30:ef:d0:d9:a7:a0:
b3:71:3a:e8:26:20:bc:ee:53:73:53:1b:22:a4:e9:
13:39:82:b0:f7:6d:4e:20:4e:e2:48:d5:bd:06:8d:
4a:1e:15:3a:80:8f:e3:95:db:9e:f7:b3:1a:8f:fe:
05:9e:f5:9b:94:89:69:e0:b5:75:33:6b:ea:5e:00:
0f:f5:78:a9:49:ef:91:fd:8b:27:2c:6f:f8:3f:28:
b4:b2:92:23:ca:ff:6c:12:56:be:80:a7:0e:ec:a6:
61:49:59:62:24:77:c2:15:13:25:1b:de:b6:51:f3:
99:4a:fb:90:3d:31:c8:b6:05:83:23:f2:f8:4f:71:
96:af:4b:2b:7e:a6:2b:ad:1a:d1:f8:22:09:d3:a1:
9c:f8:c5:71:8a:97:c5:8a:a4:28:9f:f9:ad:23:68:
f0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:0C:98:97:C1:EC:BB:0E:E7:B5:90:10:55:FA:89:88:5E:88:99:19
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/RQyYl8Hsuw7ntZAQVfqJiF6ImRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.200.0/24
45.156.157.0/24
87.247.148.0/22
89.33.84.0/23
89.35.154.0/23
89.37.63.0/24
91.188.204.0/22
93.115.254.0/23
185.135.140.0/23
185.135.143.0/24
185.238.10.0/24
185.241.210.0/23
185.255.39.0/24
185.255.169.0-185.255.171.255
188.212.132.0/23
188.212.155.0/24
188.212.158.0/24
188.213.202.0/23
188.214.209.0/24
188.240.224.0/23
188.240.227.0/24
188.240.230.0/24
188.240.233.0/24
188.241.110.0/24
188.241.214.0/24
188.241.243.0/24
193.23.128.0/23
213.232.92.0/22
Signature Algorithm: sha256WithRSAEncryption
13:05:d3:96:1d:75:ea:e7:3e:91:9e:40:03:9a:b7:ae:2e:e2:
18:35:20:55:74:f4:14:da:56:95:d6:1f:95:8d:a7:ce:36:c6:
a9:71:48:1a:46:19:9c:37:8f:0b:3d:dc:58:23:c2:66:8e:01:
2c:f5:5f:eb:bc:be:c7:45:e7:8c:e3:a4:53:34:46:39:0c:6b:
c9:9d:35:19:ab:2f:e7:e9:27:bf:56:63:ae:53:c0:ce:77:dc:
66:8e:a2:94:17:7d:56:5e:d7:cf:94:7f:93:ed:85:82:6e:f7:
a9:fd:f8:ef:a1:12:17:53:78:ef:04:0b:32:4c:94:70:c8:e3:
7e:52:46:6f:44:3e:74:c1:84:a9:72:7a:1d:9a:da:06:d2:f6:
96:9b:8b:00:df:9c:7a:b5:1a:ab:9a:2e:8f:62:52:cc:4d:df:
c5:40:9b:a0:f7:f3:c1:17:b1:f3:bc:97:52:af:dc:0a:97:16:
0c:62:0c:19:71:b9:de:3a:21:74:c6:30:fc:e4:58:08:5c:b1:
8b:49:79:37:4b:67:f2:f2:52:c4:58:98:23:43:09:07:e8:97:
99:5e:7d:7a:2f:c6:8d:30:83:d9:93:a3:69:92:14:48:52:16:
05:2a:34:4c:94:8e:aa:b9:80:29:2c:a4:c3:77:3d:35:b7:b3:
cf:1b:1a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 16 07:50:15 2023 by rpki-client on console-fra.rpki-client.org