Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Rd562192F4O2YVbcqczQC9z-bTM.roa
File: Rd562192F4O2YVbcqczQC9z-bTM.roa (raw, json)
Hash identifier: ov+oYeW3eMoqd7qg78ORyqeu2AnkFJxn+y4UF++sRjA=
Subject key identifier: 45:DE:7A:DB:5F:76:17:83:B6:61:56:DC:A9:CC:D0:0B:DC:FE:6D:33
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018A69916C3FB076B39BD8EFE64D7D2BB525
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Rd562192F4O2YVbcqczQC9z-bTM.roa
Signing time: Wed 06 Sep 2023 08:17:32 +0000
ROA not before: Wed 06 Sep 2023 08:17:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 188.241.242.0/24 maxlen: 24
188.241.243.0/24 maxlen: 24
185.255.39.0/24 maxlen: 24
188.214.209.0/24 maxlen: 24
185.241.210.0/23 maxlen: 24
93.115.255.0/24 maxlen: 24
93.115.254.0/23 maxlen: 24
188.213.203.0/24 maxlen: 24
188.213.202.0/24 maxlen: 24
193.23.129.0/24 maxlen: 24
193.23.128.0/24 maxlen: 24
213.232.93.0/24 maxlen: 24
213.232.92.0/24 maxlen: 24
217.74.16.0/24 maxlen: 24
213.232.94.0/23 maxlen: 24
45.156.157.0/24 maxlen: 24
89.33.85.0/24 maxlen: 24
89.33.84.0/24 maxlen: 24
185.255.169.0/24 maxlen: 24
185.255.170.0/23 maxlen: 24
185.255.170.0/24 maxlen: 24
89.35.154.0/24 maxlen: 24
188.212.133.0/24 maxlen: 24
188.212.155.0/24 maxlen: 24
188.212.158.0/24 maxlen: 24
87.247.148.0/24 maxlen: 24
87.247.150.0/24 maxlen: 24
87.247.149.0/24 maxlen: 24
87.247.151.0/24 maxlen: 24
188.240.224.0/24 maxlen: 24
188.240.225.0/24 maxlen: 24
188.240.227.0/24 maxlen: 24
188.240.233.0/24 maxlen: 24
91.188.205.0/24 maxlen: 24
91.188.204.0/24 maxlen: 24
91.188.206.0/24 maxlen: 24
91.188.207.0/24 maxlen: 24
89.37.63.0/24 maxlen: 24
45.146.184.0/22 maxlen: 24
185.135.140.0/24 maxlen: 24
185.135.141.0/24 maxlen: 24
185.135.143.0/24 maxlen: 24
185.238.10.0/24 maxlen: 24
188.241.110.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:69:91:6c:3f:b0:76:b3:9b:d8:ef:e6:4d:7d:2b:b5:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Sep 6 08:17:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=45de7adb5f761783b66156dca9ccd00bdcfe6d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:30:fb:49:60:33:e8:52:fe:8a:77:51:02:1f:
12:2c:9f:76:14:aa:da:0a:1e:64:22:01:c2:78:1f:
cd:5f:b9:e1:c3:7e:fc:91:68:a4:79:93:03:40:0d:
f9:67:27:3c:31:ff:17:d4:86:09:bc:c0:0f:97:d4:
02:5f:fa:3f:87:42:fc:d3:4b:61:9f:91:5c:29:5d:
4c:53:37:85:e4:a9:d8:2e:78:a1:bf:aa:dc:a6:7a:
14:ad:a3:65:6a:18:64:c1:e1:e2:f9:8a:6a:82:eb:
5c:89:ca:65:17:18:ed:09:09:70:4c:53:b7:03:d7:
1e:0a:0c:6e:66:51:99:47:16:cd:d9:d4:51:d5:37:
b4:62:5f:30:2f:3a:2f:16:fc:8d:cf:1a:5c:16:77:
22:de:0f:73:0e:4f:0d:07:89:e1:38:eb:b1:21:96:
87:d9:87:cd:68:75:3b:56:c8:6b:6e:f9:2b:19:17:
05:d0:ba:a8:7a:7b:3e:03:8e:8b:c1:db:b8:7c:0c:
34:c8:16:92:74:f4:3f:1c:38:9d:6a:66:7a:05:49:
5a:74:96:3f:6e:30:f2:23:53:d8:3a:f8:7c:5f:96:
8c:bc:57:27:16:5c:a4:34:52:c6:f9:a2:99:0e:c5:
93:df:5f:14:3d:d8:31:67:e0:56:92:35:02:a3:aa:
13:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:DE:7A:DB:5F:76:17:83:B6:61:56:DC:A9:CC:D0:0B:DC:FE:6D:33
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Rd562192F4O2YVbcqczQC9z-bTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.184.0/22
45.156.157.0/24
87.247.148.0/22
89.33.84.0/23
89.35.154.0/24
89.37.63.0/24
91.188.204.0/22
93.115.254.0/23
185.135.140.0/23
185.135.143.0/24
185.238.10.0/24
185.241.210.0/23
185.255.39.0/24
185.255.169.0-185.255.171.255
188.212.133.0/24
188.212.155.0/24
188.212.158.0/24
188.213.202.0/23
188.214.209.0/24
188.240.224.0/23
188.240.227.0/24
188.240.233.0/24
188.241.110.0/24
188.241.242.0/23
193.23.128.0/23
213.232.92.0/22
217.74.16.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:b3:ee:89:35:c8:97:84:d8:a3:79:d5:0d:e9:8e:4b:c8:44:
93:dc:2b:a1:f6:e9:76:7a:5e:3a:ff:a7:98:3e:08:74:fe:d4:
de:1e:c3:de:d5:94:36:51:a7:6d:c6:bb:0d:4d:6d:6d:07:db:
1a:5a:64:7f:3b:bd:27:84:0b:82:80:e0:95:e2:b3:33:fb:1e:
a7:ea:11:7a:31:94:84:da:91:9a:9f:a8:fe:43:2b:b0:eb:50:
ba:37:d2:85:0e:11:f9:42:24:b9:21:5e:d0:04:01:83:d6:cd:
07:57:cf:ed:fb:bf:27:4f:1e:5f:9b:f8:7d:84:97:c8:dc:0a:
f4:1e:40:ed:79:0a:6a:d9:bb:d5:38:f4:a6:c3:b8:67:cf:f7:
b9:21:d6:28:6b:2e:60:ac:60:44:1b:b2:42:98:d4:63:cb:00:
10:eb:7a:4d:7f:42:63:67:d5:c2:5c:ef:b0:6c:03:eb:c0:dc:
b9:38:f1:33:90:9d:e2:5d:f2:fa:f2:c6:b5:f5:81:89:f6:79:
c1:f9:bc:3b:51:56:67:37:d9:30:4e:df:71:0e:53:f2:b7:cf:
90:b2:e0:12:9c:02:54:3d:ec:35:e8:8d:0e:8d:e4:c5:ad:2b:
1e:94:5e:cd:a7:ab:c6:84:d1:24:52:7c:8d:24:a5:26:94:89:
29:7f:21:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 11 08:01:27 2023 by rpki-client on console-fra.rpki-client.org