Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/f3o317b_n1rz5iZPo5zvaHke2qM.roa
File: f3o317b_n1rz5iZPo5zvaHke2qM.roa (raw, json)
Hash identifier: vdyKoimoMkGDQYy1d5TXlW5s/kqNNxWuth3rgAo8MIg=
Subject key identifier: 7F:7A:37:D7:B6:FF:9F:5A:F3:E6:26:4F:A3:9C:EF:68:79:1E:DA:A3
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0187F4BA57B4C6ADFC6A7EFF11A23C6387BD
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/f3o317b_n1rz5iZPo5zvaHke2qM.roa
Signing time: Sun 07 May 2023 05:41:05 +0000
ROA not before: Sun 07 May 2023 05:41:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.115.146.0/24 maxlen: 24
194.4.156.0/23 maxlen: 24
194.4.159.0/24 maxlen: 24
213.32.249.0/24 maxlen: 24
185.115.145.0/24 maxlen: 24
78.142.242.0/23 maxlen: 24
89.38.136.0/24 maxlen: 24
45.159.152.0/24 maxlen: 24
45.159.154.0/24 maxlen: 24
45.159.153.0/24 maxlen: 24
103.205.25.0/24 maxlen: 24
91.209.12.0/24 maxlen: 24
185.230.248.0/24 maxlen: 24
185.230.249.0/24 maxlen: 24
185.229.104.0/24 maxlen: 24
185.229.105.0/24 maxlen: 24
185.229.106.0/24 maxlen: 24
185.229.107.0/24 maxlen: 24
89.43.211.0/24 maxlen: 24
185.245.238.0/24 maxlen: 24
185.245.236.0/24 maxlen: 24
89.43.208.0/24 maxlen: 24
89.43.210.0/24 maxlen: 24
185.245.237.0/24 maxlen: 24
185.121.231.0/24 maxlen: 24
178.239.203.0/24 maxlen: 24
185.121.230.0/24 maxlen: 24
62.197.128.0/24 maxlen: 24
185.236.62.0/24 maxlen: 24
62.197.135.0/24 maxlen: 24
185.103.73.0/24 maxlen: 24
185.103.75.0/24 maxlen: 24
178.239.192.0/24 maxlen: 24
178.239.193.0/24 maxlen: 24
178.239.194.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:f4:ba:57:b4:c6:ad:fc:6a:7e:ff:11:a2:3c:63:87:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: May 7 05:41:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f7a37d7b6ff9f5af3e6264fa39cef68791edaa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c3:ef:42:9f:94:9c:a7:6c:45:21:bf:c7:82:
e4:12:21:71:06:f2:25:85:42:c9:0d:98:41:12:6c:
55:49:3f:74:54:da:bb:e5:00:69:cf:66:7e:d8:5c:
14:b3:7f:5b:3b:79:b6:3e:ab:d3:b0:06:28:35:a8:
20:b4:52:fe:6d:56:e2:2f:38:bc:9b:06:1a:26:b9:
79:d7:9a:7d:d9:24:38:26:eb:44:25:15:d2:3e:36:
5f:29:f8:fc:26:72:df:a5:11:5e:73:78:3a:ae:47:
2b:7f:69:c7:69:1b:4e:bf:be:c5:4f:1a:6d:3b:97:
3c:47:28:29:c2:79:cf:b8:c2:54:0c:80:00:3b:f6:
39:ae:af:a5:03:3d:f9:00:85:3d:67:cc:22:36:8b:
e2:ca:95:45:13:0d:0f:7d:33:a7:fc:c6:db:ec:03:
ee:b6:14:77:a7:0b:b6:70:a9:f1:bb:3e:42:a5:2c:
e0:97:8f:2c:39:85:1c:2b:2e:c9:d2:09:69:14:5e:
be:a8:5e:ee:4d:7c:f5:90:d1:be:f4:93:4a:2f:9f:
d9:b6:0a:5c:4b:d4:b1:b0:19:7a:5b:46:6f:6c:97:
e8:73:9c:31:77:91:c8:52:d1:d2:f6:b6:70:c9:bb:
00:33:cb:36:f6:12:4f:1a:d8:cf:37:f5:ab:8b:f7:
45:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:7A:37:D7:B6:FF:9F:5A:F3:E6:26:4F:A3:9C:EF:68:79:1E:DA:A3
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/f3o317b_n1rz5iZPo5zvaHke2qM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.152.0-45.159.154.255
62.197.128.0/24
62.197.135.0/24
78.142.242.0/23
89.38.136.0/24
89.43.208.0/24
89.43.210.0/23
91.209.12.0/24
103.205.25.0/24
178.239.192.0-178.239.194.255
178.239.203.0/24
185.103.73.0/24
185.103.75.0/24
185.115.145.0-185.115.146.255
185.121.230.0/23
185.229.104.0/22
185.230.248.0/23
185.236.62.0/24
185.245.236.0-185.245.238.255
194.4.156.0/23
194.4.159.0/24
213.32.249.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:8c:20:c3:cf:e1:fc:7b:8a:cc:37:e5:29:f3:ee:03:f8:d6:
c0:de:2c:c3:0d:be:3b:3b:b4:44:5a:99:c6:91:a0:c8:e9:c1:
63:f9:9b:6a:0f:35:72:0e:fc:87:16:90:2b:26:9c:a8:fa:b9:
a1:78:2d:c9:ba:13:c3:b2:8e:80:f6:25:cb:4b:4a:b2:79:a1:
51:f5:f1:6b:8c:3c:f6:7f:bc:55:64:65:64:6d:07:54:5f:8f:
64:20:e0:2e:bd:01:eb:10:6b:f8:30:80:7e:a3:91:0c:57:72:
20:5c:c8:f1:0c:0e:dc:f8:aa:4d:b8:ef:f6:e8:46:d9:9c:0f:
52:0c:40:af:cf:a3:7e:39:e0:99:2c:01:12:e5:c3:4a:36:ce:
6e:ca:49:cf:5b:e4:3b:7f:b2:04:1b:eb:4d:7b:61:22:20:e8:
45:c2:3b:65:13:d8:f8:aa:29:14:ab:21:33:7e:f6:b9:5e:d8:
1f:f7:76:59:45:a2:bf:d6:cd:8f:0b:a3:94:db:b4:40:8e:24:
7d:0b:f7:e8:85:be:32:47:09:40:1f:38:39:b8:e3:fb:16:37:
17:02:fa:c6:56:3c:8b:01:d5:a3:8d:16:cc:f2:ef:42:f1:90:
3e:03:58:46:7a:1b:65:8c:d0:ed:cf:97:f7:c3:b3:69:73:05:
64:fa:5e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:56 2023 by rpki-client on console-ams.rpki-client.org