Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/fH8ljN0k3zPXo5CYcSGE_nBf1-k.roa
File: fH8ljN0k3zPXo5CYcSGE_nBf1-k.roa (raw, json)
Hash identifier: Gc1HYV22ILOD9gHMAZbuE2dgajvLoxTJ0IGXcXUeYjg=
Subject key identifier: 7C:7F:25:8C:DD:24:DF:33:D7:A3:90:98:71:21:84:FE:70:5F:D7:E9
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0189FD313A7DE045E204C1BC6CFE3FC1A083
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/fH8ljN0k3zPXo5CYcSGE_nBf1-k.roa
Signing time: Wed 16 Aug 2023 07:13:28 +0000
ROA not before: Wed 16 Aug 2023 07:13:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 188.241.243.0/24 maxlen: 24
185.255.39.0/24 maxlen: 24
188.214.209.0/24 maxlen: 24
185.241.210.0/23 maxlen: 24
188.241.214.0/24 maxlen: 24
93.115.255.0/24 maxlen: 24
93.115.254.0/23 maxlen: 24
188.213.203.0/24 maxlen: 24
188.213.202.0/24 maxlen: 24
193.23.129.0/24 maxlen: 24
193.23.128.0/24 maxlen: 24
213.232.93.0/24 maxlen: 24
213.232.92.0/24 maxlen: 24
213.232.94.0/23 maxlen: 24
45.156.157.0/24 maxlen: 24
89.33.85.0/24 maxlen: 24
89.33.84.0/24 maxlen: 24
185.255.169.0/24 maxlen: 24
185.255.170.0/23 maxlen: 24
185.255.170.0/24 maxlen: 24
89.35.154.0/24 maxlen: 24
89.35.155.0/24 maxlen: 24
188.212.132.0/24 maxlen: 24
188.212.133.0/24 maxlen: 24
188.212.155.0/24 maxlen: 24
188.212.158.0/24 maxlen: 24
87.247.148.0/24 maxlen: 24
87.247.150.0/24 maxlen: 24
87.247.149.0/24 maxlen: 24
87.247.151.0/24 maxlen: 24
188.240.224.0/24 maxlen: 24
188.240.225.0/24 maxlen: 24
188.240.230.0/24 maxlen: 24
188.240.227.0/24 maxlen: 24
188.240.233.0/24 maxlen: 24
91.188.205.0/24 maxlen: 24
91.188.204.0/24 maxlen: 24
91.188.206.0/24 maxlen: 24
91.188.207.0/24 maxlen: 24
89.37.63.0/24 maxlen: 24
185.135.140.0/24 maxlen: 24
185.135.141.0/24 maxlen: 24
185.135.143.0/24 maxlen: 24
185.238.10.0/24 maxlen: 24
188.241.110.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:fd:31:3a:7d:e0:45:e2:04:c1:bc:6c:fe:3f:c1:a0:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Aug 16 07:13:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c7f258cdd24df33d7a39098712184fe705fd7e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a7:fd:69:4f:db:74:fe:7a:5b:c6:a8:3f:dd:
b9:a8:2d:16:18:ac:39:ec:9d:49:2a:c0:23:b7:03:
a5:b5:4a:7e:e2:36:a2:15:f7:59:8f:7b:50:72:ed:
2d:d6:34:a2:16:87:ce:c9:ef:2e:f5:30:f6:55:ca:
45:58:bd:f8:e1:bb:8d:58:9b:02:91:5a:42:c2:e7:
cd:4e:5b:1a:0c:a7:d9:d0:84:0d:4d:35:3e:e6:ee:
f9:d9:d7:38:67:b6:9a:40:75:04:cc:b4:45:af:cb:
d0:da:29:5e:46:b8:2b:b6:e1:16:6f:8b:20:43:65:
d2:08:6b:0c:33:5f:c5:88:09:d2:c4:3b:a5:61:1c:
96:9c:b0:a6:a3:8f:ae:be:d6:27:df:ec:9b:b7:d5:
b6:4a:41:11:23:b1:79:12:4c:bd:95:3c:d5:c1:03:
4c:8b:89:db:79:29:bb:c0:5f:22:1e:eb:41:3a:b5:
9c:9f:79:aa:ea:f8:41:a8:7f:17:37:5c:8d:7d:45:
e9:e3:6d:55:ba:53:db:42:bf:73:de:3d:09:73:4a:
f8:43:07:bc:1a:0d:38:27:71:77:b3:75:4e:f8:68:
b0:8a:8e:36:d0:39:60:d5:d4:45:99:93:a6:46:24:
d3:53:b5:c2:69:d7:41:c6:ef:a9:f4:05:d1:34:e4:
53:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:7F:25:8C:DD:24:DF:33:D7:A3:90:98:71:21:84:FE:70:5F:D7:E9
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/fH8ljN0k3zPXo5CYcSGE_nBf1-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.157.0/24
87.247.148.0/22
89.33.84.0/23
89.35.154.0/23
89.37.63.0/24
91.188.204.0/22
93.115.254.0/23
185.135.140.0/23
185.135.143.0/24
185.238.10.0/24
185.241.210.0/23
185.255.39.0/24
185.255.169.0-185.255.171.255
188.212.132.0/23
188.212.155.0/24
188.212.158.0/24
188.213.202.0/23
188.214.209.0/24
188.240.224.0/23
188.240.227.0/24
188.240.230.0/24
188.240.233.0/24
188.241.110.0/24
188.241.214.0/24
188.241.243.0/24
193.23.128.0/23
213.232.92.0/22
Signature Algorithm: sha256WithRSAEncryption
84:16:32:65:e6:a6:83:3c:78:27:9e:49:61:c9:70:74:c1:9a:
f8:42:87:d4:57:5c:fe:98:e1:80:f2:ab:c2:c0:4c:5a:98:3c:
36:59:cc:c6:c9:ba:33:eb:a7:32:94:5a:f1:cf:1d:ad:2b:70:
14:c7:2f:47:df:69:88:b4:f9:4f:7a:a3:37:82:5e:1d:67:0c:
23:c9:c3:2c:94:b5:6d:03:d9:da:cf:1d:80:b7:25:57:c5:ce:
5a:4a:e3:e2:a2:1f:90:8a:a5:e6:1f:35:e8:bd:40:7e:e6:b2:
35:f2:c6:93:39:6a:82:93:78:fe:f6:8c:7c:6c:c6:15:2d:95:
c3:5d:b7:fe:73:e7:3b:43:70:5e:9b:8c:99:6a:80:76:d6:e1:
63:2a:83:64:df:c7:3d:6a:6a:14:bc:20:f2:4f:79:99:29:1f:
55:a9:ba:a4:b4:7a:5f:f5:67:5a:f3:1c:d7:6a:1b:db:74:4b:
2d:e0:94:5c:8e:b5:e5:ea:2d:1a:38:9b:c4:e6:0b:d0:61:3c:
05:61:5e:4f:c1:7d:64:50:5e:aa:2a:3e:eb:4f:98:93:81:b2:
f1:9b:ec:3f:ca:4a:f2:46:04:f3:34:24:5e:4e:ac:23:c4:8d:
d2:49:f7:f2:fe:82:76:52:09:d6:88:3c:13:f1:73:04:34:4a:
b2:a1:bb:f3
-----BEGIN CERTIFICATE-----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Generated at Sun Aug 20 22:51:03 2023 by rpki-client on console-fra.rpki-client.org