Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/hcYdftcBZ85Y190wdJBonykmGTk.roa
File: hcYdftcBZ85Y190wdJBonykmGTk.roa (raw, json)
Hash identifier: BkP+5jZfPGGTmDtukFy1OvItJjqCVms06mUnC8MPX5E=
Subject key identifier: 85:C6:1D:7E:D7:01:67:CE:58:D7:DD:30:74:90:68:9F:29:26:19:39
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018AEF1E2C088F883B8E01F70BC0636CFA79
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/hcYdftcBZ85Y190wdJBonykmGTk.roa
Signing time: Mon 02 Oct 2023 06:40:46 +0000
ROA not before: Mon 02 Oct 2023 06:40:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.40.160.0/24 maxlen: 24
89.33.14.0/24 maxlen: 24
188.214.27.0/24 maxlen: 24
93.114.195.0/24 maxlen: 24
203.0.9.0/24 maxlen: 24
203.0.8.0/24 maxlen: 24
89.46.92.0/24 maxlen: 24
193.19.106.0/24 maxlen: 24
103.212.82.0/24 maxlen: 24
89.47.89.0/24 maxlen: 24
78.142.242.0/24 maxlen: 24
78.142.242.0/23 maxlen: 24
78.142.241.0/24 maxlen: 24
178.239.204.0/24 maxlen: 24
185.9.54.0/24 maxlen: 24
93.114.246.0/24 maxlen: 24
223.27.112.0/24 maxlen: 24
223.27.114.0/24 maxlen: 24
89.38.101.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ef:1e:2c:08:8f:88:3b:8e:01:f7:0b:c0:63:6c:fa:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Oct 2 06:40:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=85c61d7ed70167ce58d7dd307490689f29261939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:21:ce:47:08:89:d9:a5:c4:88:99:e9:c5:8c:
2b:ab:db:b1:b2:97:c9:86:c6:ea:17:51:b2:37:7b:
23:d4:44:ab:99:30:47:ce:cb:58:8d:8c:03:3e:82:
bf:36:db:3a:9e:22:f3:dd:48:64:cd:c0:02:af:81:
2a:8d:5a:58:54:9b:90:1b:e3:55:07:85:d0:6c:04:
b4:7c:22:ab:3f:1f:d2:93:ec:c9:70:c4:70:14:4c:
72:31:3d:77:55:1c:86:d3:38:61:58:ad:69:a8:9c:
1f:8f:5b:97:5f:a2:6f:35:60:23:a3:1a:ea:a3:56:
f4:06:b3:88:7d:98:ee:a4:13:26:5e:29:cb:11:52:
33:33:3a:da:6b:36:e9:88:71:62:87:b8:68:ec:55:
f9:1b:e4:e7:be:b9:e2:02:47:7f:79:07:a0:04:0e:
40:32:0d:e0:05:e7:85:b3:b6:4a:47:fd:17:be:45:
21:c0:bd:84:15:d6:93:06:5a:2b:62:06:bd:d3:74:
9e:84:ba:20:22:23:85:84:8e:53:d4:7c:9d:e2:45:
f6:99:56:1d:7c:d1:de:ea:62:c0:55:44:ec:fd:a0:
30:68:bf:35:bc:d1:ca:89:07:1b:9a:5a:96:4a:cc:
46:b1:65:85:7d:34:15:b9:07:05:48:cb:e0:d8:61:
1f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C6:1D:7E:D7:01:67:CE:58:D7:DD:30:74:90:68:9F:29:26:19:39
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/hcYdftcBZ85Y190wdJBonykmGTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.142.241.0-78.142.243.255
89.33.14.0/24
89.38.101.0/24
89.40.160.0/24
89.46.92.0/24
89.47.89.0/24
93.114.195.0/24
93.114.246.0/24
103.212.82.0/24
178.239.204.0/24
185.9.54.0/24
188.214.27.0/24
193.19.106.0/24
203.0.8.0/23
223.27.112.0/24
223.27.114.0/24
Signature Algorithm: sha256WithRSAEncryption
45:59:d9:1e:70:63:9e:03:d1:5c:40:b1:91:46:10:e5:c3:e5:
9f:f8:fe:b5:2d:17:f9:dc:9f:70:d3:34:39:94:71:6c:23:b6:
42:59:fe:71:2e:80:5b:f9:78:de:f2:45:bc:cf:24:66:28:d5:
3c:19:82:d5:ca:db:b9:c5:49:00:16:1c:9f:22:bf:43:4f:80:
8e:e1:f9:9e:c7:93:6f:a3:1e:ec:2d:d7:c0:dc:0d:11:89:8e:
d7:ef:16:29:93:1f:57:ca:5f:16:da:06:c1:9d:d9:01:cc:06:
cc:59:2c:14:28:06:16:92:27:d6:00:80:df:80:9c:cf:95:b3:
8f:85:65:b0:fd:c9:49:0b:ca:41:52:d1:72:dc:d5:e5:eb:f6:
d6:b4:c0:da:62:c0:f4:da:ce:c4:25:47:a5:84:42:d0:cb:6d:
1f:e9:da:95:cc:3d:b2:be:c0:85:c5:20:5e:23:14:8c:e4:d0:
6c:a6:85:b4:b6:14:72:6c:dd:5f:58:73:75:be:ca:dd:96:8f:
cc:87:ae:c2:05:36:c1:8c:b4:ac:ae:ab:51:b6:90:9e:49:ba:
b2:54:0d:dc:de:bc:4b:e1:3f:90:b1:60:91:b9:87:c1:b4:7b:
99:dc:cc:ab:37:5e:4b:b4:96:36:a2:e5:b0:ec:10:1f:ca:11:
51:26:6e:20
-----BEGIN CERTIFICATE-----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Generated at Fri Oct 27 19:08:24 2023 by rpki-client on console-fra.rpki-client.org