Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/oj6xW8ycdD7Pk-HekT08cio0Dks.roa
File: oj6xW8ycdD7Pk-HekT08cio0Dks.roa (raw, json)
Hash identifier: /2idXuQzpeuA/gcSi/59RSH/yV41DUG1mlv5n5ggP+k=
Subject key identifier: A2:3E:B1:5B:CC:9C:74:3E:CF:93:E1:DE:91:3D:3C:72:2A:34:0E:4B
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0187FEDDED0E97455283AA6B1E7F1EF75E77
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/oj6xW8ycdD7Pk-HekT08cio0Dks.roa
Signing time: Tue 09 May 2023 04:56:09 +0000
ROA not before: Tue 09 May 2023 04:56:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.115.146.0/24 maxlen: 24
194.4.156.0/23 maxlen: 24
194.4.159.0/24 maxlen: 24
213.32.249.0/24 maxlen: 24
185.115.145.0/24 maxlen: 24
78.142.242.0/23 maxlen: 24
89.38.136.0/24 maxlen: 24
45.159.152.0/24 maxlen: 24
45.159.154.0/24 maxlen: 24
45.159.153.0/24 maxlen: 24
103.205.25.0/24 maxlen: 24
91.209.12.0/24 maxlen: 24
185.230.248.0/24 maxlen: 24
185.230.249.0/24 maxlen: 24
185.229.104.0/24 maxlen: 24
185.229.105.0/24 maxlen: 24
185.229.106.0/24 maxlen: 24
185.229.107.0/24 maxlen: 24
89.43.211.0/24 maxlen: 24
185.245.238.0/24 maxlen: 24
185.245.236.0/24 maxlen: 24
89.43.208.0/24 maxlen: 24
89.43.210.0/24 maxlen: 24
185.245.237.0/24 maxlen: 24
192.166.212.0/22 maxlen: 24
185.121.231.0/24 maxlen: 24
178.239.203.0/24 maxlen: 24
178.239.200.0/24 maxlen: 24
185.121.230.0/24 maxlen: 24
62.197.132.0/24 maxlen: 24
62.197.128.0/24 maxlen: 24
185.236.62.0/24 maxlen: 24
185.236.63.0/24 maxlen: 24
62.197.135.0/24 maxlen: 24
185.103.73.0/24 maxlen: 24
185.103.75.0/24 maxlen: 24
178.239.192.0/24 maxlen: 24
178.239.193.0/24 maxlen: 24
178.239.194.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:fe:dd:ed:0e:97:45:52:83:aa:6b:1e:7f:1e:f7:5e:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: May 9 04:56:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a23eb15bcc9c743ecf93e1de913d3c722a340e4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:bb:73:50:b0:2b:f4:91:60:fa:84:45:00:74:
21:3c:65:75:86:bd:1f:00:79:24:9c:50:ac:c5:f5:
fc:95:62:44:51:61:cd:b6:74:8b:44:ef:d6:db:b5:
e5:25:24:12:44:70:73:79:b4:9a:53:cf:5b:48:d2:
87:2a:b6:5a:98:f3:4c:70:e9:48:3a:ae:3d:ad:88:
f7:f0:63:5d:26:cf:80:ba:d4:9b:aa:ef:24:d9:32:
9b:86:34:99:b4:24:63:d2:6b:40:58:30:14:36:24:
bf:b0:1a:5f:28:f9:6f:9d:ff:1e:a6:12:c0:9a:ec:
fb:6e:35:b8:6b:13:87:56:71:af:0a:72:32:64:be:
33:9d:29:a2:cf:49:49:61:e3:26:03:07:be:52:10:
a2:05:81:f6:5e:26:e6:57:fd:12:14:ba:8e:25:d9:
43:da:4e:73:ec:6b:83:2b:e6:e8:19:36:c6:55:22:
ee:55:73:2a:a5:12:5b:e9:84:6b:02:93:23:b1:48:
cc:4a:a3:99:b7:cc:77:f3:93:4d:71:26:45:41:ec:
5a:c6:e7:7d:3d:64:be:55:d6:30:53:29:da:af:f3:
30:ef:63:bf:86:ab:3a:bc:9d:b2:21:f9:82:b0:15:
fe:14:17:c4:59:33:41:47:49:ae:85:43:72:e9:31:
90:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:3E:B1:5B:CC:9C:74:3E:CF:93:E1:DE:91:3D:3C:72:2A:34:0E:4B
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/oj6xW8ycdD7Pk-HekT08cio0Dks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.152.0-45.159.154.255
62.197.128.0/24
62.197.132.0/24
62.197.135.0/24
78.142.242.0/23
89.38.136.0/24
89.43.208.0/24
89.43.210.0/23
91.209.12.0/24
103.205.25.0/24
178.239.192.0-178.239.194.255
178.239.200.0/24
178.239.203.0/24
185.103.73.0/24
185.103.75.0/24
185.115.145.0-185.115.146.255
185.121.230.0/23
185.229.104.0/22
185.230.248.0/23
185.236.62.0/23
185.245.236.0-185.245.238.255
192.166.212.0/22
194.4.156.0/23
194.4.159.0/24
213.32.249.0/24
Signature Algorithm: sha256WithRSAEncryption
15:80:72:e0:c5:41:e9:86:de:ea:dc:00:7a:63:f0:d9:49:db:
7e:d5:a8:45:7c:37:f6:36:bf:74:cb:51:63:79:7b:a8:02:43:
c2:dd:2c:e9:9c:45:39:a5:65:89:ea:c3:62:b8:c3:3e:64:d4:
02:60:48:8c:d5:be:8e:22:4a:f8:32:f7:0f:17:1a:22:65:d3:
a6:64:cc:1b:01:07:1b:44:2b:85:a6:a3:b4:de:cd:27:b4:38:
b3:0a:d5:26:f2:18:37:1f:44:54:53:8a:4c:3a:1b:4a:7e:d8:
c9:ab:2a:f4:44:24:7e:a7:d1:32:72:e7:f1:e2:68:e0:80:ff:
59:a5:2f:ed:31:16:de:53:31:70:26:58:9a:4d:2f:fb:3f:b2:
8a:0e:a5:f2:89:e7:82:63:d7:68:df:55:76:c3:f5:67:fa:90:
fc:94:89:1d:72:90:c7:50:b7:7b:e2:5f:8f:e1:0f:f2:89:e7:
40:3e:c4:e7:f4:fb:a8:3f:bf:0d:a5:ec:65:5a:51:44:8a:9a:
73:c2:1f:83:98:4a:d3:d1:da:53:73:96:a1:f6:6e:a6:57:fa:
60:ee:6b:7e:6a:35:94:6a:1d:f2:86:ac:40:c0:ea:ab:e6:c0:
0e:9c:ec:a0:af:bc:15:3e:af:80:8d:28:d5:8c:55:8c:0a:34:
c5:7d:b7:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:56 2023 by rpki-client on console-ams.rpki-client.org