Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/vYRQwCHqlwpCperrrajc2hwdL8c.roa
File: vYRQwCHqlwpCperrrajc2hwdL8c.roa (raw, json)
Hash identifier: K5YBG0kh1z95ZnDYhf1T5C+cmn9JpaEp/qGJmXJv3Hw=
Subject key identifier: BD:84:50:C0:21:EA:97:0A:42:A5:EA:EB:AD:A8:DC:DA:1C:1D:2F:C7
Certificate issuer: /CN=1678b49f9ae25f1e127534b1915044ac7d0d9e73
Certificate serial: 01856DA64C2FF56290E334EC38AC447B2EC1
Authority key identifier: 16:78:B4:9F:9A:E2:5F:1E:12:75:34:B1:91:50:44:AC:7D:0D:9E:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/vYRQwCHqlwpCperrrajc2hwdL8c.roa
Signing time: Sun 01 Jan 2023 14:04:53 +0000
ROA not before: Sun 01 Jan 2023 14:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48095
IP address blocks: 193.38.242.0/23 maxlen: 23
185.223.40.0/22 maxlen: 22
193.37.54.0/23 maxlen: 23
193.37.52.0/23 maxlen: 23
193.38.240.0/23 maxlen: 23
185.226.80.0/22 maxlen: 22
185.249.236.0/22 maxlen: 22
147.78.52.0/23 maxlen: 23
147.78.54.0/23 maxlen: 23
194.93.36.0/23 maxlen: 23
194.93.38.0/23 maxlen: 23
194.26.176.0/22 maxlen: 22
194.55.80.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:a6:4c:2f:f5:62:90:e3:34:ec:38:ac:44:7b:2e:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1678b49f9ae25f1e127534b1915044ac7d0d9e73
Validity
Not Before: Jan 1 14:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bd8450c021ea970a42a5eaebada8dcda1c1d2fc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:68:d9:14:2a:eb:cc:b0:ce:33:8e:74:93:53:
15:90:a0:56:38:da:80:d5:ce:a2:94:39:a4:25:7e:
d1:8c:cb:45:41:83:b9:b9:e2:18:bd:07:ce:96:cf:
6d:c9:7d:91:cf:b7:9e:7f:9b:59:af:43:9c:70:b9:
7d:1d:92:07:27:f8:46:57:3c:89:9c:b0:48:c8:0c:
11:e7:73:bf:4e:6e:9b:95:65:d6:88:aa:4f:82:a3:
be:1d:25:6a:9b:b8:bf:b6:4d:7a:22:ae:09:8f:b2:
e7:35:1e:29:29:e8:0c:d5:4f:01:57:05:db:db:64:
ff:04:d7:2c:5a:7f:19:35:17:dd:ba:92:0e:02:7e:
01:34:61:f5:72:f2:44:8e:9b:5a:fd:11:e3:79:5a:
eb:1a:11:50:14:db:8a:6b:1a:b1:dd:ea:f7:70:d4:
5e:ec:ca:0d:61:f2:41:2a:9a:7f:e6:f2:da:69:41:
ea:67:ba:9b:80:b5:15:7d:96:a3:e2:3e:a3:40:55:
ef:b9:c8:c9:81:5a:e2:a5:59:89:bc:75:48:89:33:
71:7c:07:33:84:1f:15:dd:0b:d7:6e:94:08:9f:20:
b2:8a:2c:52:8f:ef:fc:d8:ea:ff:bc:86:5c:62:9e:
07:8b:54:ed:a0:d2:4e:9d:6a:88:81:04:a8:3a:0d:
b5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:84:50:C0:21:EA:97:0A:42:A5:EA:EB:AD:A8:DC:DA:1C:1D:2F:C7
X509v3 Authority Key Identifier:
keyid:16:78:B4:9F:9A:E2:5F:1E:12:75:34:B1:91:50:44:AC:7D:0D:9E:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/vYRQwCHqlwpCperrrajc2hwdL8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.52.0/22
185.223.40.0/22
185.226.80.0/22
185.249.236.0/22
193.37.52.0/22
193.38.240.0/22
194.26.176.0/22
194.55.80.0/22
194.93.36.0/22
Signature Algorithm: sha256WithRSAEncryption
42:e6:af:b6:91:32:de:ad:23:a4:fd:92:d8:b2:c9:34:e9:f1:
35:fc:59:d4:0e:45:d2:35:ae:f7:a9:47:a0:e5:f3:f5:0c:5d:
bc:5d:c2:d9:6f:d3:14:8a:81:05:f2:76:ac:4f:0d:b6:63:c6:
3a:37:9f:36:b7:c7:f5:e4:40:6c:98:16:26:1d:61:d4:ae:f2:
30:17:22:38:7e:31:5f:1f:cb:cf:07:10:5e:65:b5:6f:51:af:
69:bd:23:8c:04:88:3b:f6:bd:74:a2:fb:a6:7a:4e:26:06:65:
1b:9d:d2:99:89:86:8e:8a:76:d2:ce:d8:c6:ef:b8:f7:96:4f:
43:c7:df:7d:b7:e7:3c:d8:f8:37:b1:8d:64:46:56:3b:fe:d5:
ff:3a:48:28:60:fd:96:8b:dd:04:be:64:be:17:91:7f:d0:88:
d5:a2:ba:83:18:0a:36:3e:79:51:ad:60:87:f1:9c:55:ff:38:
82:dc:40:20:88:6e:05:b1:10:5c:af:09:a8:92:46:0d:16:b2:
04:51:c5:7d:7d:10:e1:d6:ad:f7:c2:c3:25:57:eb:f5:18:d6:
f0:de:30:d1:3f:bd:08:29:5d:1a:9a:ca:7a:61:85:1f:7a:d6:
17:79:05:d7:4a:2e:7d:52:11:ce:1d:0b:c3:27:cb:58:de:66:
c3:86:0f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:31:44 2024 by rpki-client on console-fra.rpki-client.org