Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/c-qARNruHeP6iFJAil3HrBFVYS4.roa
File: c-qARNruHeP6iFJAil3HrBFVYS4.roa (raw, json)
Hash identifier: bF5lTw4VGckB5pHIxXqPulZQIFfKSwriOtryBQbz1nA=
Subject key identifier: 73:EA:80:44:DA:EE:1D:E3:FA:88:52:40:8A:5D:C7:AC:11:55:61:2E
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 0189117E4EC3DB3AAA0D75B3FC6BF5ACF862
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/c-qARNruHeP6iFJAil3HrBFVYS4.roa
Signing time: Sat 01 Jul 2023 12:47:17 +0000
ROA not before: Sat 01 Jul 2023 12:47:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 94.26.90.0/24 maxlen: 24
91.92.33.0/24 maxlen: 24
91.92.35.0/24 maxlen: 24
91.92.34.0/24 maxlen: 24
93.152.205.0/24 maxlen: 24
93.152.207.0/24 maxlen: 24
91.92.49.0/24 maxlen: 24
93.152.219.0/24 maxlen: 24
45.141.232.0/24 maxlen: 24
93.152.223.0/24 maxlen: 24
93.152.225.0/24 maxlen: 24
212.102.107.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:11:7e:4e:c3:db:3a:aa:0d:75:b3:fc:6b:f5:ac:f8:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Jul 1 12:47:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73ea8044daee1de3fa8852408a5dc7ac1155612e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:41:58:53:32:02:51:28:f1:bb:cb:81:e2:9a:
0c:d8:f6:cf:5c:b1:86:a3:f1:e1:5a:b9:01:d3:e6:
ef:8e:1b:97:fe:af:c2:75:df:c6:f5:3f:e2:a5:b4:
29:de:0d:d7:f1:7c:08:b7:e2:21:4b:2f:19:2d:1a:
12:ab:68:d6:d1:d5:58:6b:1c:9f:0b:ae:f7:5a:03:
c9:43:c7:a6:ae:9e:77:97:37:b3:74:76:03:98:a8:
e0:14:29:97:28:41:45:5c:de:17:b3:6b:17:e7:21:
d4:67:38:e3:5c:e2:02:ce:26:fc:25:47:d8:b1:52:
dd:87:f3:38:91:5f:c9:bf:4e:63:9e:26:e2:f1:e1:
51:36:bb:d4:49:75:c2:25:f8:0f:b5:fa:df:ac:f5:
c2:e3:bb:a6:af:99:04:35:2c:a0:e9:9b:d2:f8:03:
09:1b:74:8f:6c:df:49:bd:cf:4f:d5:de:a1:02:5f:
01:15:c3:d6:16:e5:7b:c6:97:de:15:59:7d:61:74:
1b:67:a3:b6:df:ee:a5:18:f0:79:97:4d:9e:75:2c:
80:a2:71:98:0c:9d:bf:40:79:7c:bb:b7:29:0a:6d:
3f:58:cf:bb:fe:8e:60:5d:b4:34:e4:d4:8e:dc:dc:
fe:b5:ce:fd:32:8c:0e:de:41:f8:44:d3:79:71:2d:
68:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:EA:80:44:DA:EE:1D:E3:FA:88:52:40:8A:5D:C7:AC:11:55:61:2E
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/c-qARNruHeP6iFJAil3HrBFVYS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.232.0/24
91.92.33.0-91.92.35.255
91.92.49.0/24
93.152.205.0/24
93.152.207.0/24
93.152.219.0/24
93.152.223.0/24
93.152.225.0/24
94.26.90.0/24
212.102.107.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:5b:45:5f:7c:cd:67:0f:e8:bf:55:12:6d:d9:ea:b6:54:06:
8c:96:11:55:8c:34:c0:ed:e9:d9:e1:58:28:c3:a6:f7:67:8f:
d7:e3:48:1e:94:43:03:5c:65:e2:23:69:0d:7d:7a:1d:37:b3:
10:c6:ff:1c:9c:36:ac:46:df:ab:b7:d1:8b:5e:e6:28:66:86:
42:04:d1:85:03:0a:92:f5:5b:c8:c3:a6:2e:a5:af:7a:07:82:
3b:98:b6:78:ef:e8:c9:2e:6f:8e:40:3b:23:81:0c:1e:7d:95:
ab:9f:18:c1:59:dd:9d:61:2f:91:29:1a:91:fe:ea:3b:2f:35:
08:ad:e0:d9:ae:5c:aa:c9:96:6a:55:5e:e9:9c:cb:2c:cf:a4:
f6:7a:5a:d2:2a:f2:d2:4f:f5:00:22:5d:ae:57:63:a9:9d:e3:
b7:2a:38:3c:b4:7a:e5:f9:05:d3:d5:30:ff:73:51:0e:ea:2c:
73:dd:8d:df:92:63:4b:2d:f6:b7:9f:47:b3:56:7f:ab:53:8f:
a4:fc:6c:f6:7b:7d:d4:25:fc:5e:67:15:35:73:b2:5f:c1:70:
cf:c9:2f:1f:4e:15:54:b7:cc:c6:d4:1e:eb:a2:5e:1a:e6:da:
1d:15:4d:f0:1b:46:c3:5d:64:c7:91:76:a8:f9:b2:a0:3e:57:
6b:a6:6b:0e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:58 2023 by rpki-client on console-ams.rpki-client.org