Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/ivwVpaWmeHp8a2Z4DxfCzAn1nZY.roa
File: ivwVpaWmeHp8a2Z4DxfCzAn1nZY.roa (raw, json)
Hash identifier: yOZTnLa1N4ZIL9Ftyiss5Pk/P0cKPK1M/ufFmxzLFAw=
Subject key identifier: 8A:FC:15:A5:A5:A6:78:7A:7C:6B:66:78:0F:17:C2:CC:09:F5:9D:96
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 0189AC7356FC1C824651A2415370CE9C9686
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/ivwVpaWmeHp8a2Z4DxfCzAn1nZY.roa
Signing time: Mon 31 Jul 2023 14:56:27 +0000
ROA not before: Mon 31 Jul 2023 14:56:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 91.92.35.0/24 maxlen: 24
91.92.34.0/24 maxlen: 24
93.152.207.0/24 maxlen: 24
93.152.219.0/24 maxlen: 24
45.141.232.0/24 maxlen: 24
93.152.223.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ac:73:56:fc:1c:82:46:51:a2:41:53:70:ce:9c:96:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Jul 31 14:56:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8afc15a5a5a6787a7c6b66780f17c2cc09f59d96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:36:ee:de:7a:bd:74:83:d3:6a:a6:89:88:7b:
a7:83:63:b4:2e:12:d9:96:79:14:9e:b7:7b:a5:22:
ca:ce:a3:ca:a7:61:82:d3:57:9f:a0:c7:d1:96:6c:
ba:ce:46:c8:02:44:66:fd:d5:5d:f3:d7:fe:6e:32:
c2:79:04:4d:0b:8e:25:2b:fc:b8:c4:c1:50:51:72:
01:73:0a:9e:37:1b:b1:87:a2:78:d6:7d:44:73:e5:
fb:8d:27:cf:3d:d3:a8:50:0a:81:f6:f5:51:ab:e0:
10:12:50:00:57:80:55:66:2b:dd:4b:fb:4f:7f:74:
47:59:bf:86:66:b3:39:7a:c6:d8:a6:9f:e1:96:d5:
51:7b:3e:97:5c:e0:81:14:f3:ee:56:80:51:fd:67:
05:1d:09:fc:f5:68:e2:08:d2:08:ef:5a:19:08:26:
ed:f4:08:dd:20:30:36:24:60:22:36:55:53:27:d7:
7b:b7:20:fe:5a:1c:ae:b4:c9:b5:8c:af:f5:45:7d:
71:e1:b6:5a:29:e1:62:0c:55:9d:12:a8:4b:df:fc:
33:9d:51:c1:a4:80:2b:33:f9:b2:37:dc:b9:b4:4e:
18:93:54:c3:bf:5b:6d:5c:6e:7b:af:70:64:0b:a3:
0b:ad:ec:b0:4c:d7:6b:d7:01:63:10:a3:5e:65:7d:
da:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:FC:15:A5:A5:A6:78:7A:7C:6B:66:78:0F:17:C2:CC:09:F5:9D:96
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/ivwVpaWmeHp8a2Z4DxfCzAn1nZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.232.0/24
91.92.34.0/23
93.152.207.0/24
93.152.219.0/24
93.152.223.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:42:16:9d:51:e3:ef:61:74:8a:76:1c:a5:86:fd:b4:3e:7a:
4b:38:85:21:1e:9f:61:9a:1d:92:73:ed:90:f9:d9:8d:b5:84:
12:0f:2d:01:3b:d0:af:97:3f:a7:e6:5f:e4:38:e9:36:eb:88:
51:90:ed:4b:2e:bc:a9:0c:09:44:68:f0:0a:72:5a:dd:78:3e:
dd:f1:36:db:2d:d7:f8:f6:85:34:9c:9b:77:aa:03:93:15:d9:
ec:b7:f4:dd:ef:29:1d:4b:cd:76:42:0d:e8:1c:78:0b:3d:ef:
96:95:4e:55:de:7f:fe:d0:97:24:e8:7c:18:49:44:08:e9:6d:
ed:bb:3b:d0:f5:c1:49:da:4f:dd:9d:c5:2f:34:04:f0:ca:82:
67:c1:20:96:d9:74:57:4e:21:d3:21:2e:5d:33:ea:75:47:21:
10:56:3c:7d:e9:b5:4d:f3:c7:02:c0:4c:fc:d3:b4:20:70:4b:
12:d8:71:d1:97:28:11:4d:ac:82:73:3a:84:3b:a6:b6:81:78:
32:cb:34:19:27:c8:7f:d1:d2:c0:26:ff:00:5a:b1:d3:31:ef:
74:20:da:cf:0a:15:00:95:89:88:bc:ba:b8:ba:54:62:0f:2b:
43:f4:f5:23:a6:d4:d0:85:ed:15:de:5a:54:c7:6a:2f:8a:47:
23:c6:57:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 9 14:19:14 2023 by rpki-client on console-fra.rpki-client.org