Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/8KRUO8NF7D2eLvgglSwTqmTCPag.roa
File: 8KRUO8NF7D2eLvgglSwTqmTCPag.roa (raw, json)
Hash identifier: R23Lhr8ipwB2WlHFXVoNkLF/gc0mU0T5vcLqlNUysZA=
Subject key identifier: F0:A4:54:3B:C3:45:EC:3D:9E:2E:F8:20:95:2C:13:AA:64:C2:3D:A8
Certificate issuer: /CN=89887de01d8b1cbd50b75dbac91339f6617a4d8a
Certificate serial: 018571FA12A20A0A522ED3A5B2F3348C8835
Authority key identifier: 89:88:7D:E0:1D:8B:1C:BD:50:B7:5D:BA:C9:13:39:F6:61:7A:4D:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iYh94B2LHL1Qt126yRM59mF6TYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/8KRUO8NF7D2eLvgglSwTqmTCPag.roa
Signing time: Mon 02 Jan 2023 10:14:52 +0000
ROA not before: Mon 02 Jan 2023 10:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47806
IP address blocks: 152.89.145.0/24 maxlen: 24
152.89.144.0/22 maxlen: 22
152.89.144.0/24 maxlen: 24
152.89.144.0/23 maxlen: 23
152.89.147.0/24 maxlen: 24
152.89.146.0/23 maxlen: 23
152.89.146.0/24 maxlen: 24
185.251.210.0/24 maxlen: 24
185.251.210.0/23 maxlen: 23
185.251.209.0/24 maxlen: 24
185.251.208.0/24 maxlen: 24
185.251.208.0/22 maxlen: 22
185.251.208.0/23 maxlen: 23
185.251.211.0/24 maxlen: 24
93.88.31.0/24 maxlen: 24
93.88.30.0/23 maxlen: 23
93.88.30.0/24 maxlen: 24
93.88.28.0/22 maxlen: 22
93.88.29.0/24 maxlen: 24
93.88.28.0/24 maxlen: 24
93.88.28.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:fa:12:a2:0a:0a:52:2e:d3:a5:b2:f3:34:8c:88:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89887de01d8b1cbd50b75dbac91339f6617a4d8a
Validity
Not Before: Jan 2 10:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f0a4543bc345ec3d9e2ef820952c13aa64c23da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0b:cf:dd:f1:f1:2d:4c:c2:03:73:c4:28:10:
c9:81:db:68:79:06:d0:21:15:4a:9c:50:57:bf:1d:
d5:6f:75:10:b1:23:8a:5f:73:04:3b:1e:56:b4:ac:
bb:aa:ff:0f:fe:57:18:bd:70:58:04:22:67:a5:5d:
7e:75:50:07:3d:77:79:c0:6b:00:17:1d:6a:44:94:
83:20:e6:2f:98:c1:c8:09:7f:17:21:c1:ca:49:a9:
f2:3d:cb:0d:c8:2a:30:a1:dc:8d:94:1e:5b:e6:bf:
f7:64:4b:fd:87:c1:3e:f2:f2:05:3e:99:ff:d7:17:
22:38:a2:d3:1a:fc:ac:64:7a:ae:ad:f2:41:ad:9b:
51:a1:2f:6c:46:e1:b7:45:7d:bd:4c:53:09:58:68:
81:22:96:27:2b:cc:1b:90:b0:90:73:68:d9:af:3b:
19:06:1a:e5:54:0d:d8:cf:25:c3:d5:a4:3d:0e:60:
06:9c:df:79:d3:32:3b:70:6e:a4:92:db:75:a8:df:
a1:19:16:bc:56:cb:ae:08:86:2a:08:48:93:fd:c7:
08:8e:dd:83:fe:08:18:80:72:de:0d:16:8d:55:d3:
dc:fa:f4:2c:cd:f8:b8:67:cc:c2:82:48:99:ca:a9:
6f:79:fa:19:fd:f3:8b:c1:a5:ea:22:0e:2c:4f:34:
59:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:A4:54:3B:C3:45:EC:3D:9E:2E:F8:20:95:2C:13:AA:64:C2:3D:A8
X509v3 Authority Key Identifier:
keyid:89:88:7D:E0:1D:8B:1C:BD:50:B7:5D:BA:C9:13:39:F6:61:7A:4D:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iYh94B2LHL1Qt126yRM59mF6TYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/8KRUO8NF7D2eLvgglSwTqmTCPag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/iYh94B2LHL1Qt126yRM59mF6TYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.88.28.0/22
152.89.144.0/22
185.251.208.0/22
Signature Algorithm: sha256WithRSAEncryption
20:00:04:32:5d:e1:5c:73:1d:fe:0d:3c:4e:65:17:44:82:ed:
1e:eb:65:bd:40:eb:88:03:f9:59:32:a0:0e:d2:b8:b0:c3:ea:
cb:b0:4a:0d:a3:24:e9:41:e8:54:d8:aa:62:0f:d6:37:0e:6c:
9d:00:f8:ef:65:6a:1a:7d:ca:4e:5c:95:33:a3:5b:33:4c:e5:
c4:36:85:aa:4a:df:4d:11:16:4c:2c:e4:d8:9a:01:78:81:89:
a7:ad:bc:34:5d:e8:a4:47:00:31:ab:50:1b:28:fc:f8:f6:aa:
08:81:06:8d:c2:6c:f0:ab:40:dc:95:c3:c1:67:45:6d:31:e7:
b0:8a:1a:b8:63:22:17:b4:ba:4e:3c:85:9f:ff:29:47:86:72:
1e:42:d2:5a:37:40:c0:3d:52:70:19:54:14:7c:79:35:28:44:
75:54:92:83:31:6a:e8:13:ea:bb:23:b7:95:0d:d3:89:86:41:
2a:09:ed:37:1c:17:d8:86:11:c0:0f:0e:c6:c4:1b:47:ab:f5:
3d:f4:3d:c4:a2:e2:9a:ec:7b:ca:cf:67:46:e8:ec:68:b3:6e:
e9:ce:8f:ad:c7:cf:09:66:9b:60:4a:1d:2c:1d:4e:04:7d:ae:
22:6a:df:7b:b0:ad:87:ea:1b:90:d8:f3:de:67:48:4d:40:7f:
88:ee:de:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:57:09 2024 by rpki-client on console-fra.rpki-client.org