Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/j78553zyK6n_SREYczQudtOJ9nc.roa
File: j78553zyK6n_SREYczQudtOJ9nc.roa (raw, json)
Hash identifier: 5neU9bUvDf/oXxelYsY2hkkqtrlqw7mMstg+3OePY6Q=
Subject key identifier: 8F:BF:39:E7:7C:F2:2B:A9:FF:49:11:18:73:34:2E:76:D3:89:F6:77
Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Certificate serial: 018B8A3E89BE4C13DD08D797DBE34FD3D1B9
Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/j78553zyK6n_SREYczQudtOJ9nc.roa
Signing time: Wed 01 Nov 2023 09:37:16 +0000
ROA not before: Wed 01 Nov 2023 09:37:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207990
IP address blocks: 194.53.70.0/24 maxlen: 32
45.156.224.0/22 maxlen: 32
194.124.240.0/24 maxlen: 32
194.124.239.0/24 maxlen: 32
194.124.247.0/24 maxlen: 32
194.124.248.0/24 maxlen: 32
193.228.58.0/23 maxlen: 32
188.119.154.0/24 maxlen: 32
92.118.208.0/22 maxlen: 32
194.88.143.0/24 maxlen: 32
45.66.176.0/22 maxlen: 32
45.154.192.0/22 maxlen: 32
193.254.27.0/24 maxlen: 32
193.254.28.0/24 maxlen: 32
45.84.228.0/22 maxlen: 32
139.28.120.0/22 maxlen: 32
45.82.96.0/22 maxlen: 32
185.36.254.0/24 maxlen: 32
185.223.248.0/22 maxlen: 32
45.10.236.0/22 maxlen: 32
63.141.36.0/23 maxlen: 32
194.0.133.0/24 maxlen: 32
194.0.136.0/24 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8a:3e:89:be:4c:13:dd:08:d7:97:db:e3:4f:d3:d1:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Validity
Not Before: Nov 1 09:37:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8fbf39e77cf22ba9ff49111873342e76d389f677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:68:4a:51:a3:f2:46:cb:66:01:4b:55:43:73:
0a:cc:94:ed:2a:3f:19:19:14:91:1b:59:47:f3:b1:
e9:8e:34:ca:99:50:35:0a:cd:3d:2d:3f:a5:9f:9d:
10:1f:a1:9c:d0:5f:b7:5a:69:89:4f:20:eb:00:19:
ec:38:79:99:b4:09:8e:0c:92:57:76:19:b4:e2:c1:
b4:94:ea:01:7a:03:3a:87:6f:df:f7:0a:8f:1e:13:
d5:a8:81:66:6d:08:84:93:0e:4f:d6:d2:b3:3c:d2:
90:ab:5d:6c:07:d9:c1:1c:80:e7:b4:8a:d5:fa:7c:
31:00:ff:14:32:1e:06:6a:e3:20:8f:bc:f0:6f:99:
49:f9:14:ef:60:87:dc:f2:a1:e7:45:66:24:70:ac:
6f:12:e0:a3:ea:ea:cc:c1:3d:7d:8a:af:f2:7f:a5:
23:eb:86:0e:b7:44:18:7a:2a:c2:1e:4e:d0:c2:c3:
1d:86:2a:0a:ca:fd:20:95:0c:88:04:4a:16:86:8c:
9c:a6:cf:2c:13:94:d8:dc:32:d5:c5:52:31:3f:c2:
e3:68:ec:24:da:c5:80:93:ae:58:c2:46:9f:cc:fe:
38:65:61:4b:53:4e:49:43:87:15:46:91:38:a2:5d:
9b:2e:45:f3:c9:42:dd:87:4b:ca:c0:99:e6:3b:ee:
16:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:BF:39:E7:7C:F2:2B:A9:FF:49:11:18:73:34:2E:76:D3:89:F6:77
X509v3 Authority Key Identifier:
keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/j78553zyK6n_SREYczQudtOJ9nc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.236.0/22
45.66.176.0/22
45.82.96.0/22
45.84.228.0/22
45.154.192.0/22
45.156.224.0/22
63.141.36.0/23
92.118.208.0/22
139.28.120.0/22
185.36.254.0/24
185.223.248.0/22
188.119.154.0/24
193.228.58.0/23
193.254.27.0-193.254.28.255
194.0.133.0/24
194.0.136.0/24
194.53.70.0/24
194.88.143.0/24
194.124.239.0-194.124.240.255
194.124.247.0-194.124.248.255
Signature Algorithm: sha256WithRSAEncryption
82:1b:c3:3a:b9:45:58:d5:3b:9b:8b:f3:4b:c7:79:84:36:5f:
5c:39:f2:3f:99:49:5a:2a:d8:5c:04:47:23:66:6d:13:b0:87:
0a:a6:47:0c:57:7e:44:db:22:ca:cf:a1:98:53:07:be:ae:93:
35:63:8a:cf:3f:a6:1c:f6:ba:87:2b:4d:b4:81:63:60:7d:2c:
69:21:6d:0e:8c:4d:bc:55:2a:14:79:e0:5d:8d:00:70:a0:78:
0d:01:ec:5d:41:ed:b9:8c:9a:9b:27:7a:9b:2f:b8:2e:aa:d6:
a2:d9:87:49:72:10:ce:5f:46:2e:3f:5b:ef:39:42:f3:56:ad:
5c:65:5c:bd:3d:ce:63:91:99:21:ac:4e:5f:cc:fb:f2:b1:42:
65:b1:0a:ff:b7:50:08:9e:ef:e1:82:e9:8a:10:de:04:9f:b8:
72:cd:ff:de:a8:09:5e:24:e5:70:f3:8c:9b:71:4b:94:3e:27:
66:87:ca:0d:fc:de:94:7e:a5:e1:91:e8:de:61:d4:c2:a8:c6:
74:44:aa:a9:96:9f:91:d3:e4:f4:74:2b:f9:0f:9a:18:38:62:
a6:66:25:bb:7d:e7:11:77:30:ac:12:ab:87:eb:6b:2b:b0:c5:
e1:46:5a:d2:d6:84:3f:b6:bc:35:4d:c0:e1:f4:f6:91:54:2e:
f3:21:8e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 6 16:12:32 2023 by rpki-client on console-ams.rpki-client.org