Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/jIfJoOGYQdFgB7uPGR6X3EV96cs.roa
File: jIfJoOGYQdFgB7uPGR6X3EV96cs.roa (raw, json)
Hash identifier: RcNhrIkVZs4nrZNtuYYsgoJVUFSSxFQJubvhmLaZO7M=
Subject key identifier: 8C:87:C9:A0:E1:98:41:D1:60:07:BB:8F:19:1E:97:DC:45:7D:E9:CB
Certificate issuer: /CN=15fd3804e00b9e06a82ced9f07b34fe3fd80394e
Certificate serial: 01856BB7D1D312938D68AA65DA3DE50FC8A4
Authority key identifier: 15:FD:38:04:E0:0B:9E:06:A8:2C:ED:9F:07:B3:4F:E3:FD:80:39:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/jIfJoOGYQdFgB7uPGR6X3EV96cs.roa
Signing time: Sun 01 Jan 2023 05:04:46 +0000
ROA not before: Sun 01 Jan 2023 05:04:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61173
IP address blocks: 45.159.112.0/24 maxlen: 24
45.159.115.0/24 maxlen: 24
45.159.114.0/24 maxlen: 24
45.159.113.0/24 maxlen: 24
185.255.88.0/24 maxlen: 24
185.255.89.0/24 maxlen: 24
185.255.91.0/24 maxlen: 24
185.255.90.0/24 maxlen: 24
193.141.65.0/24 maxlen: 24
185.50.38.0/24 maxlen: 24
185.50.37.0/24 maxlen: 24
185.50.39.0/24 maxlen: 24
185.213.165.0/24 maxlen: 24
185.213.164.0/24 maxlen: 24
185.213.166.0/24 maxlen: 24
193.141.64.0/24 maxlen: 24
185.213.167.0/24 maxlen: 24
193.141.127.0/24 maxlen: 24
193.141.126.0/24 maxlen: 24
185.4.31.0/24 maxlen: 24
185.4.28.0/24 maxlen: 24
185.4.30.0/24 maxlen: 24
185.4.29.0/24 maxlen: 24
185.116.163.0/24 maxlen: 24
185.116.160.0/24 maxlen: 24
185.116.162.0/24 maxlen: 24
185.116.161.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:b7:d1:d3:12:93:8d:68:aa:65:da:3d:e5:0f:c8:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15fd3804e00b9e06a82ced9f07b34fe3fd80394e
Validity
Not Before: Jan 1 05:04:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c87c9a0e19841d16007bb8f191e97dc457de9cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:05:c8:ad:e4:8f:09:20:2b:df:d9:09:1f:aa:
6c:f7:ff:29:95:82:76:8f:54:c7:c8:32:75:62:17:
9e:f1:d6:1b:0d:f5:20:4a:86:12:fa:f3:2c:7b:37:
ee:96:c1:51:6e:c8:b0:9b:3e:a2:59:7f:98:60:be:
57:25:60:9a:a7:d9:2a:d7:63:7a:a2:b5:3d:8a:65:
3c:69:a2:71:1e:2f:9f:33:a8:5e:cc:ab:2d:13:98:
37:ea:42:e2:0f:a4:07:85:6c:9d:42:ba:79:61:ed:
9d:df:71:6d:7a:a9:93:16:dd:b2:76:e9:e5:69:3a:
d8:c3:9c:c8:c3:fd:ab:d5:bb:97:8e:46:3a:e4:8c:
74:49:37:16:b9:62:43:87:7a:b0:db:91:9e:85:57:
8c:57:1d:a5:1a:97:35:d0:4a:dc:c7:6e:7b:a8:16:
43:93:13:7c:33:e6:0f:aa:50:05:cc:18:ac:31:c8:
47:cd:d1:48:64:d8:bd:5c:95:e9:e9:9a:c9:fb:62:
8c:c2:5e:63:0a:ca:51:4f:b0:1a:48:0c:f3:17:4a:
f3:45:ce:11:35:13:5a:a0:70:a4:2a:90:93:02:6d:
47:e3:f8:57:5b:cf:cc:e2:31:87:da:15:04:85:ef:
dc:12:cf:51:fb:23:39:ab:81:69:ea:64:3d:08:a3:
a7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:87:C9:A0:E1:98:41:D1:60:07:BB:8F:19:1E:97:DC:45:7D:E9:CB
X509v3 Authority Key Identifier:
keyid:15:FD:38:04:E0:0B:9E:06:A8:2C:ED:9F:07:B3:4F:E3:FD:80:39:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/jIfJoOGYQdFgB7uPGR6X3EV96cs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.112.0/22
185.4.28.0/22
185.50.37.0-185.50.39.255
185.116.160.0/22
185.213.164.0/22
185.255.88.0/22
193.141.64.0/23
193.141.126.0/23
Signature Algorithm: sha256WithRSAEncryption
07:3f:59:6d:c7:8a:4f:76:d1:3c:1e:a8:ac:a9:dc:3a:ce:6e:
7f:9c:56:af:87:3a:3c:02:e2:fa:93:96:06:93:f7:9a:6f:03:
1a:98:6b:d6:eb:c1:10:03:a5:22:5a:7c:94:0c:48:d4:80:8d:
8d:0d:61:cf:55:5c:1a:66:9b:c5:1d:ac:dc:90:6f:b7:84:fb:
2c:42:fb:74:f8:15:05:22:56:2c:c2:a9:53:85:07:da:0b:ef:
e2:f4:4b:56:93:ff:3c:20:d7:a4:90:43:5f:35:54:53:4f:7b:
fb:50:32:e1:a8:1c:05:3d:7a:0f:48:d3:4a:b5:10:6f:90:1e:
43:fc:2a:03:a0:71:11:d6:de:43:cb:92:b8:56:29:b2:c5:03:
2e:75:bb:35:79:92:1f:eb:d9:b4:1b:b1:6f:49:a8:45:0f:85:
32:cf:72:6c:55:bf:fd:a6:9a:8d:96:02:8a:ff:ac:c4:8d:65:
3a:3b:44:bc:78:68:1d:20:b3:af:ec:e5:20:82:60:0d:d0:f9:
87:0c:50:09:24:ac:a3:87:68:21:0c:87:60:75:f5:d6:50:e5:
f5:fe:76:cc:b0:f4:a3:ea:c1:b6:65:22:f3:9a:ee:7a:18:92:
e2:e6:18:75:38:64:cb:e9:36:88:b9:49:35:3a:18:92:b5:41:
6b:53:19:f2
-----BEGIN CERTIFICATE-----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Generated at Sun Sep 17 06:22:48 2023 by rpki-client on console-ams.rpki-client.org