Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/cZl3gXaTpomyHGtdSQqylpTarJE.roa
File: cZl3gXaTpomyHGtdSQqylpTarJE.roa (raw, json)
Hash identifier: 7nuX5cISVjko6kCw4LOQIneIZUCBp3HWgwanhqf8InA=
Subject key identifier: 71:99:77:81:76:93:A6:89:B2:1C:6B:5D:49:0A:B2:96:94:DA:AC:91
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 018AFC17E1F5D7881E4472F6273E7044B8D9
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/cZl3gXaTpomyHGtdSQqylpTarJE.roa
Signing time: Wed 04 Oct 2023 19:08:58 +0000
ROA not before: Wed 04 Oct 2023 19:08:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39521
IP address blocks: 85.8.160.0/22 maxlen: 22
193.38.44.0/22 maxlen: 22
139.28.240.0/22 maxlen: 22
185.231.224.0/22 maxlen: 22
139.28.48.0/22 maxlen: 22
213.139.224.0/22 maxlen: 22
83.171.244.0/22 maxlen: 22
85.8.156.0/22 maxlen: 22
92.249.60.0/22 maxlen: 22
176.96.128.0/22 maxlen: 22
194.93.48.0/22 maxlen: 22
176.53.156.0/22 maxlen: 22
176.53.168.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 11 Oct 2023 14:38:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fc:17:e1:f5:d7:88:1e:44:72:f6:27:3e:70:44:b8:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Oct 4 19:08:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=719977817693a689b21c6b5d490ab29694daac91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e9:2b:76:8d:90:19:b6:ed:9f:46:2b:5b:28:
f6:b0:fd:cc:0c:5a:fb:f6:0d:9e:62:c1:7e:9d:3b:
21:ce:31:02:4d:63:9b:e7:f7:84:52:34:d9:1b:84:
10:16:6d:e7:7b:55:7c:be:7d:6d:65:6c:d4:79:f6:
98:02:7a:a8:15:09:32:91:66:27:38:32:e1:a6:88:
07:4c:24:65:4d:b4:c8:77:71:ea:b7:6a:a4:28:0b:
58:93:2f:cb:54:20:82:1f:1a:d1:5e:69:ec:5f:7d:
0b:d3:56:12:52:d7:7e:32:8d:88:56:b8:4f:c9:e2:
e8:8e:20:52:80:28:28:c9:e8:e7:ae:41:66:07:3e:
d8:83:4c:e4:96:82:9d:62:53:d7:4b:5f:5f:92:c8:
f4:cf:b8:18:f5:42:98:27:1c:85:fe:e6:7e:f9:ed:
cb:28:fd:01:cc:1b:8e:07:2f:7b:32:48:84:40:37:
3a:39:9d:44:d4:6c:95:ec:d0:ba:6b:1d:a5:1b:89:
95:a5:ba:c3:e5:7e:65:71:c2:21:55:bd:aa:4a:a3:
bd:76:66:01:4f:0b:f2:8e:e1:d2:ff:03:8b:62:08:
e7:aa:fb:b8:f0:8e:62:bc:bb:03:e3:fb:0e:30:7c:
f3:b0:72:bb:e8:cb:0f:4a:0f:6a:ca:81:b6:46:d3:
ab:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:99:77:81:76:93:A6:89:B2:1C:6B:5D:49:0A:B2:96:94:DA:AC:91
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/cZl3gXaTpomyHGtdSQqylpTarJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.171.244.0/22
85.8.156.0-85.8.163.255
92.249.60.0/22
139.28.48.0/22
139.28.240.0/22
176.53.156.0/22
176.53.168.0/22
176.96.128.0/22
185.231.224.0/22
193.38.44.0/22
194.93.48.0/22
213.139.224.0/22
Signature Algorithm: sha256WithRSAEncryption
78:84:28:1e:c9:c0:26:32:8a:d9:5d:59:da:1b:a2:48:1e:67:
d3:15:84:11:a1:5f:eb:88:87:4a:b9:b3:6b:26:cb:6c:0c:aa:
d3:ef:dc:46:00:0e:36:0b:1b:be:59:99:62:d9:88:de:8a:91:
5e:8f:0e:39:a4:15:4c:ab:ec:aa:23:74:aa:a4:82:d2:c8:23:
4a:21:f7:f3:28:22:0b:5c:eb:23:eb:d5:b6:44:77:92:36:96:
9c:2d:61:29:b3:dc:d1:03:9a:78:ba:10:4f:18:30:3b:c3:97:
73:02:e0:1e:ff:b5:4b:86:35:12:fd:99:56:2c:a3:5c:75:07:
b2:74:4f:c5:d6:c4:2c:bf:f5:fb:c2:6a:13:fb:e3:dc:f8:a2:
fd:74:d0:b1:f7:f5:98:64:75:e3:ce:f9:79:89:10:fb:d2:93:
b2:0a:a0:98:8a:c6:1d:d2:2e:58:f3:21:d9:f4:43:d4:6d:bc:
50:2b:1a:fb:d5:56:83:df:6d:fc:03:39:d3:41:35:0c:9d:d9:
52:c3:f1:a0:8c:77:ff:51:6b:f4:0e:25:02:7b:73:84:6f:e5:
8d:b6:7c:75:67:18:1c:04:7b:5e:b5:ca:e7:06:fc:b9:a9:21:
59:d9:d6:d2:39:16:ba:1e:f3:44:eb:01:8d:c9:9d:dd:27:4a:
02:4a:05:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:50 2024 by rpki-client on console-fra.rpki-client.org