Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/35ffbf-485d-4906-8654-8ac7e036eb81/1/Plj2NLZFQyjeI_mz5YbVFzS-4yo.roa
File: Plj2NLZFQyjeI_mz5YbVFzS-4yo.roa (raw, json)
Hash identifier: uiqmyOjhGW8WcTbkB89eRdIYsKuNfLnIEfqp0wG4naQ=
Subject key identifier: 3E:58:F6:34:B6:45:43:28:DE:23:F9:B3:E5:86:D5:17:34:BE:E3:2A
Certificate issuer: /CN=e9bf904f418bfc7b49b85f3abdac417cca5e3759
Certificate serial: 018570D5245BE9CD08415F48D54883DA5BA5
Authority key identifier: E9:BF:90:4F:41:8B:FC:7B:49:B8:5F:3A:BD:AC:41:7C:CA:5E:37:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6b-QT0GL_HtJuF86vaxBfMpeN1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/35ffbf-485d-4906-8654-8ac7e036eb81/1/Plj2NLZFQyjeI_mz5YbVFzS-4yo.roa
Signing time: Mon 02 Jan 2023 04:54:54 +0000
ROA not before: Mon 02 Jan 2023 04:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8896
IP address blocks: 185.126.184.0/22 maxlen: 22
212.33.128.0/19 maxlen: 19
212.33.133.0/24 maxlen: 24
185.15.216.0/24 maxlen: 24
185.15.216.0/22 maxlen: 22
89.221.96.0/20 maxlen: 20
185.92.52.0/22 maxlen: 22
77.241.96.0/20 maxlen: 20
2a00:1e18::/29 maxlen: 29
2a00:1e18::/32 maxlen: 32
2a00:1e19::/32 maxlen: 32
2a00:1e1c:3000::/36 maxlen: 36
2a00:1e1c:2000::/36 maxlen: 36
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:d5:24:5b:e9:cd:08:41:5f:48:d5:48:83:da:5b:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9bf904f418bfc7b49b85f3abdac417cca5e3759
Validity
Not Before: Jan 2 04:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e58f634b6454328de23f9b3e586d51734bee32a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:40:24:c4:f4:cd:54:b9:15:38:6d:a9:bf:26:
b4:30:d8:1e:e1:4a:b2:13:a0:e4:0b:17:2e:ce:6b:
44:e1:f2:a4:1c:92:44:17:ff:33:a9:41:1c:c4:b0:
f7:98:53:33:57:03:b3:d0:4c:f0:bb:b3:86:ef:82:
8f:7a:c5:f6:0e:9b:14:57:c7:6e:23:9c:dd:f1:f4:
b5:38:21:a7:d8:e2:31:74:cc:bb:5a:96:67:0a:0b:
f0:48:8a:3c:a0:c6:0f:d5:db:52:eb:58:25:1e:27:
57:d7:40:36:39:ab:cf:43:e6:1b:f7:9f:f8:c1:91:
67:65:14:6a:7d:9c:09:07:7d:9d:b8:72:1a:09:56:
94:c8:3e:da:ca:56:9d:99:1c:6b:eb:f0:39:09:44:
a1:bc:e7:a2:18:c8:7b:fc:b7:c7:68:d4:13:6c:df:
e1:e0:e7:dc:46:23:b1:59:49:fb:88:18:b4:37:ab:
31:ce:60:c0:07:8a:91:89:37:0e:be:0e:1c:e0:77:
4e:89:74:13:2f:ab:a6:6e:bb:2c:2a:e1:ac:ab:24:
40:c6:43:9b:7f:f5:de:9c:2b:88:7c:e6:5a:dd:c6:
26:1c:d3:91:e2:e2:59:a2:03:57:5f:7b:49:da:98:
e4:bb:d5:bf:89:b3:64:e1:cd:b8:c5:0b:b7:7a:64:
67:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:58:F6:34:B6:45:43:28:DE:23:F9:B3:E5:86:D5:17:34:BE:E3:2A
X509v3 Authority Key Identifier:
keyid:E9:BF:90:4F:41:8B:FC:7B:49:B8:5F:3A:BD:AC:41:7C:CA:5E:37:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b-QT0GL_HtJuF86vaxBfMpeN1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/35ffbf-485d-4906-8654-8ac7e036eb81/1/Plj2NLZFQyjeI_mz5YbVFzS-4yo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/35ffbf-485d-4906-8654-8ac7e036eb81/1/6b-QT0GL_HtJuF86vaxBfMpeN1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.241.96.0/20
89.221.96.0/20
185.15.216.0/22
185.92.52.0/22
185.126.184.0/22
212.33.128.0/19
IPv6:
2a00:1e18::/29
Signature Algorithm: sha256WithRSAEncryption
3a:2c:cd:43:57:21:a7:38:22:4f:11:2d:e2:c1:ed:cf:63:77:
cf:56:81:60:a0:9d:b1:f4:da:b7:83:9a:b4:40:b8:be:71:fd:
5b:be:56:ce:01:6f:07:50:ff:b6:e9:71:29:16:ea:78:56:e6:
51:4a:c7:d4:88:59:5b:45:1b:be:96:40:a2:47:91:ab:3c:31:
f9:13:0f:72:c9:22:79:4e:15:94:4d:98:ad:e1:08:03:58:ab:
34:d5:aa:3f:88:cd:4a:c9:7a:c6:e9:bf:af:51:f5:de:90:7a:
a5:79:8f:59:05:c5:d0:0a:91:92:1d:7b:86:c1:cd:2f:69:96:
58:b6:c2:bb:f2:17:db:8d:ab:7d:51:85:45:03:64:8a:07:88:
32:2d:72:96:da:4b:f7:e2:8b:63:46:39:f4:ad:7a:34:13:a0:
d2:f4:29:95:f3:81:fe:92:b6:48:dc:82:6f:cd:71:df:77:e9:
e8:ea:2f:14:65:a5:18:88:b1:84:f8:39:17:b6:b1:1c:a5:68:
0c:9b:90:2c:82:2a:f7:57:b6:f0:f1:ac:b6:fc:98:9f:6c:b1:
96:b6:26:4f:6d:f6:80:33:94:bc:10:a9:78:2f:b9:9f:62:6c:
40:a4:c8:85:e8:5b:1e:56:09:88:8a:9c:06:31:d1:39:8b:20:
64:27:5f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:07 2024 by rpki-client on console-ams.rpki-client.org