Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/fJS5bS3lyGWI4DAgPNEX1uehAIU.roa
File: fJS5bS3lyGWI4DAgPNEX1uehAIU.roa (raw, json)
Hash identifier: BvvikwXBVsDyO29WGijxuTGHtBB0nNvkIlR6OcJbEI0=
Subject key identifier: 7C:94:B9:6D:2D:E5:C8:65:88:E0:30:20:3C:D1:17:D6:E7:A1:00:85
Certificate issuer: /CN=8cdcf26f74860588cac6bae17f99de22dbc49ae6
Certificate serial: 018BCE7071D9D297251C76203B4C439ADB8A
Authority key identifier: 8C:DC:F2:6F:74:86:05:88:CA:C6:BA:E1:7F:99:DE:22:DB:C4:9A:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/fJS5bS3lyGWI4DAgPNEX1uehAIU.roa
Signing time: Tue 14 Nov 2023 15:25:57 +0000
ROA not before: Tue 14 Nov 2023 15:25:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41114
IP address blocks: 31.11.40.0/21 maxlen: 24
45.151.16.0/22 maxlen: 22
147.78.164.0/22 maxlen: 22
193.148.80.0/22 maxlen: 22
45.157.248.0/22 maxlen: 22
77.83.228.0/22 maxlen: 22
185.98.64.0/22 maxlen: 22
62.192.140.0/22 maxlen: 22
213.226.72.0/22 maxlen: 22
2a0a:7980::/32 maxlen: 32
2a0d:e6c0::/32 maxlen: 48
2a09:4380::/32 maxlen: 32
2a09:26c0::/32 maxlen: 32
2a00:7aa0::/32 maxlen: 32
2a0f:d00::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ce:70:71:d9:d2:97:25:1c:76:20:3b:4c:43:9a:db:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cdcf26f74860588cac6bae17f99de22dbc49ae6
Validity
Not Before: Nov 14 15:25:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c94b96d2de5c86588e030203cd117d6e7a10085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:69:6c:11:5f:28:ae:75:49:61:fe:45:61:50:
ee:76:f1:99:e4:5e:de:ca:e4:b3:cc:bc:bc:5c:22:
ae:15:32:c8:55:16:70:5a:7c:0e:17:6a:d9:a9:7a:
85:f1:29:ac:cc:be:fa:e5:f3:5d:28:50:4b:84:5c:
3e:df:c0:1b:bb:b2:c7:00:67:20:43:db:63:87:de:
94:0d:bb:29:53:b8:f8:57:ed:96:63:bc:dc:ac:6f:
d7:d4:d4:b1:73:e6:29:cf:b1:d8:53:b2:e4:db:01:
93:99:5d:8e:c3:b1:cc:51:1a:60:22:65:60:d5:04:
ce:e0:71:2b:4d:f6:4a:b9:97:b2:5f:47:e2:3d:f8:
fd:f8:79:d8:ab:ee:f2:4e:46:f7:67:57:68:11:e1:
06:2b:3d:e8:fa:c5:d5:14:4c:f9:ed:94:de:db:0a:
8c:ed:9e:51:55:31:db:65:10:21:10:18:03:a1:b8:
f0:33:a3:fb:31:1a:54:31:25:e4:9e:8a:84:9d:4f:
9b:40:8a:ee:1d:f3:85:61:9a:a1:cf:60:58:13:71:
c6:d9:d1:80:6e:7f:2f:c6:d2:62:69:d8:c0:e2:7d:
0d:d6:27:74:0b:e4:60:0d:04:1a:7f:79:0c:ad:f0:
9e:a1:88:b7:87:a8:59:76:d8:56:91:ad:bc:e4:c5:
56:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:94:B9:6D:2D:E5:C8:65:88:E0:30:20:3C:D1:17:D6:E7:A1:00:85
X509v3 Authority Key Identifier:
keyid:8C:DC:F2:6F:74:86:05:88:CA:C6:BA:E1:7F:99:DE:22:DB:C4:9A:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/fJS5bS3lyGWI4DAgPNEX1uehAIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.11.40.0/21
45.151.16.0/22
45.157.248.0/22
62.192.140.0/22
77.83.228.0/22
147.78.164.0/22
185.98.64.0/22
193.148.80.0/22
213.226.72.0/22
IPv6:
2a00:7aa0::/32
2a09:26c0::/32
2a09:4380::/32
2a0a:7980::/32
2a0d:e6c0::/32
2a0f:d00::/32
Signature Algorithm: sha256WithRSAEncryption
46:4b:26:63:fb:67:c6:c6:20:c2:c8:16:b7:c5:8b:3f:94:f8:
e3:9b:e7:ed:a0:45:f7:61:6d:b9:ce:87:a2:13:76:c0:ea:a5:
70:2f:e0:5f:4b:2d:ce:40:96:dc:74:38:2f:51:98:76:03:87:
22:ba:11:95:3a:12:c7:9d:5e:db:b4:4c:09:46:af:b0:f7:a2:
51:01:57:f2:1c:af:33:e2:41:28:b0:e5:4f:a1:1a:f2:9a:f0:
e9:69:a5:3b:c2:37:a5:a9:04:d9:d7:62:5a:5b:b9:08:34:43:
23:34:1b:40:6d:ee:8f:41:e4:0b:f8:ec:0b:16:68:84:d4:19:
66:f9:fc:91:30:55:ab:4e:48:eb:53:91:cb:72:38:8c:02:26:
33:bb:14:5f:41:d9:30:45:2e:59:5b:08:01:62:87:ce:e3:27:
48:93:a0:43:b2:a6:0d:7e:e9:b1:19:b6:c4:89:12:58:95:22:
34:75:93:a6:af:50:68:7d:3f:1d:c9:76:ac:a9:f6:0a:37:88:
07:3f:83:67:30:a4:ab:36:b6:c8:bd:91:24:fd:0e:fc:c4:81:
fe:7c:7f:5f:a4:4e:9a:6f:c8:be:1b:31:f4:f6:6f:4e:8a:da:
38:eb:c2:c2:1f:da:ca:b6:2d:c6:52:74:af:9e:57:aa:fc:72:
fc:72:d2:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 23 10:39:03 2023 by rpki-client on console-fra.rpki-client.org