Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/D5ecrdp2Nr2UX0jiWF3OuefzL0U.roa
File: D5ecrdp2Nr2UX0jiWF3OuefzL0U.roa (raw, json)
Hash identifier: 5I7CCgHq6tA79h+DRLjKniw9bEz9qwfJ2fFggt54+dw=
Subject key identifier: 0F:97:9C:AD:DA:76:36:BD:94:5F:48:E2:58:5D:CE:B9:E7:F3:2F:45
Certificate issuer: /CN=d9f9fa7b944f7e7c60d73ef10b776fc27995a4ed
Certificate serial: 0188208E31263FB57731A8FAC3C9B8EF30DC
Authority key identifier: D9:F9:FA:7B:94:4F:7E:7C:60:D7:3E:F1:0B:77:6F:C2:79:95:A4:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fn6e5RPfnxg1z7xC3dvwnmVpO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/D5ecrdp2Nr2UX0jiWF3OuefzL0U.roa
Signing time: Mon 15 May 2023 17:56:09 +0000
ROA not before: Mon 15 May 2023 17:56:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20661
IP address blocks: 103.220.0.0/22 maxlen: 22
95.85.96.0/19 maxlen: 19
95.85.96.0/24 maxlen: 24
95.85.98.0/24 maxlen: 24
95.85.99.0/24 maxlen: 24
95.85.101.0/24 maxlen: 24
95.85.100.0/22 maxlen: 22
95.85.100.0/24 maxlen: 24
95.85.104.0/22 maxlen: 22
95.85.104.0/24 maxlen: 24
177.93.143.0/24 maxlen: 24
185.69.184.0/24 maxlen: 24
216.250.8.0/21 maxlen: 21
119.235.112.0/20 maxlen: 20
217.174.224.0/20 maxlen: 20
2a05:2180::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:8e:31:26:3f:b5:77:31:a8:fa:c3:c9:b8:ef:30:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f9fa7b944f7e7c60d73ef10b776fc27995a4ed
Validity
Not Before: May 15 17:56:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0f979cadda7636bd945f48e2585dceb9e7f32f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:4d:df:c2:bc:ce:c8:ab:3c:79:1a:04:f7:64:
37:24:59:43:0c:d1:b4:83:e9:7e:44:aa:18:e5:19:
30:f4:dd:40:bb:05:ad:91:2e:22:c0:c6:bd:28:bb:
81:38:a2:1e:17:ea:61:0f:81:63:cc:6b:67:81:21:
cb:5c:58:96:56:a6:9c:58:e0:d3:e5:4c:28:a9:0b:
89:00:c1:a4:ff:4e:94:55:aa:1e:2b:cf:0e:b2:1c:
29:40:ed:dc:86:ef:69:2f:58:50:71:81:00:9f:3b:
96:56:46:8a:6d:e1:53:09:99:2e:5c:f7:6a:6f:af:
4d:32:96:9b:09:b6:44:fb:1d:86:f8:e1:32:25:fb:
44:4c:98:e9:b8:a1:0b:07:02:73:ff:d0:5e:11:0d:
09:ae:05:4a:22:b5:28:13:38:bf:88:0f:e5:a7:cf:
9b:f7:1a:b1:60:0d:75:a5:10:21:ea:1f:68:92:2b:
22:88:6f:fa:fc:f5:a1:ef:48:3d:7e:b2:c4:c4:6f:
e2:67:76:38:5f:c7:49:25:f2:2d:30:d9:8e:26:47:
7a:f1:5d:a6:8e:01:d4:6b:4d:65:72:62:6e:05:94:
56:a4:81:65:95:29:14:65:cc:b8:5a:08:09:97:0d:
af:87:67:e3:f1:71:59:b8:a0:d9:92:de:f7:2c:7f:
f0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:97:9C:AD:DA:76:36:BD:94:5F:48:E2:58:5D:CE:B9:E7:F3:2F:45
X509v3 Authority Key Identifier:
keyid:D9:F9:FA:7B:94:4F:7E:7C:60:D7:3E:F1:0B:77:6F:C2:79:95:A4:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fn6e5RPfnxg1z7xC3dvwnmVpO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/D5ecrdp2Nr2UX0jiWF3OuefzL0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.85.96.0/19
103.220.0.0/22
119.235.112.0/20
177.93.143.0/24
185.69.184.0/24
216.250.8.0/21
217.174.224.0/20
IPv6:
2a05:2180::/29
Signature Algorithm: sha256WithRSAEncryption
69:8b:92:97:15:be:45:a5:c4:d7:f5:0b:d9:8c:8e:f4:e3:a7:
a2:8c:a6:f5:b1:4e:4d:6c:d2:8f:77:2d:66:53:4a:49:1f:24:
0c:d1:02:63:3f:3f:f0:d1:cd:8b:ec:a7:e9:55:c3:9e:fe:ed:
78:08:c3:9d:d8:7c:3a:b5:6e:5a:04:3b:5d:86:bb:cf:32:9a:
b8:de:7e:e9:01:bf:95:22:a5:51:bb:10:0c:43:bf:f4:17:0a:
e2:d9:30:c9:23:1d:6d:2d:70:fa:08:df:d2:87:7f:f1:5d:8d:
b4:98:d2:34:d2:69:1e:ce:07:f3:6d:82:98:0e:d2:62:dd:f9:
02:18:32:e8:d3:5e:e1:98:47:28:5a:68:ab:6e:cf:e8:3e:41:
ab:9a:d3:c6:a7:44:84:6f:b4:b5:7d:ae:45:0b:f6:64:41:11:
ad:86:d1:0c:59:5e:33:c5:75:77:6d:2e:0e:7b:35:cf:53:66:
b7:01:cf:61:06:6c:75:01:21:f9:bf:5b:d2:bb:b4:53:a2:dd:
80:07:d6:ac:0e:c4:f3:06:b1:13:7e:82:10:25:d2:a5:2f:ac:
e0:57:99:d1:67:7c:ec:c3:2b:ee:ed:ac:ba:dc:21:e9:84:8d:
0c:6b:47:3a:c1:1d:a4:39:ad:a4:d9:b0:77:db:fc:4f:b5:7a:
55:af:05:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:33:30 2024 by rpki-client on console-fra.rpki-client.org