Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/8evq2Z58I5wwt4vI3HVr-XFU68g.roa
File: 8evq2Z58I5wwt4vI3HVr-XFU68g.roa (raw, json)
Hash identifier: /696qwQmHr2+kWmTzW+Yba4jiiAcBAphdFUHdbPu9lI=
Subject key identifier: F1:EB:EA:D9:9E:7C:23:9C:30:B7:8B:C8:DC:75:6B:F9:71:54:EB:C8
Certificate issuer: /CN=06da1c6b1a65f7a3d97f9bd75e7cac3135246fa5
Certificate serial: 018926B51B74383CB2E40399ED88FCC742CE
Authority key identifier: 06:DA:1C:6B:1A:65:F7:A3:D9:7F:9B:D7:5E:7C:AC:31:35:24:6F:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/8evq2Z58I5wwt4vI3HVr-XFU68g.roa
Signing time: Wed 05 Jul 2023 15:39:10 +0000
ROA not before: Wed 05 Jul 2023 15:39:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51395
IP address blocks: 185.85.108.0/22 maxlen: 22
185.32.220.0/22 maxlen: 22
185.32.221.0/24 maxlen: 24
185.32.223.0/24 maxlen: 24
185.189.148.0/22 maxlen: 22
185.189.149.128/25 maxlen: 25
185.189.151.0/24 maxlen: 24
185.195.68.0/23 maxlen: 23
185.195.68.0/24 maxlen: 24
185.195.69.0/24 maxlen: 24
195.225.117.0/24 maxlen: 24
195.225.118.0/23 maxlen: 23
176.10.96.0/19 maxlen: 24
176.10.97.0/25 maxlen: 25
176.10.111.0/24 maxlen: 24
176.10.118.128/25 maxlen: 25
176.10.125.0/25 maxlen: 25
176.10.124.128/26 maxlen: 26
176.10.119.0/24 maxlen: 24
91.192.102.0/24 maxlen: 24
91.192.100.0/22 maxlen: 22
91.201.56.0/22 maxlen: 22
176.10.104.240/32 maxlen: 32
2a0b:ee80::/29 maxlen: 29
2a0a:5dc0::/29 maxlen: 29
2a00:bd80:a176:10::/64 maxlen: 64
2a00:bd80::/32 maxlen: 32
2a0b:ee80:0:2::/64 maxlen: 64
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:26:b5:1b:74:38:3c:b2:e4:03:99:ed:88:fc:c7:42:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06da1c6b1a65f7a3d97f9bd75e7cac3135246fa5
Validity
Not Before: Jul 5 15:39:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f1ebead99e7c239c30b78bc8dc756bf97154ebc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:95:0c:74:6e:30:6b:66:cc:f7:28:ea:8d:9f:
eb:f2:64:ff:00:3c:bb:25:5d:12:5f:7d:a4:a7:27:
b5:96:72:30:ed:2a:ff:a0:37:59:27:d2:f2:bc:40:
77:25:d7:04:6e:0f:27:ac:da:20:4a:6b:9b:96:5e:
db:ab:4d:d1:1e:55:6c:95:0c:e0:61:d1:86:38:01:
a9:85:70:96:82:58:22:43:84:ad:4d:09:ab:db:8f:
11:c9:b6:f7:64:c3:26:a0:63:a8:df:ce:9f:5f:41:
bb:68:82:1d:24:54:21:44:e5:3a:48:7c:09:1e:a5:
99:3b:90:fd:c9:99:08:e1:ce:be:11:a0:a0:26:1a:
3d:f3:b5:fb:48:76:72:fc:86:8f:42:1c:40:7e:de:
50:11:20:31:fc:06:01:2d:c6:2e:a2:b6:0c:3b:81:
03:4a:98:22:dd:83:50:7b:4e:89:89:91:8f:42:5a:
76:47:f0:84:07:3d:75:03:90:d7:74:da:e2:50:98:
29:32:6d:7d:84:64:af:a2:8b:b6:98:d0:a1:80:df:
94:82:1c:03:9b:05:6c:e0:67:e5:92:10:a0:10:96:
4a:7b:2e:30:05:82:3c:99:22:56:a4:d6:c1:28:4c:
ab:27:5e:15:39:a3:93:ba:2f:89:4e:08:86:98:28:
bd:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:EB:EA:D9:9E:7C:23:9C:30:B7:8B:C8:DC:75:6B:F9:71:54:EB:C8
X509v3 Authority Key Identifier:
keyid:06:DA:1C:6B:1A:65:F7:A3:D9:7F:9B:D7:5E:7C:AC:31:35:24:6F:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/8evq2Z58I5wwt4vI3HVr-XFU68g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.100.0/22
91.201.56.0/22
176.10.96.0/19
185.32.220.0/22
185.85.108.0/22
185.189.148.0/22
185.195.68.0/23
195.225.117.0-195.225.119.255
IPv6:
2a00:bd80::/32
2a0a:5dc0::/29
2a0b:ee80::/29
Signature Algorithm: sha256WithRSAEncryption
21:4c:2b:02:36:4d:03:dd:17:76:e1:b9:5f:b3:fa:47:9a:be:
8e:80:c2:1a:3e:08:55:7f:84:4e:a8:c5:07:17:bb:f5:fb:3f:
8a:ff:04:a6:0b:10:e6:36:4a:af:f7:10:0e:d1:a3:d5:26:26:
34:b1:b9:ee:a5:3e:a1:cf:06:13:2a:54:65:8f:7a:67:90:2a:
fb:b4:34:5c:b1:f1:2f:1f:e5:53:90:49:cc:42:38:bd:6a:dc:
1d:4d:74:37:76:bd:ac:ea:fa:d0:64:b7:91:bc:1d:ce:aa:da:
e2:7f:9a:a3:5a:54:88:38:11:c5:29:8e:c6:3c:c3:be:f3:0a:
c4:ac:0f:37:52:93:61:14:2b:b0:1a:94:93:53:b1:5b:af:c7:
83:d2:50:d5:a6:41:3c:8f:71:a0:03:d6:95:ac:07:54:e6:5b:
9f:49:08:52:a9:2d:71:f3:57:f2:72:9c:98:76:7a:e7:ca:00:
05:c3:f2:71:fe:a8:ed:25:f6:bb:1f:94:cf:98:b3:0b:fe:ea:
e4:ac:51:41:47:3e:5f:74:75:a4:4b:6c:0f:b6:d5:2b:03:19:
f3:b9:fa:73:a9:33:b8:c9:bd:1c:2c:13:62:f4:0e:1a:7c:83:
09:f7:16:f8:89:b6:25:4b:1c:75:52:21:3c:7a:3a:a6:79:58:
4e:94:c2:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:29:23 2024 by rpki-client on console-ams.rpki-client.org