Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/aiSmGzxaL-HcKK2jKRjI3pWh8SM.roa
File: aiSmGzxaL-HcKK2jKRjI3pWh8SM.roa (raw, json)
Hash identifier: uctPIDz0RmW46gNE2+dOtL8AFyuAANfzej6zgPBWD5U=
Subject key identifier: 6A:24:A6:1B:3C:5A:2F:E1:DC:28:AD:A3:29:18:C8:DE:95:A1:F1:23
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01856F14E63FAB894BD70890CB9F40E49302
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/aiSmGzxaL-HcKK2jKRjI3pWh8SM.roa
Signing time: Sun 01 Jan 2023 20:45:18 +0000
ROA not before: Sun 01 Jan 2023 20:45:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8751
IP address blocks: 193.226.85.0/24 maxlen: 32
81.180.224.0/24 maxlen: 32
193.231.133.0/24 maxlen: 24
193.231.169.0/24 maxlen: 32
81.181.146.0/24 maxlen: 32
80.96.28.0/24 maxlen: 32
85.120.250.0/24 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:e6:3f:ab:89:4b:d7:08:90:cb:9f:40:e4:93:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 20:45:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6a24a61b3c5a2fe1dc28ada32918c8de95a1f123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d1:94:37:48:01:86:21:ab:09:d9:a1:67:39:
05:f7:d5:79:89:10:05:0f:1c:64:e9:64:af:e1:b5:
f3:8f:60:aa:90:d4:2e:d8:70:d6:c7:39:05:f9:64:
58:7a:7e:b8:90:ba:7b:1d:77:85:78:51:c7:89:0c:
ad:ca:a2:9b:02:eb:7e:9d:ae:77:64:ca:c8:5b:3a:
f0:0a:96:c7:89:df:0e:69:ec:0e:ce:f0:1a:f9:81:
0e:9b:4d:3b:c9:f3:80:b0:1a:66:b3:8e:7f:21:bd:
77:76:af:3c:f1:5f:5e:b2:ab:84:e3:5f:9e:e2:7c:
51:be:93:50:7f:8c:c2:4a:b0:32:be:6e:ad:ad:e7:
4e:48:09:65:fa:89:6a:37:72:41:9b:b7:7b:67:7e:
07:eb:b4:e1:88:f1:d4:86:21:2e:45:33:f4:3b:82:
73:e4:20:17:06:6d:f4:6e:93:cd:ae:9c:4d:ed:47:
44:78:66:34:56:1d:ea:6a:17:da:03:36:8a:ba:4e:
37:7c:95:e8:f5:0c:d0:c3:65:f3:38:d0:b7:e7:73:
76:49:4f:c2:92:98:ab:3a:e9:45:00:4b:3b:f2:2e:
2c:95:97:89:70:d6:ff:49:48:98:7b:f0:8b:62:85:
14:58:69:6d:3b:73:50:13:0d:f3:d5:f3:81:a1:86:
a8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:24:A6:1B:3C:5A:2F:E1:DC:28:AD:A3:29:18:C8:DE:95:A1:F1:23
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/aiSmGzxaL-HcKK2jKRjI3pWh8SM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.28.0/24
81.180.224.0/24
81.181.146.0/24
85.120.250.0/24
193.226.85.0/24
193.231.133.0/24
193.231.169.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:a2:60:19:74:d8:4b:52:38:1c:c4:5b:9b:73:24:cc:c6:25:
19:06:34:c8:08:7c:ed:ad:64:37:10:d9:e2:b4:14:c9:92:b9:
63:a3:f4:cd:6c:5d:cf:25:35:3b:20:3d:7b:fa:d1:4c:6d:f3:
db:0d:85:a3:51:a7:09:d7:98:a7:0e:11:8f:34:87:3c:3c:e6:
00:35:bf:a4:63:d6:ab:e1:82:3d:fe:18:67:63:2c:a7:b3:ee:
4b:36:1f:b9:b2:72:76:ce:d5:9a:42:d5:40:f6:3c:24:d9:77:
a4:3a:82:90:ea:7c:24:91:e2:63:1c:0f:1b:9f:18:45:ff:7d:
bf:a2:07:d1:dc:34:c7:47:45:d8:fc:a7:30:69:ae:50:db:6e:
f7:08:5e:9c:ac:1f:b8:5d:f2:19:ba:61:f1:1b:96:0b:b9:a7:
c2:ba:11:d4:65:d8:73:cc:43:18:d0:7c:a2:45:34:b8:1d:52:
fa:64:85:24:a8:1c:bc:fb:b3:70:db:97:46:4c:69:b7:bb:64:
61:2b:c7:65:12:b5:7c:b0:da:fe:25:24:92:1f:c9:b3:6c:da:
a6:95:bd:d5:1c:21:18:f3:10:f5:ff:61:7c:fe:b6:6a:cc:d5:
57:c1:3c:f6:4b:06:36:87:4a:3b:fa:6f:9a:70:04:ba:2d:ad:
d3:58:33:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:06 2024 by rpki-client on console-fra.rpki-client.org