Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/cmnzLXsgABN2WuPHZVBIa5qZ5HA.roa
File: cmnzLXsgABN2WuPHZVBIa5qZ5HA.roa (raw, json)
Hash identifier: +xkZgqc4Hov4qS+zIEAipTgjCPdaRfhekzW+heOAcI4=
Subject key identifier: 72:69:F3:2D:7B:20:00:13:76:5A:E3:C7:65:50:48:6B:9A:99:E4:70
Certificate issuer: /CN=112ba797577ea60a561af9a4598c45060e3b7088
Certificate serial: 018A88F804C1BC9A991DE4BEE680B739BD55
Authority key identifier: 11:2B:A7:97:57:7E:A6:0A:56:1A:F9:A4:59:8C:45:06:0E:3B:70:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESunl1d-pgpWGvmkWYxFBg47cIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/cmnzLXsgABN2WuPHZVBIa5qZ5HA.roa
Signing time: Tue 12 Sep 2023 10:37:50 +0000
ROA not before: Tue 12 Sep 2023 10:37:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34779
IP address blocks: 93.103.224.0/19 maxlen: 19
93.103.160.0/19 maxlen: 19
91.246.224.0/19 maxlen: 19
93.103.192.0/19 maxlen: 19
89.233.112.0/20 maxlen: 20
194.28.108.0/22 maxlen: 22
89.212.0.0/18 maxlen: 18
84.255.209.0/24 maxlen: 24
84.255.210.0/24 maxlen: 24
188.159.224.0/19 maxlen: 19
188.230.160.0/19 maxlen: 19
84.255.192.0/18 maxlen: 18
188.230.128.0/19 maxlen: 19
93.103.0.0/19 maxlen: 19
89.212.128.0/18 maxlen: 18
93.103.32.0/19 maxlen: 19
188.230.192.0/19 maxlen: 19
193.138.32.0/19 maxlen: 24
89.212.64.0/18 maxlen: 18
188.230.224.0/19 maxlen: 19
93.103.96.0/19 maxlen: 19
46.248.64.0/19 maxlen: 19
185.179.48.0/22 maxlen: 22
89.212.23.160/27 maxlen: 27
119.12.128.0/20 maxlen: 20
93.103.128.0/19 maxlen: 19
93.103.64.0/19 maxlen: 19
89.212.192.0/18 maxlen: 18
185.49.116.0/22 maxlen: 22
2a01:263::/32 maxlen: 32
2a01:261::/32 maxlen: 32
2a01:264::/32 maxlen: 32
2a01:267::/32 maxlen: 32
2a01:260::/32 maxlen: 32
2a01:266::/32 maxlen: 32
2a01:265::/32 maxlen: 32
2a01:262::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:88:f8:04:c1:bc:9a:99:1d:e4:be:e6:80:b7:39:bd:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=112ba797577ea60a561af9a4598c45060e3b7088
Validity
Not Before: Sep 12 10:37:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7269f32d7b200013765ae3c76550486b9a99e470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:2f:1f:42:07:ca:26:40:73:bf:64:0b:bf:ea:
2c:01:42:e0:6d:f1:15:67:fa:6e:a9:f3:56:0a:41:
20:50:c6:0d:e2:31:23:fd:bd:6b:26:68:ef:d3:9c:
19:b8:e5:55:2e:cd:89:ea:60:cd:f8:52:d0:ab:1a:
6f:a3:fb:fb:3a:8f:01:f7:8c:df:ef:4c:ac:76:4d:
76:fb:af:9a:71:dc:e7:72:78:b9:8c:71:8a:94:b9:
17:64:04:52:aa:4c:62:78:82:54:3a:a1:9f:ac:d3:
76:76:a2:9b:2b:cd:de:c9:b3:e3:6f:8d:3a:54:6c:
c7:07:29:d3:6d:c7:49:c0:42:d6:f1:fb:92:54:cf:
49:ac:d6:90:59:87:97:63:d3:3b:f9:9b:27:90:e7:
6b:dc:f7:ad:5c:58:5a:ba:42:cf:2a:54:44:64:aa:
1d:52:87:cd:b2:7d:09:08:41:3e:b4:24:d2:35:69:
c1:06:b1:b3:85:0c:1c:4b:d0:d8:90:9d:84:f2:e0:
52:6e:84:64:d6:88:c4:ec:a0:de:90:d8:7b:0f:a5:
be:97:10:91:d4:e3:4f:19:df:77:7c:b9:f8:ce:dc:
c8:5e:db:af:5d:68:84:9a:0d:dc:f7:15:a0:96:20:
d7:5e:1a:e4:28:19:ca:64:44:14:17:b9:5e:b7:cc:
f1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:69:F3:2D:7B:20:00:13:76:5A:E3:C7:65:50:48:6B:9A:99:E4:70
X509v3 Authority Key Identifier:
keyid:11:2B:A7:97:57:7E:A6:0A:56:1A:F9:A4:59:8C:45:06:0E:3B:70:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESunl1d-pgpWGvmkWYxFBg47cIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/cmnzLXsgABN2WuPHZVBIa5qZ5HA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/ESunl1d-pgpWGvmkWYxFBg47cIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.248.64.0/19
84.255.192.0/18
89.212.0.0/16
89.233.112.0/20
91.246.224.0/19
93.103.0.0/16
119.12.128.0/20
185.49.116.0/22
185.179.48.0/22
188.159.224.0/19
188.230.128.0/17
193.138.32.0/19
194.28.108.0/22
IPv6:
2a01:260::/29
Signature Algorithm: sha256WithRSAEncryption
68:fc:3c:f6:8e:c1:0a:39:b7:3d:ba:53:6c:2a:bc:31:6a:e4:
c0:7b:74:c8:9b:e1:b7:f1:88:d7:0d:d6:0c:fd:00:bd:83:96:
ef:04:ec:90:9c:fd:11:16:ef:18:aa:fb:51:90:41:b9:1d:05:
d5:35:87:37:63:5a:c8:31:02:bf:20:e3:70:2e:2b:57:6d:e0:
16:39:9b:19:31:e9:92:61:70:a6:49:f2:e7:1b:55:14:52:66:
2b:cd:e6:4a:54:ac:b9:c8:63:f8:0f:88:ae:2c:74:cb:6b:6c:
1c:41:cd:86:8f:65:af:9e:f8:ba:83:fc:57:99:76:57:66:7b:
95:86:b2:01:0d:f1:12:40:a6:1d:84:a7:21:2a:79:e9:d7:42:
a9:5b:8d:a7:bb:4e:d3:d8:d7:0a:4f:c7:a6:f1:e3:f2:4a:c9:
48:20:08:b3:6f:96:86:f1:72:53:0a:a9:e0:fc:d1:74:de:23:
36:1c:14:37:63:41:82:b8:bd:ec:bc:37:44:5e:3b:04:de:1d:
4a:4a:95:d2:d2:5a:49:7a:0d:63:fb:ae:84:32:35:9e:2b:cf:
2f:c7:4c:37:81:b1:40:bd:b7:7e:d7:dd:64:93:9a:33:0e:37:
05:b4:0e:fc:f4:2a:58:1f:bd:b1:7d:24:c6:3b:d4:37:db:c9:
ce:68:6d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:49:45 2024 by rpki-client on console-fra.rpki-client.org