Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/9LUr21uWS5ES5CaRSsu_xKIGyKg.roa
File: 9LUr21uWS5ES5CaRSsu_xKIGyKg.roa (raw, json)
Hash identifier: +gRv3tSttGX/x1h5B19SehgMLsD4wINklaDMyCYSh+o=
Subject key identifier: F4:B5:2B:DB:5B:96:4B:91:12:E4:26:91:4A:CB:BF:C4:A2:06:C8:A8
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 018B66C1C1A1098F0CB98CCB7B4BB24D86B0
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/9LUr21uWS5ES5CaRSsu_xKIGyKg.roa
Signing time: Wed 25 Oct 2023 12:14:15 +0000
ROA not before: Wed 25 Oct 2023 12:14:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 194.233.31.0/24 maxlen: 24
195.180.128.0/22 maxlen: 24
194.163.68.0/24 maxlen: 24
194.233.151.0/24 maxlen: 24
194.233.148.0/24 maxlen: 24
194.233.149.0/24 maxlen: 24
194.64.89.0/24 maxlen: 24
195.180.157.0/24 maxlen: 24
194.163.92.0/24 maxlen: 24
195.252.175.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:66:c1:c1:a1:09:8f:0c:b9:8c:cb:7b:4b:b2:4d:86:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Oct 25 12:14:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f4b52bdb5b964b9112e426914acbbfc4a206c8a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:21:98:7a:de:32:c1:82:2b:73:b0:2a:06:ce:
dc:52:97:00:88:69:66:1c:76:23:0e:c0:64:16:80:
15:a6:e7:07:ca:c3:2b:e1:1c:b5:06:5f:d2:8b:ca:
fd:b5:02:fd:92:80:86:41:dd:eb:b6:5b:be:75:e3:
90:48:a4:c1:7c:00:4c:49:bb:ca:61:e5:92:67:16:
c2:b2:e5:b0:01:f7:b1:bd:1a:59:1e:e9:e8:9e:ae:
88:74:08:9b:e0:ab:7f:7e:5a:bf:05:36:9e:99:43:
37:ad:78:aa:a7:d8:2e:e4:a4:a4:3e:48:9d:90:6d:
c6:8c:06:77:e5:96:81:91:f7:f3:f2:4f:96:a8:2c:
54:ea:10:37:4f:96:ce:86:f0:77:82:9a:d3:39:55:
63:bc:90:da:cc:90:60:96:cb:04:0d:ad:90:85:e5:
2c:d8:d3:97:83:db:76:8d:95:14:05:4f:c5:a2:75:
87:bd:ba:dc:d9:33:80:c3:24:3e:4c:27:26:43:12:
ce:3e:22:4a:15:ce:99:2c:ad:63:1e:e0:87:3e:a9:
ac:d3:6b:8e:c7:e0:aa:b5:ea:bd:18:c8:0c:f9:04:
42:e0:fb:66:1f:49:cc:82:ee:e9:ec:3f:9d:89:23:
5d:18:4f:15:36:f6:38:8b:9a:8e:f2:1b:88:76:7d:
83:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B5:2B:DB:5B:96:4B:91:12:E4:26:91:4A:CB:BF:C4:A2:06:C8:A8
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/9LUr21uWS5ES5CaRSsu_xKIGyKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.64.89.0/24
194.163.68.0/24
194.163.92.0/24
194.233.31.0/24
194.233.148.0/23
194.233.151.0/24
195.180.128.0/22
195.180.157.0/24
195.252.175.0/24
Signature Algorithm: sha256WithRSAEncryption
44:72:94:3a:67:e2:2b:91:e6:6e:b3:dd:7e:14:42:20:19:04:
14:c0:28:3b:c3:66:1e:4b:75:bc:16:4b:34:46:28:59:58:7c:
5a:ef:66:61:d6:06:29:f9:11:03:3a:bf:2f:3f:72:48:a5:38:
2c:58:7c:36:85:1f:37:b3:d9:fc:d3:87:9b:83:c9:42:cf:4f:
51:9b:bd:5b:15:7d:e0:09:91:61:ee:96:cb:85:92:ba:6f:c0:
3c:3f:4b:0b:b4:1c:63:8c:b8:33:b9:34:fd:d1:fa:59:72:b5:
b4:4a:c9:31:37:4e:67:b3:23:c5:48:08:5d:8e:76:30:10:db:
c7:24:29:23:8d:20:e9:e0:4b:bd:b1:4a:c7:a1:97:21:b2:9b:
31:be:00:d9:74:ac:64:ac:32:a8:68:1d:9a:08:1e:0d:89:ab:
46:02:97:ab:cf:2a:e2:46:66:26:b1:d1:45:3f:6a:01:b3:88:
42:04:69:aa:10:39:d5:c5:5a:66:fc:44:2f:13:de:03:0e:79:
4b:45:af:d4:52:cf:46:6b:da:3b:c7:eb:b8:a2:22:df:da:d1:
f2:ba:9c:18:ed:df:2a:48:70:6f:ee:ab:8d:d7:ec:a9:ca:67:
35:7e:78:3a:03:fa:50:7a:89:e4:eb:aa:6f:fa:57:fe:01:52:
4d:ba:3b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 2 10:41:55 2023 by rpki-client on console-ams.rpki-client.org