Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/mrz7Pgwszcl8_B15ugqWtmXNlCY.roa
File: mrz7Pgwszcl8_B15ugqWtmXNlCY.roa (raw, json)
Hash identifier: J8EKWXR5nsXuAn0B5EHgjVSpkVfYrWku9GdqEbHLmhM=
Subject key identifier: 9A:BC:FB:3E:0C:2C:CD:C9:7C:FC:1D:79:BA:0A:96:B6:65:CD:94:26
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 01857039A18DC8E3A71AE647B03721392CFA
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/mrz7Pgwszcl8_B15ugqWtmXNlCY.roa
Signing time: Mon 02 Jan 2023 02:05:03 +0000
ROA not before: Mon 02 Jan 2023 02:05:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21700
IP address blocks: 151.106.80.0/20 maxlen: 24
194.195.48.0/20 maxlen: 20
194.233.240.0/20 maxlen: 24
194.195.16.0/20 maxlen: 24
62.138.68.0/22 maxlen: 22
62.138.76.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:a1:8d:c8:e3:a7:1a:e6:47:b0:37:21:39:2c:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Jan 2 02:05:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9abcfb3e0c2ccdc97cfc1d79ba0a96b665cd9426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f8:27:46:9b:d1:6a:b6:b3:ae:1b:63:d0:7e:
2c:1c:fb:43:09:07:5e:99:c8:71:ca:92:1a:7d:17:
1c:2b:02:d4:40:73:f1:0c:b8:eb:8a:d1:48:86:0a:
b4:2c:5a:d7:61:9d:ac:2d:c6:5d:c8:19:85:b0:1b:
92:cb:a5:9c:ee:74:77:50:4a:53:23:d3:ff:a7:6d:
c7:e6:6a:e2:20:a8:cf:35:6c:37:5a:63:61:0f:1c:
3c:fb:83:65:7f:cb:0f:d8:be:e7:79:6c:fe:ba:5d:
4a:6b:90:92:4b:47:7a:a8:1a:77:3d:47:f1:f7:14:
6e:1f:ee:c1:37:44:21:f3:c8:64:3a:f9:80:84:8b:
7a:20:39:51:02:9f:70:ba:c7:a6:b7:78:8f:d7:2b:
25:0f:94:80:c5:ac:d1:09:34:11:5e:54:b4:34:80:
86:5f:a2:c3:98:d0:ee:91:77:10:2f:f9:97:43:c7:
4f:26:34:3f:a0:f6:94:5b:43:15:0c:8f:e6:84:b8:
41:a4:1a:a0:6c:2b:3e:66:94:a0:3d:a6:00:04:57:
c7:1e:ca:94:f2:ef:c1:80:14:11:0a:5c:6e:06:1a:
93:ad:d9:94:8c:a7:9a:2d:94:31:2a:71:a5:47:a5:
05:4e:27:91:65:85:ec:b5:1c:fc:72:78:8d:69:f1:
42:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:BC:FB:3E:0C:2C:CD:C9:7C:FC:1D:79:BA:0A:96:B6:65:CD:94:26
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/mrz7Pgwszcl8_B15ugqWtmXNlCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.138.68.0/22
62.138.76.0/22
151.106.80.0/20
194.195.16.0/20
194.195.48.0/20
194.233.240.0/20
Signature Algorithm: sha256WithRSAEncryption
91:a1:48:2c:30:63:df:21:43:12:9f:bb:92:29:b7:e7:60:78:
b9:bd:1a:36:cb:56:f3:96:74:be:f4:85:cb:e5:38:ef:0b:f1:
ab:c8:88:46:c5:7f:dc:54:79:82:3c:ee:eb:7a:bc:dc:bb:08:
5c:5d:77:4e:48:6a:29:6d:1e:23:3b:4a:8b:4a:a4:ba:2f:86:
5a:65:9f:bf:69:c8:f6:49:dc:0a:55:6d:47:40:df:7f:67:a9:
1c:39:22:18:19:91:91:33:df:9f:3a:61:cc:93:ad:6e:47:32:
ef:da:5a:5f:63:e3:75:2f:2f:16:bb:c7:08:1f:6f:2f:c0:90:
13:98:bf:2b:7a:8e:77:78:b5:9f:22:45:1a:91:45:ba:8b:43:
ef:fb:eb:94:0f:8d:f3:f4:c8:de:ea:f2:98:60:d3:87:90:ff:
9c:ab:4a:7c:bb:94:d2:6d:c3:99:7c:78:af:e0:e8:0b:2d:e2:
79:c5:82:cf:dc:11:10:a3:34:57:0b:28:12:21:9a:60:3e:59:
22:45:45:8e:4f:21:a3:d5:73:f0:03:9d:c6:81:75:55:34:f0:
4b:a1:ed:34:e6:71:e5:1b:70:d5:e0:71:2c:f2:89:a3:1a:2e:
26:ef:28:03:ef:84:20:d4:fe:e0:d9:25:c1:ec:5f:11:30:14:
df:5a:72:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 31 10:31:48 2023 by rpki-client on console-ams.rpki-client.org