Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/2MSySf-lkZgoMwruU-qDExKTS7w.roa
File: 2MSySf-lkZgoMwruU-qDExKTS7w.roa (raw, json)
Hash identifier: G8+B00z8YBt6ertlGzqxC95U+dp21fFu3QCLDIOqGmo=
Subject key identifier: D8:C4:B2:49:FF:A5:91:98:28:33:0A:EE:53:EA:83:13:12:93:4B:BC
Certificate issuer: /CN=f8f73c5c0f3a106a8ba7dff3e35c816d1078dc71
Certificate serial: 0188AF4BC48A1FAFB50E7258F7F7C749F236
Authority key identifier: F8:F7:3C:5C:0F:3A:10:6A:8B:A7:DF:F3:E3:5C:81:6D:10:78:DC:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Pc8XA86EGqLp9_z41yBbRB43HE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/2MSySf-lkZgoMwruU-qDExKTS7w.roa
Signing time: Mon 12 Jun 2023 11:09:18 +0000
ROA not before: Mon 12 Jun 2023 11:09:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198605
IP address blocks: 77.234.40.0/21 maxlen: 24
77.234.40.0/24 maxlen: 24
37.156.184.0/22 maxlen: 24
195.74.76.0/24 maxlen: 24
185.189.94.0/24 maxlen: 24
185.189.92.0/22 maxlen: 24
69.94.64.0/20 maxlen: 24
31.14.72.0/24 maxlen: 24
91.213.143.0/24 maxlen: 24
185.167.64.0/24 maxlen: 24
185.51.228.0/22 maxlen: 24
5.45.56.0/21 maxlen: 24
2a0b:e180::/29 maxlen: 45
2001:67c:284::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:af:4b:c4:8a:1f:af:b5:0e:72:58:f7:f7:c7:49:f2:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8f73c5c0f3a106a8ba7dff3e35c816d1078dc71
Validity
Not Before: Jun 12 11:09:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d8c4b249ffa5919828330aee53ea831312934bbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:71:67:06:5a:73:90:7a:60:99:39:ba:68:47:
77:1f:2b:ac:39:09:ca:68:41:6c:ba:14:f0:31:ff:
4e:cc:60:28:e5:cf:56:46:71:b9:b4:c7:5d:ee:57:
b4:38:7f:44:3b:ff:ec:ac:16:12:21:84:94:80:e1:
5f:0c:e0:ac:1b:65:4c:7c:6f:27:c8:33:56:6c:8d:
ca:20:3f:7c:76:7d:05:47:bb:f4:77:00:65:f0:93:
02:83:72:da:e9:6d:7a:89:8d:b6:8c:12:2e:5f:ab:
36:b5:c8:99:ac:de:c9:8f:89:53:d5:ae:f5:93:61:
ba:93:74:1d:13:e0:f6:19:49:10:c7:d4:a4:84:86:
0c:cb:18:b6:19:1a:87:dc:94:46:5c:88:4f:f1:54:
7b:9d:42:cf:1a:22:c6:8c:aa:70:e3:7a:6f:fc:8b:
01:e5:b2:65:31:1d:7c:eb:ac:d6:2d:13:a2:4e:22:
e0:c1:a8:c7:eb:76:8e:db:75:2e:4a:ae:f4:e5:d0:
35:4f:7d:7a:97:cc:d1:f2:45:43:58:69:c8:f6:f9:
84:0c:d1:02:38:66:ae:a0:37:ba:6d:a4:c9:ee:ce:
bd:82:ba:a7:9d:9e:67:50:aa:40:aa:8a:ae:5a:b7:
a2:ed:96:1f:d0:83:b3:d1:70:6a:c3:7d:09:e2:7a:
e5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C4:B2:49:FF:A5:91:98:28:33:0A:EE:53:EA:83:13:12:93:4B:BC
X509v3 Authority Key Identifier:
keyid:F8:F7:3C:5C:0F:3A:10:6A:8B:A7:DF:F3:E3:5C:81:6D:10:78:DC:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Pc8XA86EGqLp9_z41yBbRB43HE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/2MSySf-lkZgoMwruU-qDExKTS7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.45.56.0/21
31.14.72.0/24
37.156.184.0/22
69.94.64.0/20
77.234.40.0/21
91.213.143.0/24
185.51.228.0/22
185.167.64.0/24
185.189.92.0/22
195.74.76.0/24
IPv6:
2001:67c:284::/48
2a0b:e180::/29
Signature Algorithm: sha256WithRSAEncryption
69:c5:93:93:d1:e6:c8:a5:87:bd:f0:f4:49:14:23:22:8e:5c:
f9:e1:82:d3:03:bf:fa:01:6b:53:08:5a:98:b7:db:9d:cb:84:
ef:89:d6:a5:bf:2e:3c:5b:6f:f5:e5:2d:65:d7:ec:e4:67:5e:
80:35:07:7c:b1:fb:9b:8b:34:74:bf:10:eb:83:5e:95:9c:e0:
d5:74:cd:b5:03:0b:c0:da:91:a3:7f:da:1c:f8:85:96:b5:a2:
28:f2:a1:c6:b8:07:6b:8c:9e:87:ea:b1:d4:09:25:72:a7:f7:
f4:cc:c3:05:f1:41:88:83:0a:34:a8:b7:f1:47:c0:fb:f2:9c:
cf:6c:90:8f:4d:77:51:2e:6e:86:6d:60:d5:b8:ff:c8:e4:a4:
b2:6c:c4:12:a5:e4:ad:8a:5a:83:e0:dc:89:81:87:41:6c:04:
ae:b1:3c:0b:28:a5:c5:a4:3b:19:e6:d9:e7:56:4f:ee:e7:a9:
81:d8:9d:3b:c6:fa:9b:33:a8:1a:fc:7a:a1:2f:9c:1d:d3:45:
a0:a3:57:d7:8a:05:64:f1:d6:fc:ae:5f:1c:df:99:15:e3:28:
fc:39:db:ea:c5:6e:f2:b1:3e:2e:d0:d4:f1:6f:ac:6c:ff:27:
15:b6:66:80:0e:56:2f:3d:10:93:66:7c:64:91:8b:54:d3:e9:
ea:b6:5a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:14 2023 by rpki-client on console-ams.rpki-client.org