Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/a3u1phBE7ycGrj09rU4kapFjvIM.roa
File: a3u1phBE7ycGrj09rU4kapFjvIM.roa (raw, json)
Hash identifier: 52pXZ6aDgnMBi1+xLvfiN76ljbmiekvpoqgYYbVlxic=
Subject key identifier: 6B:7B:B5:A6:10:44:EF:27:06:AE:3D:3D:AD:4E:24:6A:91:63:BC:83
Certificate issuer: /CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Certificate serial: 018C25756C5DB80B148EEB2775628BD79EBD
Authority key identifier: A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/a3u1phBE7ycGrj09rU4kapFjvIM.roa
Signing time: Fri 01 Dec 2023 12:58:21 +0000
ROA not before: Fri 01 Dec 2023 12:58:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9105
IP address blocks: 84.12.0.0/16 maxlen: 24
212.74.96.0/19 maxlen: 24
213.208.64.0/18 maxlen: 24
193.218.99.0/24 maxlen: 24
194.247.224.0/19 maxlen: 24
212.159.128.0/18 maxlen: 24
81.178.0.0/15 maxlen: 24
185.175.144.0/22 maxlen: 24
79.77.0.0/16 maxlen: 24
195.112.0.0/18 maxlen: 24
194.106.32.0/19 maxlen: 24
81.6.192.0/18 maxlen: 24
89.168.128.0/17 maxlen: 24
212.139.0.0/16 maxlen: 24
81.86.0.0/16 maxlen: 24
80.40.0.0/13 maxlen: 24
212.1.128.0/19 maxlen: 24
81.170.0.0/17 maxlen: 24
82.133.0.0/17 maxlen: 24
195.149.0.0/18 maxlen: 24
81.1.64.0/18 maxlen: 24
83.67.0.0/16 maxlen: 24
79.78.0.0/15 maxlen: 24
195.137.0.0/17 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:25:75:6c:5d:b8:0b:14:8e:eb:27:75:62:8b:d7:9e:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Validity
Not Before: Dec 1 12:58:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b7bb5a61044ef2706ae3d3dad4e246a9163bc83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c4:0c:4f:79:11:28:76:b6:5c:08:25:1e:85:
7f:89:29:80:70:77:5b:fe:de:e1:e8:9c:af:cc:8b:
71:54:d1:f9:76:f4:06:e2:d3:54:4a:1e:de:06:26:
eb:ef:03:2e:69:68:21:51:d9:b5:a6:95:2c:46:8d:
ff:46:fc:d8:e6:39:1f:80:2a:45:dc:90:23:67:1d:
68:1a:c3:dc:d3:2b:12:cc:16:46:90:1c:0c:6d:2a:
1c:a7:f7:fc:8e:31:c7:b8:c4:2c:b4:ec:91:ec:2a:
dd:ee:64:f7:ca:5d:58:b2:d1:7b:40:56:7b:db:1a:
c9:3c:79:86:5d:ed:78:1a:55:73:2d:65:e7:7a:c6:
a2:25:54:6b:e1:23:4a:70:ab:4f:0e:bf:33:80:09:
7b:14:ba:76:ba:bf:16:02:43:f6:04:58:b4:f8:64:
5d:d9:b8:43:e7:4c:8c:8d:5b:9f:e6:23:fb:29:cd:
6c:9a:95:6f:b8:36:47:04:b1:1b:33:17:7c:88:92:
b5:27:49:b7:16:24:a3:9d:ae:c8:a1:53:28:d0:5d:
57:79:5e:fc:1f:03:a6:6f:f3:1f:36:75:2c:f3:bf:
bf:c9:3e:84:1b:b3:69:d9:74:56:f4:1c:74:ff:97:
fc:20:7f:8d:09:4c:00:e3:40:13:e1:16:f6:11:41:
48:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:7B:B5:A6:10:44:EF:27:06:AE:3D:3D:AD:4E:24:6A:91:63:BC:83
X509v3 Authority Key Identifier:
keyid:A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/a3u1phBE7ycGrj09rU4kapFjvIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.77.0.0-79.79.255.255
80.40.0.0/13
81.1.64.0/18
81.6.192.0/18
81.86.0.0/16
81.170.0.0/17
81.178.0.0/15
82.133.0.0/17
83.67.0.0/16
84.12.0.0/16
89.168.128.0/17
185.175.144.0/22
193.218.99.0/24
194.106.32.0/19
194.247.224.0/19
195.112.0.0/18
195.137.0.0/17
195.149.0.0/18
212.1.128.0/19
212.74.96.0/19
212.139.0.0/16
212.159.128.0/18
213.208.64.0/18
Signature Algorithm: sha256WithRSAEncryption
68:71:a8:76:31:0c:4e:8c:7c:bc:ac:eb:bb:32:11:36:2f:08:
96:66:f1:97:18:ae:04:a2:32:d1:1d:7e:ed:68:be:5c:88:7a:
56:6a:e7:31:de:7d:61:46:e0:35:21:49:02:35:98:10:eb:6c:
d2:00:9d:b9:63:af:35:12:e0:96:5e:96:73:e7:7d:4e:92:23:
0e:97:1c:58:a2:af:9d:4d:75:f5:98:d3:d0:31:92:e0:87:3f:
4a:f5:99:04:65:bb:0e:4b:bd:9e:06:7c:1d:3d:a3:9d:07:19:
43:8c:a0:39:49:63:eb:f3:4a:ad:4a:5e:07:27:a6:3d:6a:3f:
de:14:69:a6:59:91:34:2a:9e:4e:bd:f2:f3:0b:b3:70:dc:08:
f8:06:39:92:11:ed:17:f9:82:24:b9:4b:cf:44:5e:23:0f:8d:
81:31:a9:25:d6:5b:1d:c7:e9:3b:f9:39:db:8d:ea:8b:9c:a3:
8c:28:4f:50:95:41:5f:73:8f:19:c2:cf:e4:25:d8:2e:99:b2:
19:05:c4:7d:23:d3:1a:6e:ec:b1:7a:e7:14:9c:db:ba:39:b0:
17:bb:48:06:8a:39:5e:72:03:8d:66:20:c8:fc:2b:ec:27:e2:
d2:8d:a1:16:26:d4:a8:04:22:e8:db:8c:a8:1b:12:3a:44:c1:
3f:5a:ed:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:33:58 2024 by rpki-client on console-fra.rpki-client.org