Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/EcpQLBzl3cUZm4L4GYeHtMGNQdw.roa
File: EcpQLBzl3cUZm4L4GYeHtMGNQdw.roa (raw, json)
Hash identifier: /aDLkgP9ATt4l9eGhWBTZLlY4oZQybBjvVlN8tbAYgA=
Subject key identifier: 11:CA:50:2C:1C:E5:DD:C5:19:9B:82:F8:19:87:87:B4:C1:8D:41:DC
Certificate issuer: /CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Certificate serial: 01856F42D58FE41DAA8EC9EB79632B7B76B3
Authority key identifier: 8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/EcpQLBzl3cUZm4L4GYeHtMGNQdw.roa
Signing time: Sun 01 Jan 2023 21:35:28 +0000
ROA not before: Sun 01 Jan 2023 21:35:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39179
IP address blocks: 89.28.232.0/21 maxlen: 21
95.130.96.0/22 maxlen: 22
95.130.96.0/21 maxlen: 21
158.255.8.0/21 maxlen: 21
95.130.102.0/24 maxlen: 24
95.130.100.0/23 maxlen: 23
193.27.212.0/23 maxlen: 23
77.93.128.0/19 maxlen: 19
185.101.44.0/22 maxlen: 22
79.99.144.0/22 maxlen: 22
2a00:1c40::/32 maxlen: 32
2a02:6f80::/29 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:d5:8f:e4:1d:aa:8e:c9:eb:79:63:2b:7b:76:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Validity
Not Before: Jan 1 21:35:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11ca502c1ce5ddc5199b82f8198787b4c18d41dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c7:01:b9:cc:ae:ab:ea:8f:71:11:2f:f8:84:
56:03:27:81:43:8b:96:5a:33:5d:28:7e:a9:2f:0b:
a2:37:c7:2c:fb:fa:ac:8e:e7:37:ab:1f:c2:8a:3a:
82:19:70:1e:d9:e4:6a:0b:98:dc:fb:b4:3c:66:79:
92:ff:3d:7a:04:ad:eb:e6:f1:92:9d:4b:17:79:38:
82:1f:70:fd:a8:4b:40:3e:19:2c:0f:d5:b8:9b:00:
5c:85:26:bd:a6:03:b1:10:01:66:1a:ba:1f:32:ee:
b6:76:92:82:35:31:f6:b2:64:35:e8:27:c0:37:10:
00:b9:15:db:d0:26:14:3e:50:f3:83:8d:0e:fa:97:
e2:0b:44:3d:39:9b:c4:25:9f:29:b9:52:4e:e9:d2:
ca:0b:a0:e8:f3:7a:49:92:c5:7e:ef:53:00:21:c1:
69:6c:8d:9d:c6:79:7d:bb:af:35:f5:54:c3:d2:da:
19:df:2d:2f:b8:39:e2:64:48:62:b9:b4:04:80:12:
d5:95:0c:d1:84:9a:8c:8b:31:fe:9c:64:2f:bd:90:
90:ba:06:0b:35:25:c3:51:83:41:23:84:51:eb:e6:
0f:da:a2:d3:9e:1e:9d:56:e3:96:94:13:95:be:43:
5e:60:5b:74:54:11:b4:57:92:6d:c2:84:0e:da:53:
a0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:CA:50:2C:1C:E5:DD:C5:19:9B:82:F8:19:87:87:B4:C1:8D:41:DC
X509v3 Authority Key Identifier:
keyid:8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/EcpQLBzl3cUZm4L4GYeHtMGNQdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ilo0F_viXC5GfBhIXBgad3b5b_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.128.0/19
79.99.144.0/22
89.28.232.0/21
95.130.96.0/21
158.255.8.0/21
185.101.44.0/22
193.27.212.0/23
IPv6:
2a00:1c40::/32
2a02:6f80::/29
Signature Algorithm: sha256WithRSAEncryption
97:aa:bd:61:fb:ba:64:14:cb:13:47:c1:83:e2:85:05:74:f5:
2e:9b:89:6e:d9:e4:8c:ab:ce:a1:c5:c6:01:f0:4d:dd:74:cf:
47:e5:b8:14:ef:78:2c:c8:e2:68:a7:26:0a:0b:1e:f5:6c:1c:
03:4b:ab:36:14:76:21:af:e9:17:71:6d:f7:a9:ef:f4:f2:28:
a6:6d:68:6a:2b:63:09:f4:51:3f:fe:5a:f5:73:65:9f:8d:39:
4a:ce:b0:bf:5b:3f:3c:cf:90:09:a4:e4:ef:eb:72:bb:d3:20:
a7:01:a7:73:d5:24:d7:08:ce:11:6e:70:15:68:3a:7e:71:7e:
0a:a5:b1:f3:00:e7:06:a4:35:a5:87:d6:27:b6:b3:37:9c:03:
d1:4c:36:ad:a6:76:83:80:8d:d6:ef:77:06:5d:fa:26:ad:40:
3d:34:26:6e:7f:62:0d:f2:c2:90:50:cb:3c:36:c2:9f:12:1b:
41:82:24:eb:92:c0:f5:2e:0c:59:0d:30:0a:2e:19:11:24:b2:
fa:01:61:c8:ad:e7:6d:5e:8b:d2:71:45:12:2d:12:d9:b2:51:
5f:8d:89:48:62:02:da:fa:99:35:43:fb:9f:27:b3:a0:f6:8e:
34:18:01:04:4a:07:b7:0b:c8:92:97:67:6f:02:8c:b8:bf:db:
ff:ce:1a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:19:08 2024 by rpki-client on console-fra.rpki-client.org