Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/cPqPld1ENrVFgE3xfphEAUHUZKE.roa
File: cPqPld1ENrVFgE3xfphEAUHUZKE.roa (raw, json)
Hash identifier: rmdmETBaln13E1YYzNgzPT6ZiUY/i1CIsK4ND+wAnkA=
Subject key identifier: 70:FA:8F:95:DD:44:36:B5:45:80:4D:F1:7E:98:44:01:41:D4:64:A1
Certificate issuer: /CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Certificate serial: 01856F42D479707F0AD8F72B0187A265722C
Authority key identifier: 8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/cPqPld1ENrVFgE3xfphEAUHUZKE.roa
Signing time: Sun 01 Jan 2023 21:35:28 +0000
ROA not before: Sun 01 Jan 2023 21:35:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8851
IP address blocks: 89.28.232.0/21 maxlen: 21
95.130.96.0/21 maxlen: 21
158.255.8.0/21 maxlen: 21
77.93.128.0/19 maxlen: 19
193.27.212.0/23 maxlen: 23
193.189.140.0/24 maxlen: 24
185.101.44.0/22 maxlen: 22
79.99.144.0/22 maxlen: 22
79.99.144.0/21 maxlen: 21
2a00:1c40::/29 maxlen: 29
2a02:6f80::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:d4:79:70:7f:0a:d8:f7:2b:01:87:a2:65:72:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Validity
Not Before: Jan 1 21:35:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=70fa8f95dd4436b545804df17e98440141d464a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6c:0d:9e:ea:ff:b9:80:c3:c8:26:dc:7f:1f:
f5:aa:cc:2a:8d:ba:e5:e0:ff:42:4f:90:4c:7e:82:
54:9a:b3:81:c2:fd:f9:5a:19:e7:1a:39:4e:16:19:
ce:24:d7:c0:d3:51:e0:de:75:69:d6:6e:4a:5d:52:
e9:37:be:c4:3e:d4:cb:ab:45:f2:71:06:34:64:ad:
07:b9:e8:57:7d:d2:bf:94:bc:dc:3a:e2:d8:32:5d:
44:13:aa:1d:8d:0a:bd:7b:84:53:a0:76:c9:74:34:
bc:c6:df:27:5b:ba:3e:b8:45:af:fe:ac:ec:6c:97:
11:cc:e8:2d:29:76:f1:22:33:41:42:a2:74:a6:b1:
14:5e:48:1c:db:fb:86:eb:21:5e:42:39:ba:1a:1c:
26:cd:04:2c:84:b1:f7:4a:ce:6b:8d:e8:45:a1:32:
a4:c3:ba:47:9d:e5:81:a3:f1:39:8f:5d:d9:4f:23:
31:79:9b:92:1f:3e:aa:e7:14:c4:82:4c:ca:01:42:
f4:6c:f0:19:15:79:bf:55:91:0c:29:76:fa:f1:ab:
1a:e1:ef:e1:ea:70:05:1a:1c:1b:73:6f:c3:ee:3f:
24:5f:26:29:dd:64:2b:62:56:48:71:74:05:75:61:
dc:dd:10:42:08:88:77:42:8f:9f:64:55:f8:fc:b6:
42:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:FA:8F:95:DD:44:36:B5:45:80:4D:F1:7E:98:44:01:41:D4:64:A1
X509v3 Authority Key Identifier:
keyid:8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/cPqPld1ENrVFgE3xfphEAUHUZKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ilo0F_viXC5GfBhIXBgad3b5b_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.128.0/19
79.99.144.0/21
89.28.232.0/21
95.130.96.0/21
158.255.8.0/21
185.101.44.0/22
193.27.212.0/23
193.189.140.0/24
IPv6:
2a00:1c40::/29
2a02:6f80::/29
Signature Algorithm: sha256WithRSAEncryption
7d:b7:f6:68:a3:ba:62:3f:e7:c1:f6:d6:77:41:4b:14:f5:b6:
c0:c5:23:f2:79:4f:e2:60:1d:82:d1:fd:3e:55:b5:e1:6d:3e:
36:83:3a:a1:de:f0:ae:fd:25:8a:a1:77:1d:1e:b6:0b:56:d0:
be:06:1b:91:78:2f:85:a6:d6:3e:fb:24:95:94:2a:1a:9b:cb:
b6:c3:b5:10:35:21:54:a4:1d:ae:4a:ee:bd:a4:f3:bb:3c:d0:
ee:f1:3a:4d:b8:1a:d9:f1:91:d6:d2:9b:aa:c1:ab:1a:ae:c4:
b9:26:35:27:cd:a5:74:99:b2:f3:fb:dc:0b:25:05:c7:18:28:
eb:52:54:eb:3a:fb:8d:8c:c3:cf:1c:4c:1f:97:4b:b1:a8:10:
c0:9b:bd:39:d0:11:5d:e8:78:dc:1f:a9:ec:ac:24:bf:0a:90:
8c:3c:20:de:3f:43:ab:93:ed:68:4c:f4:8f:d9:58:21:21:92:
88:32:48:25:fa:6b:e4:21:24:e8:1d:26:e4:7a:cc:a1:4e:c0:
da:25:8a:28:7c:d7:e3:e9:a7:4a:a0:1e:86:97:97:44:63:bc:
5a:ec:94:d0:bc:b3:9b:6c:5b:f4:03:96:a2:dc:b7:81:42:d1:
06:6a:42:ee:20:ed:5a:19:9f:76:f4:37:40:20:57:97:b3:cb:
ce:2f:d9:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:28 2024 by rpki-client on console-fra.rpki-client.org