Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/x_PDMidkMQunW7yp1RR6Al-uT9w.roa
File: x_PDMidkMQunW7yp1RR6Al-uT9w.roa (raw, json)
Hash identifier: 3uMY3xYD4iDpdi0aShaFQfSGYQSYBER5Vkvg5zZKrNk=
Subject key identifier: C7:F3:C3:32:27:64:31:0B:A7:5B:BC:A9:D5:14:7A:02:5F:AE:4F:DC
Certificate issuer: /CN=ef3e71b96992da3d91c88dd74ef41f9b95b9485b
Certificate serial: 01896858690E930EC25EE85A1526B8C0D8D5
Authority key identifier: EF:3E:71:B9:69:92:DA:3D:91:C8:8D:D7:4E:F4:1F:9B:95:B9:48:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7z5xuWmS2j2RyI3XTvQfm5W5SFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/x_PDMidkMQunW7yp1RR6Al-uT9w.roa
Signing time: Tue 18 Jul 2023 09:32:51 +0000
ROA not before: Tue 18 Jul 2023 09:32:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5400
IP address blocks: 213.9.138.0/24 maxlen: 24
212.163.169.0/24 maxlen: 24
213.9.148.0/24 maxlen: 24
212.49.181.0/24 maxlen: 24
212.49.190.0/24 maxlen: 24
212.163.141.0/24 maxlen: 24
213.9.232.0/24 maxlen: 24
212.163.40.0/24 maxlen: 24
212.49.131.0/24 maxlen: 24
212.163.55.0/24 maxlen: 24
212.49.142.0/24 maxlen: 24
212.49.163.0/24 maxlen: 24
212.49.167.0/24 maxlen: 24
213.9.173.0/24 maxlen: 24
213.9.177.0/24 maxlen: 24
212.163.206.0/24 maxlen: 24
212.163.3.0/24 maxlen: 24
212.163.215.0/24 maxlen: 24
213.9.188.0/24 maxlen: 24
212.163.6.0/24 maxlen: 24
212.163.24.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:68:58:69:0e:93:0e:c2:5e:e8:5a:15:26:b8:c0:d8:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef3e71b96992da3d91c88dd74ef41f9b95b9485b
Validity
Not Before: Jul 18 09:32:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7f3c3322764310ba75bbca9d5147a025fae4fdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:29:36:95:9f:bb:7b:c3:36:e3:b5:d8:69:11:
82:47:33:86:52:24:ab:00:8d:1f:17:fa:47:a8:f9:
0c:f0:92:be:fd:17:63:88:cf:cd:51:e2:f3:7f:b4:
b1:ea:7f:f2:19:74:67:fc:72:87:c8:86:04:59:d2:
40:7e:93:db:06:f7:d2:f7:a2:b8:61:45:c1:9d:7d:
ce:c0:c9:8d:8d:58:d0:bc:c9:60:20:13:0f:1f:4b:
8a:1b:68:dc:99:36:93:8a:cb:19:30:68:47:a6:8c:
f3:d6:80:f9:4a:ef:0e:c9:a4:08:8f:df:5c:fc:b2:
d0:a2:29:1f:e2:16:ec:52:d7:67:f3:8e:bd:76:8d:
d8:d5:00:76:a1:69:9f:c0:e1:58:b5:6a:a4:f5:e7:
02:3b:ca:6c:66:3f:86:dd:3b:75:0f:1a:18:5b:77:
a2:7b:cc:ca:84:b0:54:6e:c9:ee:b4:fd:82:f6:78:
ae:ca:75:62:5a:88:21:92:12:49:c7:70:7c:79:14:
6b:2c:72:75:46:f2:9a:b7:60:b5:fd:93:c4:fa:d7:
1d:cd:d0:cf:af:62:70:7c:19:cb:24:dd:7c:cf:cb:
ba:ac:48:bf:78:ab:e4:82:87:39:38:14:93:7a:b0:
84:b1:f5:9a:df:14:c7:0f:98:f5:4b:0a:91:f6:11:
ff:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:F3:C3:32:27:64:31:0B:A7:5B:BC:A9:D5:14:7A:02:5F:AE:4F:DC
X509v3 Authority Key Identifier:
keyid:EF:3E:71:B9:69:92:DA:3D:91:C8:8D:D7:4E:F4:1F:9B:95:B9:48:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7z5xuWmS2j2RyI3XTvQfm5W5SFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/x_PDMidkMQunW7yp1RR6Al-uT9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/7z5xuWmS2j2RyI3XTvQfm5W5SFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.49.131.0/24
212.49.142.0/24
212.49.163.0/24
212.49.167.0/24
212.49.181.0/24
212.49.190.0/24
212.163.3.0/24
212.163.6.0/24
212.163.24.0/24
212.163.40.0/24
212.163.55.0/24
212.163.141.0/24
212.163.169.0/24
212.163.206.0/24
212.163.215.0/24
213.9.138.0/24
213.9.148.0/24
213.9.173.0/24
213.9.177.0/24
213.9.188.0/24
213.9.232.0/24
Signature Algorithm: sha256WithRSAEncryption
77:5b:f1:8b:0c:4f:ce:77:de:07:ec:b7:75:f4:16:97:4e:52:
a2:15:cf:ed:16:90:c0:33:77:45:31:d7:e3:bf:e1:24:50:2a:
7f:ac:78:63:92:db:b4:ec:e0:d3:45:96:b2:8e:ef:66:d2:60:
7e:1f:b7:2b:48:a7:6a:fd:cb:db:1a:5e:b5:79:50:ab:46:3b:
6b:02:da:78:92:10:59:94:42:42:28:03:fe:b0:e7:59:f9:16:
76:ce:c8:ea:1f:09:51:10:a1:71:38:29:89:b7:a0:af:0c:89:
8c:21:5c:db:41:0f:f3:19:38:bd:31:f2:86:58:17:62:a2:ba:
4a:c8:2b:7c:33:09:55:3e:5c:6a:6e:52:ba:71:66:a8:e2:46:
86:55:c8:0e:b6:5d:5f:70:41:d1:21:97:7f:9d:cc:15:fd:49:
e4:eb:85:ad:3e:78:f4:99:3d:99:6c:c2:a9:ad:32:76:fc:07:
2f:26:59:6e:c6:bb:f9:bb:b1:83:e9:da:32:b8:c0:6c:61:92:
aa:43:cf:35:2b:3f:54:29:92:b3:1a:cd:3d:33:14:a1:48:93:
31:ac:04:31:fa:4e:f4:2f:e8:8e:7b:59:0d:46:c5:64:55:51:
ba:6b:dd:e0:e6:69:c4:3b:80:9b:4f:b3:a3:32:8d:51:fc:26:
b1:27:69:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:32 2023 by rpki-client on console-ams.rpki-client.org