Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/g9s7Kym_Eu9VDcSikM5zPflFhNM.roa
File: g9s7Kym_Eu9VDcSikM5zPflFhNM.roa (raw, json)
Hash identifier: g3aoQ/oHL9GNfip8yV4nXwKmcnuP+8ZFXmpxoCPIgjs=
Subject key identifier: 83:DB:3B:2B:29:BF:12:EF:55:0D:C4:A2:90:CE:73:3D:F9:45:84:D3
Certificate issuer: /CN=8b69fc6128be591401acf82bc2461af636ebe8e6
Certificate serial: 01856FCBB20509642B0C88958B5F8934DF25
Authority key identifier: 8B:69:FC:61:28:BE:59:14:01:AC:F8:2B:C2:46:1A:F6:36:EB:E8:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/g9s7Kym_Eu9VDcSikM5zPflFhNM.roa
Signing time: Mon 02 Jan 2023 00:04:58 +0000
ROA not before: Mon 02 Jan 2023 00:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51531
IP address blocks: 45.140.112.0/22 maxlen: 24
195.211.56.0/22 maxlen: 24
185.176.192.0/22 maxlen: 24
46.31.120.0/21 maxlen: 24
45.129.80.0/22 maxlen: 24
81.89.88.0/21 maxlen: 24
185.70.20.0/22 maxlen: 24
2a02:c50::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:b2:05:09:64:2b:0c:88:95:8b:5f:89:34:df:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b69fc6128be591401acf82bc2461af636ebe8e6
Validity
Not Before: Jan 2 00:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=83db3b2b29bf12ef550dc4a290ce733df94584d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:34:86:c5:3b:e5:8f:1b:a1:87:39:b7:a5:b8:
a1:d4:46:7d:c9:2f:60:4f:02:5a:a9:b4:9a:02:4f:
b8:35:fc:25:7e:71:20:ef:b6:f5:6a:cf:1b:2a:da:
c4:24:c2:b8:e5:e9:7b:fb:21:bd:18:ef:e2:ab:a2:
47:f1:81:fa:d8:7c:4a:ab:e9:5c:95:21:b2:ed:e2:
cb:11:62:08:6f:c6:d8:3b:9b:28:38:cd:8e:52:6a:
d2:32:30:e3:6f:9e:11:1c:0a:aa:0e:e1:3c:b0:ce:
28:5c:ed:f6:08:27:da:38:a6:5a:5c:b0:78:5f:d8:
7c:c3:f8:4c:67:79:eb:29:ab:a7:ea:e3:a3:5e:82:
c7:96:9f:f1:b2:30:65:cb:ca:72:0d:6e:24:1f:fc:
21:52:3f:7f:5b:28:76:9a:3a:27:ea:5a:cf:94:2e:
b2:e2:c4:9e:1e:b1:2a:ec:05:ee:ab:e5:6e:64:2a:
88:f5:a8:90:50:5d:eb:b2:70:40:ba:51:8c:0d:c1:
74:a2:ae:d0:0d:4f:cb:b6:75:7f:d4:33:87:b4:e8:
4f:2e:a7:29:58:d3:8c:51:2b:bf:51:9e:62:04:09:
e5:51:32:17:9a:74:0c:81:fa:16:ad:31:bf:c4:b0:
bd:7b:8f:34:17:54:a9:2b:98:1d:b6:1b:c0:c9:98:
eb:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:DB:3B:2B:29:BF:12:EF:55:0D:C4:A2:90:CE:73:3D:F9:45:84:D3
X509v3 Authority Key Identifier:
keyid:8B:69:FC:61:28:BE:59:14:01:AC:F8:2B:C2:46:1A:F6:36:EB:E8:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/g9s7Kym_Eu9VDcSikM5zPflFhNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.80.0/22
45.140.112.0/22
46.31.120.0/21
81.89.88.0/21
185.70.20.0/22
185.176.192.0/22
195.211.56.0/22
IPv6:
2a02:c50::/32
Signature Algorithm: sha256WithRSAEncryption
c6:fe:88:49:83:6c:e1:fa:7c:f0:ba:13:2b:92:f1:4a:39:bb:
dd:89:27:ae:a2:f2:04:7c:4c:de:47:44:c1:f7:db:b9:1c:9a:
a6:15:e1:57:0c:dd:49:8e:9d:9d:a6:0e:b1:bd:9c:39:9a:24:
cb:0c:88:26:2c:29:bb:30:f0:4f:2a:39:bb:e3:8b:31:af:16:
36:d0:eb:ea:47:f2:e0:fb:a1:26:a4:6e:f7:b0:73:2b:a2:51:
e8:12:70:d1:73:26:c7:b4:b6:28:ee:77:a1:72:04:00:a5:37:
15:5a:29:22:b6:a4:19:38:c0:30:b2:c0:8e:f5:92:d4:2b:0e:
0e:2c:b5:fc:6b:c6:ec:41:2a:4e:80:34:60:d4:0c:88:d1:d8:
9f:7d:9c:bc:0c:48:18:c6:77:1c:ed:4b:88:6d:e0:ac:18:80:
0e:b0:9a:35:73:4a:7d:cb:9b:3b:d3:38:a3:0c:3a:2e:29:01:
2a:db:64:a1:6b:f5:c6:59:45:91:cd:9c:0e:a5:10:08:f6:dc:
2a:90:8c:02:bf:10:ed:bf:99:19:9b:29:25:f2:ed:27:1e:1c:
a8:01:0a:45:22:69:65:86:82:57:3a:1d:36:c9:d4:c1:a4:ba:
3d:68:ef:35:25:de:ba:a2:d1:3d:89:10:90:6d:47:20:c7:ee:
40:76:c6:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:01 2023 by rpki-client on console-fra.rpki-client.org