Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/55d595-d0bc-4ba2-80a0-afbcf366bb07/1/CxmL8cuSaLPv-Adevw1NE9aM_Jo.roa
File: CxmL8cuSaLPv-Adevw1NE9aM_Jo.roa (raw, json)
Hash identifier: ZSxPQnk30cSHrrQmCx+V0tsSq8szHyvwMamMqw5q74Y=
Subject key identifier: 0B:19:8B:F1:CB:92:68:B3:EF:F8:07:5E:BF:0D:4D:13:D6:8C:FC:9A
Certificate issuer: /CN=9e563c426d1aae4ed1e7f59536749022089e8479
Certificate serial: 0185723A050B223764A5FE75B526B3C47DA8
Authority key identifier: 9E:56:3C:42:6D:1A:AE:4E:D1:E7:F5:95:36:74:90:22:08:9E:84:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlY8Qm0ark7R5_WVNnSQIgiehHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/55d595-d0bc-4ba2-80a0-afbcf366bb07/1/CxmL8cuSaLPv-Adevw1NE9aM_Jo.roa
Signing time: Mon 02 Jan 2023 11:24:42 +0000
ROA not before: Mon 02 Jan 2023 11:24:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3238
IP address blocks: 213.204.32.0/19 maxlen: 24
79.133.0.0/19 maxlen: 19
194.110.176.0/20 maxlen: 24
212.17.160.0/19 maxlen: 24
194.112.0.0/20 maxlen: 24
82.199.160.0/19 maxlen: 24
2a00:5500::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:3a:05:0b:22:37:64:a5:fe:75:b5:26:b3:c4:7d:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e563c426d1aae4ed1e7f59536749022089e8479
Validity
Not Before: Jan 2 11:24:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b198bf1cb9268b3eff8075ebf0d4d13d68cfc9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b0:2b:85:bf:67:c7:12:12:15:66:c2:22:a1:
f4:aa:29:9c:41:cf:5a:a8:67:d2:62:e3:62:6f:5d:
b3:95:e2:2f:53:95:0b:1f:62:09:c4:4a:b8:ee:c1:
73:2b:66:00:66:9c:ce:9d:4c:12:03:79:f0:4b:5c:
4f:36:82:1f:d0:84:14:3e:75:9b:26:f1:08:d7:d2:
9a:07:f8:30:0a:83:64:98:29:7d:a4:8c:47:61:36:
b8:4d:8f:7c:de:57:fd:18:1a:b1:3a:8e:97:76:c4:
50:b0:17:84:63:34:77:d2:70:2c:08:63:53:4b:31:
7e:48:4d:61:4d:f4:97:43:05:84:f2:d9:46:9d:38:
13:75:bf:da:35:2b:b0:9e:0f:0e:43:f6:5f:25:49:
54:72:f7:81:de:7c:d7:52:3b:0d:ac:df:8a:e3:cc:
10:54:14:0f:ec:ab:00:bf:5e:d2:8a:6c:98:df:46:
65:ba:c3:67:2d:d2:0c:18:65:5d:2e:b9:5f:9a:bf:
4f:bc:93:a3:fa:3d:eb:21:03:19:9c:f7:d8:c7:a6:
cf:08:23:e7:6a:38:b1:ff:ce:7a:ad:c2:47:b9:e6:
52:9a:f4:19:a3:6c:67:85:2a:79:67:ca:42:8b:08:
e5:87:44:65:56:1e:fb:10:71:a9:b7:ba:1b:4f:78:
ab:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:19:8B:F1:CB:92:68:B3:EF:F8:07:5E:BF:0D:4D:13:D6:8C:FC:9A
X509v3 Authority Key Identifier:
keyid:9E:56:3C:42:6D:1A:AE:4E:D1:E7:F5:95:36:74:90:22:08:9E:84:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlY8Qm0ark7R5_WVNnSQIgiehHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/55d595-d0bc-4ba2-80a0-afbcf366bb07/1/CxmL8cuSaLPv-Adevw1NE9aM_Jo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/55d595-d0bc-4ba2-80a0-afbcf366bb07/1/nlY8Qm0ark7R5_WVNnSQIgiehHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.133.0.0/19
82.199.160.0/19
194.110.176.0/20
194.112.0.0/20
212.17.160.0/19
213.204.32.0/19
IPv6:
2a00:5500::/32
Signature Algorithm: sha256WithRSAEncryption
41:5f:9a:70:b6:92:a5:4a:9e:1f:ab:2d:9a:89:2e:2e:c9:4f:
62:f7:a6:52:9a:13:7e:cc:80:c1:5a:77:cc:de:e3:24:6f:ed:
84:dc:34:f5:55:08:1a:28:9b:6d:1a:4e:34:b3:79:88:ab:1f:
a4:db:07:17:81:63:32:17:f3:07:c2:d1:ad:85:28:e4:b6:91:
76:20:82:18:74:80:bc:30:96:35:b7:5f:0d:fb:ce:54:76:ab:
c4:cc:97:1e:94:1b:76:be:ee:f7:62:b2:dc:e6:f4:20:1f:e6:
2a:eb:09:a2:c9:16:6a:0e:05:b6:01:f0:c1:b1:2b:67:b1:20:
9b:ba:41:85:04:84:74:35:fa:fa:66:61:83:bd:a3:37:ce:cd:
8b:56:c0:41:54:c6:37:39:cf:7a:22:0d:10:70:f1:1f:92:62:
22:6e:bd:f5:eb:0a:5a:25:7c:d4:a6:1e:67:59:be:f1:ea:3d:
21:e3:d3:54:6c:a5:19:49:0b:06:c4:93:12:a7:9d:95:c8:65:
b2:39:dc:70:9b:9d:1a:d2:cd:62:98:eb:35:9d:dd:35:22:05:
cc:41:0c:6f:8a:d4:35:00:e6:ad:c9:c9:b2:c5:94:c4:68:52:
2d:a4:46:3b:32:ac:b5:64:a6:5d:9b:aa:46:ef:f4:0d:7a:e4:
9b:c8:e5:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:40:35 2024 by rpki-client on console-ams.rpki-client.org