Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/s9Cr4jqNmnnJ-NX_kmn0t9Aze3s.roa
File: s9Cr4jqNmnnJ-NX_kmn0t9Aze3s.roa (raw, json)
Hash identifier: gz6z+m0GY0JZ9gNgNUF3jqoTghKANuE8N4ex3aj1ZZk=
Subject key identifier: B3:D0:AB:E2:3A:8D:9A:79:C9:F8:D5:FF:92:69:F4:B7:D0:33:7B:7B
Certificate issuer: /CN=14c66a786e6ef31674bec6833c78aebec1633972
Certificate serial: 01856F3005253890D69D53E326308914D105
Authority key identifier: 14:C6:6A:78:6E:6E:F3:16:74:BE:C6:83:3C:78:AE:BE:C1:63:39:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/s9Cr4jqNmnnJ-NX_kmn0t9Aze3s.roa
Signing time: Sun 01 Jan 2023 21:14:56 +0000
ROA not before: Sun 01 Jan 2023 21:14:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28685
IP address blocks: 46.44.128.0/18 maxlen: 24
89.146.0.0/18 maxlen: 24
37.0.80.0/20 maxlen: 24
213.144.224.0/19 maxlen: 24
37.153.192.0/18 maxlen: 24
213.247.64.0/18 maxlen: 24
212.121.96.0/19 maxlen: 24
84.246.0.0/18 maxlen: 24
2a02:22a0::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:30:05:25:38:90:d6:9d:53:e3:26:30:89:14:d1:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14c66a786e6ef31674bec6833c78aebec1633972
Validity
Not Before: Jan 1 21:14:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b3d0abe23a8d9a79c9f8d5ff9269f4b7d0337b7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ec:ee:26:bf:7e:63:fd:b7:d2:f3:d7:97:e7:
88:cc:35:07:8f:ff:cf:89:92:89:37:73:68:4a:e5:
44:29:1a:6f:43:95:39:f7:13:4e:f1:5c:fe:84:bd:
2c:e4:63:f9:79:13:71:7f:43:be:09:2d:68:11:b3:
34:3c:17:39:49:fc:d3:bb:42:f8:a1:f8:41:39:2c:
08:38:03:9c:f9:dd:f4:3c:b2:94:a2:54:49:85:c9:
19:6d:79:e2:7e:b0:e3:54:e0:29:9b:77:da:77:71:
a1:50:dd:90:bc:1f:f2:54:cd:a8:50:0c:86:39:0a:
09:ab:9c:ed:9a:7f:f1:e7:9b:d8:ea:3c:06:ce:dc:
5a:35:e5:d2:88:81:8c:58:9b:35:af:99:b0:92:ce:
89:d9:78:e9:64:c9:79:cc:cb:f7:3c:22:52:54:1a:
39:d0:f5:01:ca:a5:55:0f:30:ee:54:c2:59:8b:f2:
68:39:50:1a:94:40:29:7a:8f:0e:e4:f0:7a:c7:e6:
cf:de:54:cb:c2:a7:bb:d1:02:f8:ee:01:7a:e7:12:
d8:04:6e:78:29:63:e7:d7:83:61:64:4b:90:0e:99:
17:ee:e0:a0:ba:ba:76:98:b5:30:10:83:44:1c:3c:
a8:b4:24:de:01:a3:97:83:26:c0:ad:d4:bb:0e:a9:
5c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D0:AB:E2:3A:8D:9A:79:C9:F8:D5:FF:92:69:F4:B7:D0:33:7B:7B
X509v3 Authority Key Identifier:
keyid:14:C6:6A:78:6E:6E:F3:16:74:BE:C6:83:3C:78:AE:BE:C1:63:39:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/s9Cr4jqNmnnJ-NX_kmn0t9Aze3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.0.80.0/20
37.153.192.0/18
46.44.128.0/18
84.246.0.0/18
89.146.0.0/18
212.121.96.0/19
213.144.224.0/19
213.247.64.0/18
IPv6:
2a02:22a0::/32
Signature Algorithm: sha256WithRSAEncryption
36:aa:d3:3f:bc:40:89:47:1c:07:58:18:77:5b:f5:d2:d2:af:
ba:e2:bd:22:ba:23:5d:a3:37:d8:76:00:ee:cf:9a:2f:0b:93:
14:54:bb:9d:c3:f4:3e:39:b9:a7:b7:c2:de:87:3b:45:a2:54:
7c:cb:56:53:77:a0:f3:c8:31:f9:ac:60:76:d2:83:7d:7a:ac:
c9:f6:79:39:2a:c3:e7:69:e0:99:4d:f9:37:a9:d7:31:0f:f9:
cb:9b:42:7b:dc:a7:8c:ea:d2:ae:9e:96:d8:24:5e:84:15:d9:
e1:1c:0d:ce:ff:7e:ac:94:9f:b2:7c:60:0c:c3:ae:f0:cc:66:
c4:43:15:d4:1f:c8:c4:40:93:0f:d1:62:ca:68:b7:50:c8:2e:
02:78:77:e1:c9:92:a3:8a:2b:51:71:f2:88:4c:ed:e7:5d:d7:
c8:45:43:f2:85:78:c9:fb:a4:75:75:0d:17:56:7b:01:06:1a:
07:38:08:91:dd:b0:cc:ac:df:b0:6d:1b:28:49:b4:8f:d9:4f:
a2:4c:89:b9:d5:d9:85:c0:bb:a9:c3:88:2c:3c:1b:92:a2:cd:
4b:81:13:d4:e4:53:7d:c8:de:c8:f9:a7:6f:e2:32:b7:2b:7d:
4f:69:2c:3e:9f:86:10:03:14:5f:fb:b6:34:ea:c6:42:b9:56:
08:28:29:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:31:08 2024 by rpki-client on console-fra.rpki-client.org