Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/1Ddm-szfoyjtkf-b6VukJ3pCnXU.roa
File: 1Ddm-szfoyjtkf-b6VukJ3pCnXU.roa (raw, json)
Hash identifier: MiCYFrCtcXuEOrQJOVkfl321WBbKJilpd1FsxjN1UHo=
Subject key identifier: D4:37:66:FA:CC:DF:A3:28:ED:91:FF:9B:E9:5B:A4:27:7A:42:9D:75
Certificate issuer: /CN=a74c6706e3fbebdff146a8a14ec2a3284a92ba62
Certificate serial: 01884D0F3E4E569250929C6F5FFDAA087E9E
Authority key identifier: A7:4C:67:06:E3:FB:EB:DF:F1:46:A8:A1:4E:C2:A3:28:4A:92:BA:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/1Ddm-szfoyjtkf-b6VukJ3pCnXU.roa
Signing time: Wed 24 May 2023 09:20:24 +0000
ROA not before: Wed 24 May 2023 09:20:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198949
IP address blocks: 80.86.192.0/24 maxlen: 24
80.86.199.0/24 maxlen: 24
80.86.196.0/24 maxlen: 24
80.86.198.0/24 maxlen: 24
80.86.193.0/24 maxlen: 24
81.221.251.0/24 maxlen: 24
81.221.250.0/24 maxlen: 24
81.221.253.0/24 maxlen: 24
81.221.252.0/24 maxlen: 24
81.221.254.0/24 maxlen: 24
81.221.255.0/24 maxlen: 24
195.49.16.0/24 maxlen: 24
194.191.17.0/24 maxlen: 24
194.191.16.0/24 maxlen: 24
212.59.186.0/24 maxlen: 24
212.59.184.0/24 maxlen: 24
194.191.24.0/24 maxlen: 24
194.191.21.0/24 maxlen: 24
194.191.20.0/24 maxlen: 24
194.191.19.0/24 maxlen: 24
194.191.18.0/24 maxlen: 24
212.59.189.0/24 maxlen: 24
212.59.188.0/24 maxlen: 24
194.191.28.0/24 maxlen: 24
194.191.26.0/24 maxlen: 24
194.191.25.0/24 maxlen: 24
82.195.224.0/24 maxlen: 24
82.195.226.0/24 maxlen: 24
82.195.225.0/24 maxlen: 24
82.195.227.0/24 maxlen: 24
2a01:2a8:2001::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:4d:0f:3e:4e:56:92:50:92:9c:6f:5f:fd:aa:08:7e:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a74c6706e3fbebdff146a8a14ec2a3284a92ba62
Validity
Not Before: May 24 09:20:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d43766faccdfa328ed91ff9be95ba4277a429d75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:04:b5:30:c6:d3:74:ab:1c:3a:6f:03:bd:18:
59:3b:50:47:7b:21:f6:9d:3d:28:45:0d:9d:bd:1a:
6d:98:e6:0a:bc:ed:d9:8e:3b:9e:34:5d:b2:65:08:
ed:44:6c:67:0d:0e:b5:94:74:1c:da:51:e7:27:6b:
b7:6d:34:74:d8:df:82:14:af:5f:21:96:2b:b5:0e:
ab:ce:26:41:1d:82:fd:ae:63:92:ea:e3:76:2e:30:
3b:5b:7f:31:45:4c:8a:37:0f:1a:e0:21:2f:bf:4c:
a5:bb:a2:93:1e:5d:87:bf:d4:e9:79:78:7d:14:2a:
b1:b0:01:30:c4:98:8d:1d:76:0c:2d:19:15:bd:ec:
48:ec:5d:d0:76:e2:74:a8:b7:9f:32:f7:56:ec:38:
46:11:47:c7:9d:fe:3b:de:bc:bd:f0:2f:d4:38:4b:
f3:31:4e:b9:67:c0:0c:9e:02:27:1a:16:3b:e1:ae:
10:29:47:93:46:70:01:2e:6c:a3:25:07:c1:e3:14:
90:ab:79:b1:1d:bf:3b:bb:59:a9:ce:23:81:f5:fb:
fa:b0:e5:00:2b:a9:6b:98:31:b5:54:03:dc:f9:16:
02:27:54:f2:e4:3a:1d:b5:8c:f9:a4:fb:63:44:5a:
59:29:38:5d:0e:eb:f6:5e:f4:5a:63:06:cc:50:82:
73:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:37:66:FA:CC:DF:A3:28:ED:91:FF:9B:E9:5B:A4:27:7A:42:9D:75
X509v3 Authority Key Identifier:
keyid:A7:4C:67:06:E3:FB:EB:DF:F1:46:A8:A1:4E:C2:A3:28:4A:92:BA:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/1Ddm-szfoyjtkf-b6VukJ3pCnXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.86.192.0/23
80.86.196.0/24
80.86.198.0/23
81.221.250.0-81.221.255.255
82.195.224.0/22
194.191.16.0-194.191.21.255
194.191.24.0-194.191.26.255
194.191.28.0/24
195.49.16.0/24
212.59.184.0/24
212.59.186.0/24
212.59.188.0/23
IPv6:
2a01:2a8:2001::/48
Signature Algorithm: sha256WithRSAEncryption
41:66:5f:e7:66:0a:49:97:dd:33:37:ff:83:b8:26:e9:f4:0e:
1e:f2:d0:47:7c:f4:2f:48:ca:73:c7:f4:98:1c:5a:2d:c0:88:
c1:4b:7a:1c:9d:75:96:03:09:9d:fd:d8:a8:cd:9c:01:1c:67:
ff:14:5f:0a:8e:43:fe:2e:21:5d:ef:a7:0c:bd:23:50:45:33:
14:06:70:95:2c:15:7e:35:55:5c:c6:44:fe:6e:67:bb:1e:01:
51:b5:b9:e1:cf:b5:65:d4:90:31:68:57:7c:b3:77:9e:92:73:
61:66:ba:0e:5a:20:30:77:92:71:ab:7e:f6:b8:3c:b2:4c:3e:
7d:87:91:e4:b2:1c:95:37:2b:0f:43:9f:18:28:ff:be:2b:c7:
cc:ab:a6:27:c6:68:c8:fa:bc:77:27:a8:c4:c2:09:31:ca:b2:
e2:ef:6e:a5:99:a4:e2:f7:a6:aa:19:6d:fb:3b:3b:3e:bd:c3:
76:c4:2f:e3:e4:b6:de:ac:6e:24:ef:db:ac:78:4d:15:d8:5c:
b8:e4:14:cf:a6:e8:2b:d5:26:66:5d:3e:ac:35:b9:54:8b:38:
eb:7c:a9:9e:d4:a6:53:1d:13:74:70:0a:72:17:de:77:98:19:
81:db:f4:29:0b:9e:e0:1a:69:ba:48:42:01:d4:c1:d0:e9:4d:
8f:2a:35:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:48 2023 by rpki-client on console-ams.rpki-client.org