Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/wC6UYYmYmEsBCNCxHtAqizAN6aE.roa
File: wC6UYYmYmEsBCNCxHtAqizAN6aE.roa (raw, json)
Hash identifier: AXLGBMTZi1NvD5pnyNGGpyHh0WdQ0ioF7loKNBwCGPc=
Subject key identifier: C0:2E:94:61:89:98:98:4B:01:08:D0:B1:1E:D0:2A:8B:30:0D:E9:A1
Certificate issuer: /CN=ceb86983547113359bade1f3f38104091e3a6439
Certificate serial: 01856C25B3888C06907FE4768C5052D8169C
Authority key identifier: CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/wC6UYYmYmEsBCNCxHtAqizAN6aE.roa
Signing time: Sun 01 Jan 2023 07:04:48 +0000
ROA not before: Sun 01 Jan 2023 07:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19905
IP address blocks: 213.205.0.0/19 maxlen: 24
82.85.16.0/24 maxlen: 24
82.85.24.0/24 maxlen: 24
82.85.18.0/24 maxlen: 24
82.85.28.0/24 maxlen: 24
82.85.27.0/24 maxlen: 24
82.85.61.0/24 maxlen: 24
195.130.248.0/22 maxlen: 24
213.205.32.0/24 maxlen: 24
213.205.32.0/19 maxlen: 24
213.205.33.0/24 maxlen: 24
213.205.34.0/24 maxlen: 24
213.205.36.0/24 maxlen: 24
213.205.37.0/24 maxlen: 24
82.85.154.0/24 maxlen: 24
94.32.64.0/20 maxlen: 24
94.32.80.0/21 maxlen: 24
212.123.79.0/24 maxlen: 24
212.123.84.0/23 maxlen: 24
212.123.82.0/23 maxlen: 24
94.32.96.0/23 maxlen: 24
94.32.100.0/22 maxlen: 24
94.32.102.0/24 maxlen: 24
94.32.104.0/21 maxlen: 24
212.123.93.0/24 maxlen: 24
94.32.115.0/24 maxlen: 24
217.133.170.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:25:b3:88:8c:06:90:7f:e4:76:8c:50:52:d8:16:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ceb86983547113359bade1f3f38104091e3a6439
Validity
Not Before: Jan 1 07:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c02e94618998984b0108d0b11ed02a8b300de9a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a1:ca:5b:d1:b5:33:93:bb:3e:97:0a:e9:a9:
b6:07:c3:db:85:1f:13:30:ab:9b:28:43:53:57:0b:
bd:56:1e:a1:6b:e7:3c:8e:2e:76:b6:a6:a7:63:35:
5f:4f:e0:bc:2d:89:8f:ef:27:82:ce:0a:81:ba:ab:
31:65:46:83:c9:05:e6:58:b2:54:23:c3:fd:c0:17:
04:e5:a1:d5:da:58:bc:3f:64:a1:93:1d:05:8a:db:
04:5e:d2:20:f0:82:53:9d:dc:e7:ea:df:3a:07:1f:
23:eb:cb:82:dd:6c:62:5c:4e:12:d1:b8:ad:48:1c:
4d:ae:1b:27:ae:bb:20:7b:f3:53:d9:8c:7b:97:fc:
56:e9:2e:bc:9f:8b:2c:74:02:83:e9:80:0d:2d:21:
0f:9f:90:c2:b2:d0:26:71:25:4f:85:91:70:77:fd:
0f:c0:eb:6f:41:1e:8b:a2:0f:b7:43:9d:5a:0b:f7:
e8:8f:7d:e4:d0:ea:65:79:ec:13:f9:b9:d7:b1:4d:
3f:61:2d:91:78:ca:d2:6c:71:78:50:d2:2f:53:b6:
81:92:99:dc:46:19:58:f8:28:eb:31:fa:4e:35:2a:
58:38:b6:6a:0f:d8:c8:be:79:15:a5:5f:c2:8f:56:
d0:a6:4a:1b:02:93:ae:72:ae:ed:6e:73:56:c0:1b:
87:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:2E:94:61:89:98:98:4B:01:08:D0:B1:1E:D0:2A:8B:30:0D:E9:A1
X509v3 Authority Key Identifier:
keyid:CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/wC6UYYmYmEsBCNCxHtAqizAN6aE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.85.16.0/24
82.85.18.0/24
82.85.24.0/24
82.85.27.0-82.85.28.255
82.85.61.0/24
82.85.154.0/24
94.32.64.0-94.32.87.255
94.32.96.0/23
94.32.100.0-94.32.111.255
94.32.115.0/24
195.130.248.0/22
212.123.79.0/24
212.123.82.0-212.123.85.255
212.123.93.0/24
213.205.0.0/18
217.133.170.0/24
Signature Algorithm: sha256WithRSAEncryption
49:6f:74:de:21:91:7f:15:73:df:ab:77:c6:ac:3a:69:43:b1:
fa:ac:bf:9b:69:51:be:3b:6a:89:36:cb:4f:6d:b6:05:7c:e8:
72:ca:6a:1b:3f:fd:06:4c:6b:a8:ab:40:79:7c:0f:0f:ff:fd:
e1:d1:f8:40:34:97:d4:21:3a:64:69:e8:11:87:7a:1b:20:33:
00:60:07:c8:d4:95:b6:1b:07:95:52:fc:8d:84:21:2a:22:1f:
5d:58:18:72:81:7c:f0:ce:88:5b:c6:c7:24:42:df:eb:bf:1e:
4e:67:ce:f2:58:dd:40:31:b2:de:b7:8f:01:78:25:1a:e1:74:
fe:e6:7d:5f:d5:ef:58:af:90:d5:17:83:cd:7e:81:25:70:70:
94:9f:41:81:74:c1:90:82:55:21:aa:fd:ef:60:77:5e:e5:02:
91:ff:80:47:cc:68:6c:13:55:7a:8b:e9:3e:1e:cc:21:18:f8:
65:b5:51:97:4a:f4:12:f1:11:29:73:2d:7d:72:6c:b0:63:94:
50:fe:5d:05:b3:1e:41:bb:6d:84:a5:6d:27:31:12:1f:c6:86:
a4:cd:96:0c:4a:1b:b0:28:5c:90:77:9a:72:0e:eb:f2:23:91:
62:7f:2f:8b:d7:1e:ef:9c:cc:fe:ca:dd:21:d0:5d:76:b5:08:
92:24:88:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:53:53 2024 by rpki-client on console-ams.rpki-client.org