Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/Nb_wXm9Mqf4WDSM08glyGifkbhQ.roa
File: Nb_wXm9Mqf4WDSM08glyGifkbhQ.roa (raw, json)
Hash identifier: mkoTW4KXp65t2wG/PDrVGeSr3YfLy/fTcCVp0hG+BYA=
Subject key identifier: 35:BF:F0:5E:6F:4C:A9:FE:16:0D:23:34:F2:09:72:1A:27:E4:6E:14
Certificate issuer: /CN=dbe0ca7c1e0e8a1c7ad02d0bb828b41188ae5243
Certificate serial: 018571B9F4624BE5012A1D307B8824341517
Authority key identifier: DB:E0:CA:7C:1E:0E:8A:1C:7A:D0:2D:0B:B8:28:B4:11:88:AE:52:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/Nb_wXm9Mqf4WDSM08glyGifkbhQ.roa
Signing time: Mon 02 Jan 2023 09:04:50 +0000
ROA not before: Mon 02 Jan 2023 09:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 45014
IP address blocks: 217.172.128.0/20 maxlen: 24
217.172.132.0/24 maxlen: 24
185.18.32.0/24 maxlen: 24
185.184.236.0/22 maxlen: 22
159.253.56.0/21 maxlen: 24
80.93.160.0/20 maxlen: 24
92.60.96.0/20 maxlen: 24
2a00:1a90::/32 maxlen: 38
2a03:f2c0::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b9:f4:62:4b:e5:01:2a:1d:30:7b:88:24:34:15:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe0ca7c1e0e8a1c7ad02d0bb828b41188ae5243
Validity
Not Before: Jan 2 09:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=35bff05e6f4ca9fe160d2334f209721a27e46e14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e4:50:d6:e8:7b:eb:1c:9c:9f:72:97:4d:ab:
c5:6a:2d:c7:f1:a3:3c:22:e1:f8:2b:bd:e2:e0:e3:
63:c3:80:0e:c4:f2:3f:b4:49:ea:cf:e3:90:dd:74:
c0:36:0d:0f:e2:2a:af:64:b9:ad:45:e7:49:89:1b:
25:15:0a:73:86:cf:75:30:48:58:96:79:64:c6:c2:
c4:25:1b:ad:1a:37:7b:e8:51:76:a7:e7:1e:ab:15:
16:b8:df:94:d1:af:f8:b8:7e:ab:03:17:e0:90:99:
98:4f:7c:06:1e:3d:7a:27:bf:33:d0:04:f2:49:a8:
bc:74:3c:1c:6b:9a:f6:48:fc:57:78:16:f0:10:f0:
df:9b:7a:03:5f:4f:f7:91:54:cf:7a:04:a5:93:56:
ea:14:d0:17:39:28:40:96:18:86:54:6e:fd:56:d4:
1a:8e:79:4f:0a:e5:cf:cf:92:a5:24:b0:d5:f9:14:
f0:a2:d1:6a:f4:62:38:60:84:67:d7:01:86:68:a7:
12:34:f5:7d:f1:47:01:9e:8c:54:6b:ba:0b:81:51:
a7:26:cf:4b:6c:ef:5a:8e:3c:98:81:75:08:4e:72:
81:6f:ee:1f:d3:83:bc:d7:7f:64:c8:f7:25:a6:ab:
df:41:96:c8:aa:07:32:f0:99:55:a8:ad:3c:0c:75:
98:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:BF:F0:5E:6F:4C:A9:FE:16:0D:23:34:F2:09:72:1A:27:E4:6E:14
X509v3 Authority Key Identifier:
keyid:DB:E0:CA:7C:1E:0E:8A:1C:7A:D0:2D:0B:B8:28:B4:11:88:AE:52:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/Nb_wXm9Mqf4WDSM08glyGifkbhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.160.0/20
92.60.96.0/20
159.253.56.0/21
185.18.32.0/24
185.184.236.0/22
217.172.128.0/20
IPv6:
2a00:1a90::/32
2a03:f2c0::/32
Signature Algorithm: sha256WithRSAEncryption
74:b6:69:13:2b:44:3a:a0:a1:41:79:20:71:b1:df:12:bf:84:
33:1d:0a:c2:39:20:fa:69:29:b7:86:73:5c:51:ab:35:2a:93:
38:99:de:cd:20:24:61:50:7c:80:e9:85:ec:90:05:1c:a4:aa:
0d:a7:e2:58:19:c2:6b:8e:b8:15:eb:fd:55:c7:7f:a0:f4:c3:
97:8a:dc:eb:e5:3d:56:ae:da:8d:87:d0:21:3c:a8:6b:c3:19:
05:35:65:2e:34:9e:50:24:54:c8:48:4c:67:30:47:fe:9c:99:
dd:b7:86:10:3e:b0:cf:64:22:cd:cf:a5:99:65:13:e3:82:01:
c5:09:0d:ef:05:76:4c:cb:7c:90:d5:fb:34:32:da:22:0e:ae:
6c:26:d4:93:e3:29:3c:95:8b:85:25:cf:f6:41:13:66:a8:46:
cf:26:39:bd:e4:3d:cf:77:49:86:17:b3:c4:bc:1d:78:89:a1:
a7:b5:e4:88:70:d8:aa:0b:ea:d3:0e:97:08:aa:9f:cf:be:0c:
db:65:c3:e6:e9:85:7e:5a:61:f3:1e:94:f2:3b:06:34:4e:71:
95:3c:85:a5:e7:8b:36:73:2a:24:b9:86:ee:e2:4f:25:90:46:
d0:5c:80:09:5c:c9:0e:f0:f1:a3:05:bd:58:ed:fd:37:e2:25:
f7:29:c0:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:35 2023 by rpki-client on console-fra.rpki-client.org