Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/0UnJD9U-qyO359aYzCnfMRSOfls.roa
File: 0UnJD9U-qyO359aYzCnfMRSOfls.roa (raw, json)
Hash identifier: gzGhz3eK89B4TvJ4o+HRau4h5AzS1maZ2CrJkLec7Os=
Subject key identifier: D1:49:C9:0F:D5:3E:AB:23:B7:E7:D6:98:CC:29:DF:31:14:8E:7E:5B
Certificate issuer: /CN=e801f23ce821c264d67727536ec183537594c5f2
Certificate serial: 01856E01C14ADD79093F855A290F1F606922
Authority key identifier: E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/0UnJD9U-qyO359aYzCnfMRSOfls.roa
Signing time: Sun 01 Jan 2023 15:44:46 +0000
ROA not before: Sun 01 Jan 2023 15:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1653
IP address blocks: 93.115.160.0/21 maxlen: 21
89.44.248.0/21 maxlen: 22
89.41.160.0/21 maxlen: 21
193.11.0.0/16 maxlen: 24
86.105.112.0/21 maxlen: 21
89.34.184.0/21 maxlen: 21
91.250.192.0/19 maxlen: 19
89.33.136.0/21 maxlen: 23
194.47.0.0/16 maxlen: 16
193.10.0.0/16 maxlen: 24
89.34.240.0/21 maxlen: 21
188.240.144.0/20 maxlen: 24
188.211.240.0/21 maxlen: 21
86.104.48.0/20 maxlen: 20
89.44.0.0/21 maxlen: 24
212.25.128.0/19 maxlen: 19
89.32.72.0/21 maxlen: 21
86.104.200.0/21 maxlen: 21
94.176.224.0/21 maxlen: 25
37.156.192.0/20 maxlen: 26
89.43.232.0/21 maxlen: 21
89.32.32.0/21 maxlen: 21
86.104.152.0/21 maxlen: 21
89.37.176.0/21 maxlen: 21
77.238.32.0/19 maxlen: 19
188.241.160.0/20 maxlen: 20
89.45.232.0/21 maxlen: 21
89.45.236.0/22 maxlen: 22
86.106.160.0/21 maxlen: 21
89.47.184.0/21 maxlen: 21
89.46.17.0/24 maxlen: 24
89.46.16.0/21 maxlen: 21
89.46.16.0/24 maxlen: 24
89.46.18.0/24 maxlen: 24
89.46.20.0/22 maxlen: 22
2001:6b0::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:01:c1:4a:dd:79:09:3f:85:5a:29:0f:1f:60:69:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e801f23ce821c264d67727536ec183537594c5f2
Validity
Not Before: Jan 1 15:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d149c90fd53eab23b7e7d698cc29df31148e7e5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:23:79:da:19:9c:f5:b1:dd:39:e1:c6:73:92:
f6:45:9c:01:96:e6:ad:13:e3:f6:3c:8c:90:68:ef:
68:02:a2:20:3a:3e:2c:40:15:00:15:2c:44:89:4c:
53:18:48:45:90:e0:9e:69:91:25:c6:18:7a:72:25:
72:e4:21:33:ee:f4:17:86:e0:29:4e:79:e3:62:6b:
d9:9d:a3:40:a4:82:bf:24:7a:b3:7e:6c:7d:d0:3a:
63:88:68:1c:c9:d2:fa:4f:94:5c:8e:ce:33:8e:3d:
8d:d0:83:6e:89:ea:15:65:67:8b:15:68:8d:99:ce:
59:e6:77:d1:d1:a7:ce:30:4c:fd:34:c3:22:62:cf:
dd:d4:85:db:d6:96:5c:0d:5a:04:80:86:fb:8c:84:
66:c0:db:5a:97:56:10:2f:dc:2c:a6:80:2e:b4:b0:
8f:83:bb:04:ad:71:90:91:e2:90:d2:dd:26:1c:e5:
55:57:40:7e:12:ae:55:ac:47:70:6d:74:8e:3c:9c:
9c:4f:58:ce:5e:02:c6:4c:47:72:b7:d6:9b:21:2f:
09:a1:7f:97:5c:68:d0:f9:df:3b:95:69:41:fe:d3:
3c:98:9a:fb:92:69:90:96:9a:73:dc:fc:0d:85:01:
2e:37:7b:10:d6:2d:21:85:91:2b:45:4c:f3:fd:d6:
85:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:49:C9:0F:D5:3E:AB:23:B7:E7:D6:98:CC:29:DF:31:14:8E:7E:5B
X509v3 Authority Key Identifier:
keyid:E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/0UnJD9U-qyO359aYzCnfMRSOfls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.192.0/20
77.238.32.0/19
86.104.48.0/20
86.104.152.0/21
86.104.200.0/21
86.105.112.0/21
86.106.160.0/21
89.32.32.0/21
89.32.72.0/21
89.33.136.0/21
89.34.184.0/21
89.34.240.0/21
89.37.176.0/21
89.41.160.0/21
89.43.232.0/21
89.44.0.0/21
89.44.248.0/21
89.45.232.0/21
89.46.16.0/21
89.47.184.0/21
91.250.192.0/19
93.115.160.0/21
94.176.224.0/21
188.211.240.0/21
188.240.144.0/20
188.241.160.0/20
193.10.0.0/15
194.47.0.0/16
212.25.128.0/19
IPv6:
2001:6b0::/32
Signature Algorithm: sha256WithRSAEncryption
54:80:17:d1:7a:f8:e7:8a:00:5b:e2:c0:2a:5f:3e:f1:70:d1:
8a:20:f9:45:6e:4b:d8:97:82:fd:cf:f5:55:c1:c1:63:0a:90:
35:fc:88:5c:f0:0b:08:21:4c:4a:6f:ff:4b:d7:12:3c:dd:db:
d3:ad:27:6c:94:35:df:de:3c:f3:1a:2d:3f:b8:87:78:1a:3a:
59:19:58:61:65:e3:d3:50:5a:36:5f:ac:5c:fe:66:f3:f5:eb:
5e:e8:02:35:5d:26:a3:28:aa:67:d8:67:dd:1a:9f:4c:e7:54:
a3:db:0c:49:b1:eb:10:db:c6:a5:6a:b6:e5:55:9c:9f:91:d3:
66:3a:77:0e:56:e3:45:d3:54:0c:ab:94:07:43:34:b6:22:fa:
17:7c:00:06:4b:92:74:4e:32:af:08:02:ef:99:65:41:cd:03:
7d:d4:e8:c3:f7:cb:85:56:74:5b:9f:0f:47:1f:09:d3:8e:e2:
06:3b:2e:bb:25:5a:51:de:35:d0:cf:80:11:00:9e:80:cc:4c:
29:7c:69:90:d1:34:ab:06:75:64:c3:d8:8e:bb:87:3d:1f:f7:
3c:f2:6a:22:c7:9a:73:ea:27:66:7d:37:ca:6d:f2:92:17:f1:
e4:57:3e:34:c2:92:2b:31:74:e0:31:6f:a8:4d:82:44:73:8f:
6b:57:29:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:24:10 2024 by rpki-client on console-fra.rpki-client.org