Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/k4mpVnYGzrJmSegZQ_LWkc5h43E.roa
File: k4mpVnYGzrJmSegZQ_LWkc5h43E.roa (raw, json)
Hash identifier: RmvoIVLMlkHG2IihW+suKO6eaxzku9lMyZAx0GZAXtw=
Subject key identifier: 93:89:A9:56:76:06:CE:B2:66:49:E8:19:43:F2:D6:91:CE:61:E3:71
Certificate issuer: /CN=cbd745ebfcec382df252c2f750db648f4f034abf
Certificate serial: 0188D539A65F577C763D4F69A36211C7D648
Authority key identifier: CB:D7:45:EB:FC:EC:38:2D:F2:52:C2:F7:50:DB:64:8F:4F:03:4A:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/k4mpVnYGzrJmSegZQ_LWkc5h43E.roa
Signing time: Mon 19 Jun 2023 19:55:05 +0000
ROA not before: Mon 19 Jun 2023 19:55:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3209
IP address blocks: 146.60.0.0/16 maxlen: 24
213.23.0.0/16 maxlen: 24
212.144.0.0/16 maxlen: 24
195.158.128.0/19 maxlen: 19
84.56.0.0/13 maxlen: 24
94.216.0.0/13 maxlen: 24
92.72.0.0/13 maxlen: 24
195.50.128.0/18 maxlen: 18
185.2.132.0/22 maxlen: 22
188.96.0.0/12 maxlen: 24
88.64.0.0/12 maxlen: 24
85.238.224.0/19 maxlen: 19
2a00::/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d5:39:a6:5f:57:7c:76:3d:4f:69:a3:62:11:c7:d6:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd745ebfcec382df252c2f750db648f4f034abf
Validity
Not Before: Jun 19 19:55:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9389a9567606ceb26649e81943f2d691ce61e371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d1:56:8d:dd:50:49:0c:2e:cb:4c:ef:f4:f1:
d0:de:0c:7a:24:b5:f8:ae:34:95:62:bb:17:76:dc:
97:51:29:aa:09:35:ee:a4:20:78:f4:c5:55:f8:3a:
72:72:de:10:75:86:59:58:6e:5f:19:64:77:39:8b:
ec:0f:5e:0f:3d:bf:b6:87:03:3c:e3:69:aa:24:81:
73:c9:d0:8b:2d:36:b8:46:5f:f0:4d:d1:57:50:fb:
94:b0:3d:12:90:b1:fa:92:f1:ca:af:82:36:31:37:
47:a3:35:28:21:b2:ff:5c:0a:ba:d8:5c:27:f5:3c:
c9:1d:74:23:e9:7b:b8:3f:59:51:f9:a4:5c:2f:2b:
47:64:0a:25:6b:33:65:17:1a:8b:30:e1:33:ac:57:
55:c1:f0:d6:92:14:87:a2:20:8b:58:81:da:4c:8b:
c0:90:1c:55:12:4d:7b:b3:4c:7b:00:93:f4:7e:3d:
78:f1:73:89:05:af:d2:9c:08:39:21:ad:82:9a:a5:
3b:1a:3e:50:a0:96:8e:bf:4d:b8:65:fb:6a:e1:30:
7d:75:a5:9f:e6:df:2a:46:99:2a:a4:94:d0:67:b7:
f9:38:fb:be:34:71:17:f5:ca:3a:df:81:27:15:23:
ca:3a:f5:4b:ca:9d:bf:f6:11:35:eb:03:5f:f1:6f:
34:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:89:A9:56:76:06:CE:B2:66:49:E8:19:43:F2:D6:91:CE:61:E3:71
X509v3 Authority Key Identifier:
keyid:CB:D7:45:EB:FC:EC:38:2D:F2:52:C2:F7:50:DB:64:8F:4F:03:4A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/k4mpVnYGzrJmSegZQ_LWkc5h43E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.56.0.0/13
85.238.224.0/19
88.64.0.0/12
92.72.0.0/13
94.216.0.0/13
146.60.0.0/16
185.2.132.0/22
188.96.0.0/12
195.50.128.0/18
195.158.128.0/19
212.144.0.0/16
213.23.0.0/16
IPv6:
2a00::/22
Signature Algorithm: sha256WithRSAEncryption
80:55:27:fe:d9:19:13:90:35:95:61:e0:51:2c:40:11:2e:01:
46:cc:c0:ff:47:e7:10:48:7a:75:4f:b4:95:5e:04:48:6f:1e:
a3:7d:29:cc:7f:2a:73:66:f9:69:16:56:9b:0c:73:32:2b:70:
ad:db:4c:15:db:04:1d:25:cd:a3:f4:ad:35:31:53:13:52:c2:
62:b7:28:79:34:2a:af:b7:45:15:92:df:a4:20:25:68:d7:30:
b6:ce:5f:13:71:c8:38:02:b4:9d:7c:96:f5:20:b0:a4:a1:c8:
aa:d5:f2:3a:ea:f3:8d:aa:55:79:6e:ce:e1:6e:2f:5b:4c:43:
81:20:60:e8:e7:fb:6e:4a:de:83:c6:44:b3:74:63:19:9b:2a:
e0:0f:31:71:ef:54:1d:63:40:85:b1:4f:35:14:a5:02:e2:18:
86:de:10:b0:ff:45:29:22:72:38:96:0f:2d:a6:64:5d:0f:c4:
31:a4:41:84:f5:2c:b3:85:5d:ba:03:e9:19:a1:c1:f4:36:a5:
2e:78:6b:6d:14:ba:40:7b:df:e9:4c:99:88:bd:01:bc:16:26:
35:71:c2:fc:40:72:ab:86:92:c8:81:72:ec:54:30:39:54:10:
28:cb:b4:5b:55:a9:8c:dd:0f:17:56:4a:98:be:c8:a1:84:61:
35:6b:e8:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 30 07:50:26 2023 by rpki-client on console-ams.rpki-client.org