Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/GRIlgr3uAye7hdSkexPJFsaZbsw.roa
File: GRIlgr3uAye7hdSkexPJFsaZbsw.roa (raw, json)
Hash identifier: EmQ+/b2R/fnWeI1toz0HJ/is2JadGZ6GnMo2IWrEJVA=
Subject key identifier: 19:12:25:82:BD:EE:03:27:BB:85:D4:A4:7B:13:C9:16:C6:99:6E:CC
Certificate issuer: /CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Certificate serial: 01856F14E8E6C5AAFA6A6F5DE4AC5A67DFE2
Authority key identifier: 17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/GRIlgr3uAye7hdSkexPJFsaZbsw.roa
Signing time: Sun 01 Jan 2023 20:45:19 +0000
ROA not before: Sun 01 Jan 2023 20:45:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20960
IP address blocks: 88.199.0.0/16 maxlen: 16
94.40.0.0/16 maxlen: 17
82.160.0.0/16 maxlen: 16
78.131.128.0/17 maxlen: 17
213.199.192.0/18 maxlen: 18
2a02:f40::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:e8:e6:c5:aa:fa:6a:6f:5d:e4:ac:5a:67:df:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Validity
Not Before: Jan 1 20:45:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19122582bdee0327bb85d4a47b13c916c6996ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a1:74:72:14:be:05:16:13:cf:2e:60:ce:dc:
cd:b9:1e:ab:c5:41:36:18:1b:10:bb:10:2f:cd:83:
38:e3:36:5c:ae:e6:20:20:f9:51:02:5f:7a:96:87:
49:9c:02:66:a0:41:5d:4b:3c:45:21:d5:e9:1b:0f:
d8:2d:ac:0c:50:ed:78:9b:aa:81:35:37:b0:73:9e:
5b:c1:a4:5a:40:2c:9b:86:60:bb:a4:5d:18:d0:82:
52:7d:64:92:06:00:cd:37:62:17:4a:32:b0:40:1a:
78:73:f5:02:6f:74:b3:ba:40:de:fa:f3:64:f5:6f:
56:22:3d:3d:b8:0e:6b:26:a3:34:1e:18:0e:41:76:
67:a8:31:8f:02:d7:92:f3:58:c2:57:07:73:43:31:
ea:83:b8:6e:08:fc:b2:ef:4f:33:f2:70:b7:c9:47:
c3:89:21:5b:52:3f:4c:11:00:eb:08:68:2f:6b:2c:
79:b2:76:6e:ce:28:b6:8e:cf:9a:16:5b:e9:1d:2b:
ec:52:9a:25:0c:fc:0f:69:73:58:23:5d:02:54:ae:
07:cd:ad:e0:3d:f9:16:df:08:6b:a9:72:bb:3b:b4:
f4:e7:0d:5e:cf:7e:2e:b3:de:d0:df:cf:32:c0:e0:
d0:1c:f0:34:56:4c:4e:0a:c4:cb:f6:e1:cf:b9:8f:
35:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:12:25:82:BD:EE:03:27:BB:85:D4:A4:7B:13:C9:16:C6:99:6E:CC
X509v3 Authority Key Identifier:
keyid:17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/GRIlgr3uAye7hdSkexPJFsaZbsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.131.128.0/17
82.160.0.0/16
88.199.0.0/16
94.40.0.0/16
213.199.192.0/18
IPv6:
2a02:f40::/32
Signature Algorithm: sha256WithRSAEncryption
bb:4c:31:e2:dc:05:46:35:bb:b7:db:7c:19:c6:c2:f1:f8:17:
f7:26:11:4f:25:a6:92:5d:5e:ed:73:b4:25:fe:38:70:18:ec:
80:d3:bc:b1:e0:a3:27:97:b1:2b:02:49:82:5c:e3:e3:ac:29:
ce:22:cf:05:82:79:f1:48:57:51:61:6f:6f:cf:36:39:9f:bb:
a1:52:28:18:a1:04:f0:4a:9c:71:3e:c6:75:5b:5e:6e:58:83:
8d:72:16:e9:09:fa:fb:71:fe:a8:4a:04:13:6a:de:7c:fc:f2:
88:40:22:13:e7:e6:6b:c9:8d:18:af:61:9d:a1:c8:07:bf:2d:
91:ff:7a:f8:bc:f5:c8:67:fb:59:37:f1:7d:67:a5:d7:1e:0c:
27:2a:cb:6f:df:66:65:6c:63:4d:35:c9:b1:80:dd:d6:f8:0a:
a9:8d:85:f5:47:fc:18:2a:bc:c9:16:be:b0:91:ae:a8:70:8b:
f2:aa:68:4e:db:4d:50:a0:a8:3b:7a:3f:e2:74:39:ca:9e:c6:
23:09:66:4b:b7:5f:1e:0d:0b:19:aa:7c:f5:4b:2e:b6:15:8f:
3d:f3:15:c1:7f:93:9b:d1:cb:77:30:66:ae:d1:bc:7e:1d:3a:
a0:eb:b7:c4:4d:69:40:7c:a5:e7:a2:02:f0:25:31:1d:be:0b:
14:c1:54:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 03:23:21 2024 by rpki-client on console-fra.rpki-client.org