Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0c0c65-9f82-4450-9165-f0c21f8186f0/1/c8JkZxOHhIyAvi9JZKZ9yDxDnN4.roa
File: c8JkZxOHhIyAvi9JZKZ9yDxDnN4.roa (raw, json)
Hash identifier: WCNBVzH0F0fFRg3AtK+4laBfPGuwKbqjjG9Kbdf3cBc=
Subject key identifier: 73:C2:64:67:13:87:84:8C:80:BE:2F:49:64:A6:7D:C8:3C:43:9C:DE
Certificate issuer: /CN=d4ff0fecd7bf44148931788dfe7f20d67a67a0db
Certificate serial: 0185720351B2847791A14B6F6CAE098D835A
Authority key identifier: D4:FF:0F:EC:D7:BF:44:14:89:31:78:8D:FE:7F:20:D6:7A:67:A0:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1P8P7Ne_RBSJMXiN_n8g1npnoNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0c0c65-9f82-4450-9165-f0c21f8186f0/1/c8JkZxOHhIyAvi9JZKZ9yDxDnN4.roa
Signing time: Mon 02 Jan 2023 10:24:58 +0000
ROA not before: Mon 02 Jan 2023 10:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29321
IP address blocks: 217.195.160.0/20 maxlen: 20
80.243.96.0/20 maxlen: 20
94.143.168.0/21 maxlen: 21
109.239.64.0/20 maxlen: 20
194.59.240.0/22 maxlen: 22
2a02:b20::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:03:51:b2:84:77:91:a1:4b:6f:6c:ae:09:8d:83:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ff0fecd7bf44148931788dfe7f20d67a67a0db
Validity
Not Before: Jan 2 10:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73c264671387848c80be2f4964a67dc83c439cde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:88:9c:1a:0a:be:d4:21:fa:1c:fd:3d:42:c5:
b9:f9:57:d8:26:ce:ad:90:f9:62:c4:57:7a:a5:d2:
b0:02:a3:41:78:76:93:d0:0d:10:12:88:ce:4a:26:
46:f7:69:ea:55:4f:c4:a7:8c:80:4c:06:e1:b9:f6:
b5:e5:45:7c:9d:31:2a:fc:24:c4:e8:57:10:fc:02:
1c:79:12:ca:68:ce:cc:7c:49:5f:f9:51:1f:47:b8:
4b:42:4a:60:c3:22:d7:aa:0b:15:d6:fa:8e:78:d5:
c9:35:80:7e:a5:65:b4:6f:c7:c7:0d:17:73:54:fa:
71:c7:27:5a:10:5f:17:ee:98:ed:ce:14:ba:fc:50:
c9:12:30:ce:1a:86:47:1b:a2:e5:bb:3a:17:a2:47:
37:73:03:b8:a2:40:03:bc:66:e2:13:d6:5e:d6:b9:
0a:90:86:d9:c5:2a:78:ae:3b:20:33:14:e6:e4:75:
b1:04:e1:4e:55:92:04:8c:cc:71:03:17:4d:d3:9b:
c8:d7:39:81:58:e9:0e:00:d9:b9:46:99:1a:d5:9c:
29:bd:c4:76:6d:c6:c0:3c:d8:2f:83:32:01:e2:99:
f5:9c:c0:5b:14:66:4c:d2:ec:e1:2a:f9:20:42:d2:
9b:25:42:ba:9f:3c:b4:b5:b4:72:24:03:4d:58:5a:
2c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:C2:64:67:13:87:84:8C:80:BE:2F:49:64:A6:7D:C8:3C:43:9C:DE
X509v3 Authority Key Identifier:
keyid:D4:FF:0F:EC:D7:BF:44:14:89:31:78:8D:FE:7F:20:D6:7A:67:A0:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P8P7Ne_RBSJMXiN_n8g1npnoNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0c0c65-9f82-4450-9165-f0c21f8186f0/1/c8JkZxOHhIyAvi9JZKZ9yDxDnN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0c0c65-9f82-4450-9165-f0c21f8186f0/1/1P8P7Ne_RBSJMXiN_n8g1npnoNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.243.96.0/20
94.143.168.0/21
109.239.64.0/20
194.59.240.0/22
217.195.160.0/20
IPv6:
2a02:b20::/32
Signature Algorithm: sha256WithRSAEncryption
a7:45:f9:47:89:e7:f3:ec:db:56:63:e5:f2:b4:d7:e7:a4:12:
c9:0e:6d:0a:ca:f0:be:44:b7:b4:1e:20:77:70:f7:36:41:cf:
23:c2:12:4b:01:33:2e:33:a5:8f:96:ae:54:c1:51:70:30:d4:
5e:fa:3d:40:80:57:78:89:68:f4:23:2f:ce:58:68:31:0d:e5:
5b:b5:a3:16:07:b2:6a:ac:89:ba:d8:cf:9e:e1:88:d1:2a:1f:
64:8d:54:54:44:18:86:76:fd:bf:35:c1:65:2e:b8:93:75:13:
39:53:f6:bb:d3:bd:ec:46:d2:67:6e:26:c8:d2:86:c3:14:bd:
bd:3a:09:1e:ac:c7:7f:8f:a1:be:b1:54:e9:d0:c0:7e:b8:18:
ba:3a:50:c4:a5:46:1d:04:6b:bc:f2:99:45:d3:ab:9a:2d:27:
ba:b8:1d:d8:a2:57:44:1b:e5:ee:3d:9a:7e:a7:4c:c5:4e:9c:
21:12:01:93:f9:45:ba:9a:93:1c:02:d7:e5:72:a6:db:34:7c:
cf:3a:fa:ac:29:fc:05:cf:c8:2e:f9:bd:ee:92:27:04:2b:8c:
74:20:47:f3:2c:34:78:1e:01:a4:80:5d:d1:41:1e:f3:e9:7b:
4a:d5:31:89:4d:f1:a9:cf:07:6a:45:fa:80:d4:13:e0:8d:29:
ab:01:b2:45
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAYVyA1GyhHeRoUtvbK4JjYNaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ZmYwZmVjZDdiZjQ0MTQ4OTMxNzg4ZGZlN2YyMGQ2N2E2
N2EwZGIwHhcNMjMwMTAyMTAyNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3M2MyNjQ2NzEzODc4NDhjODBiZTJmNDk2NGE2N2RjODNjNDM5Y2RlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIicGgq+1CH6HP09QsW5+VfYJs6t
kPlixFd6pdKwAqNBeHaT0A0QEojOSiZG92nqVU/Ep4yATAbhufa15UV8nTEq/CTE
6FcQ/AIceRLKaM7MfElf+VEfR7hLQkpgwyLXqgsV1vqOeNXJNYB+pWW0b8fHDRdz
VPpxxydaEF8X7pjtzhS6/FDJEjDOGoZHG6LluzoXokc3cwO4okADvGbiE9Ze1rkK
kIbZxSp4rjsgMxTm5HWxBOFOVZIEjMxxAxdN05vI1zmBWOkOANm5Rpka1ZwpvcR2
bcbAPNgvgzIB4pn1nMBbFGZM0uzhKvkgQtKbJUK6nzy0tbRyJANNWFosLQIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFHPCZGcTh4SMgL4vSWSmfcg8Q5zeMB8GA1UdIwQY
MBaAFNT/D+zXv0QUiTF4jf5/INZ6Z6DbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVA4UDdOZV9SQlNKTVhpTl9uOGcxbnBub05zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8wYzBjNjUtOWY4Mi00NDUwLTkxNjUt
ZjBjMjFmODE4NmYwLzEvYzhKa1p4T0hoSXlBdmk5SlpLWjl5RHhEbk40LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi8wYzBjNjUtOWY4Mi00NDUwLTkxNjUtZjBjMjFmODE4NmYw
LzEvMVA4UDdOZV9SQlNKTVhpTl9uOGcxbnBub05zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQEUPNgAwQD
Xo+oAwQEbe9AAwQCwjvwAwQE2cOgMA0EAgACMAcDBQAqAgsgMA0GCSqGSIb3DQEB
CwUAA4IBAQCnRflHiefz7NtWY+XytNfnpBLJDm0KyvC+RLe0HiB3cPc2Qc8jwhJL
ATMuM6WPlq5UwVFwMNRe+j1AgFd4iWj0Iy/OWGgxDeVbtaMWB7JqrIm62M+e4YjR
Kh9kjVRURBiGdv2/NcFlLriTdRM5U/a7073sRtJnbibI0obDFL29OgkerMd/j6G+
sVTp0MB+uBi6OlDEpUYdBGu88plF06uaLSe6uB3YoldEG+XuPZp+p0zFTpwhEgGT
+UW6mpMcAtflcqbbNHzPOvqsKfwFz8gu+b3ukicEK4x0IEfzLDR4HgGkgF3RQR7z
6XtK1TGJTfGpzwdqRfqA1BPgjSmrAbJF
-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:37 2024 by rpki-client on console-fra.rpki-client.org