Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/2b059a-325d-4385-811f-17e1a2569568/1/j63Od5eyVknmmg5NFoGdl_zERQk.roa
File: j63Od5eyVknmmg5NFoGdl_zERQk.roa (raw, json)
Hash identifier: RVaPimx5MCr4yMJ0spRmppvWB83HwQ/kYPw/3pyvQZg=
Subject key identifier: 8F:AD:CE:77:97:B2:56:49:E6:9A:0E:4D:16:81:9D:97:FC:C4:45:09
Certificate issuer: /CN=c4ff935057c3bdbadbdf49f343562c5e30016044
Certificate serial: 018721E23984495847C693715C111E67AA3B
Authority key identifier: C4:FF:93:50:57:C3:BD:BA:DB:DF:49:F3:43:56:2C:5E:30:01:60:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xP-TUFfDvbrb30nzQ1YsXjABYEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/2b059a-325d-4385-811f-17e1a2569568/1/j63Od5eyVknmmg5NFoGdl_zERQk.roa
Signing time: Mon 27 Mar 2023 07:04:46 +0000
ROA not before: Mon 27 Mar 2023 07:04:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41872
IP address blocks: 185.161.20.0/22 maxlen: 22
94.198.248.0/21 maxlen: 22
94.100.144.0/20 maxlen: 20
37.209.176.0/20 maxlen: 20
37.110.200.0/21 maxlen: 24
212.35.0.0/19 maxlen: 19
91.190.0.0/19 maxlen: 19
81.92.96.0/20 maxlen: 20
2a02:6500::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:21:e2:39:84:49:58:47:c6:93:71:5c:11:1e:67:aa:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ff935057c3bdbadbdf49f343562c5e30016044
Validity
Not Before: Mar 27 07:04:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8fadce7797b25649e69a0e4d16819d97fcc44509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a9:6e:8d:9d:49:24:2f:e7:41:f9:a4:c8:19:
43:b9:01:45:41:4f:b2:79:b6:b6:47:29:da:e3:3c:
79:81:4a:30:cf:56:99:51:44:3f:4f:96:57:40:f5:
3e:77:d4:d5:10:e2:e8:ba:eb:d6:ca:e7:fc:2b:02:
12:9b:3d:21:61:6f:56:82:bf:fe:72:f1:ca:3a:70:
8c:a5:78:08:7b:4d:ed:da:bc:da:d2:cc:33:cb:9c:
c1:9b:48:83:6a:61:18:42:9c:5b:53:31:74:f4:e3:
a3:14:43:e9:4d:75:fc:68:9a:d8:eb:fd:91:89:2a:
80:8a:71:76:02:f1:a5:56:45:01:3c:7d:5e:69:84:
5b:a2:8a:d0:62:a2:94:12:52:2d:68:8f:d8:4c:2f:
56:43:a2:85:ee:99:d4:b1:b7:6c:ee:13:1d:b2:39:
7c:91:99:99:08:75:a2:f6:dc:11:9d:0a:90:0b:89:
c4:2e:21:3f:43:92:b4:f2:1f:50:53:bc:ec:44:b5:
0e:dd:e3:73:02:3e:ef:bd:52:44:ce:58:ac:c5:29:
93:fc:45:c9:30:a5:47:f2:5b:e6:31:1f:b1:a4:99:
9e:4c:c0:0d:18:97:d8:91:8f:1f:18:7e:20:d8:ef:
13:1a:ee:d4:1a:fb:d6:26:b4:7c:f4:cf:49:ee:af:
d4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:AD:CE:77:97:B2:56:49:E6:9A:0E:4D:16:81:9D:97:FC:C4:45:09
X509v3 Authority Key Identifier:
keyid:C4:FF:93:50:57:C3:BD:BA:DB:DF:49:F3:43:56:2C:5E:30:01:60:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xP-TUFfDvbrb30nzQ1YsXjABYEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2b059a-325d-4385-811f-17e1a2569568/1/j63Od5eyVknmmg5NFoGdl_zERQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2b059a-325d-4385-811f-17e1a2569568/1/xP-TUFfDvbrb30nzQ1YsXjABYEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.110.200.0/21
37.209.176.0/20
81.92.96.0/20
91.190.0.0/19
94.100.144.0/20
94.198.248.0/21
185.161.20.0/22
212.35.0.0/19
IPv6:
2a02:6500::/32
Signature Algorithm: sha256WithRSAEncryption
00:29:96:54:2b:68:15:f7:49:ff:3d:bc:fe:50:d1:40:c5:3b:
2f:cf:8e:50:1a:c4:77:27:f0:b1:39:61:d9:83:59:65:4c:06:
f6:65:d7:46:79:1b:e3:04:9b:1e:dc:b6:e6:2f:5c:3f:26:f0:
e6:38:3f:ae:a5:37:fa:a1:c4:7b:09:da:44:e6:0d:6c:10:22:
aa:fb:66:a9:d4:a1:31:c0:85:6f:26:0e:b3:cf:22:e3:c6:43:
17:1b:00:12:b6:ac:e7:3a:8b:bf:19:60:88:fb:5e:4c:47:e3:
5a:c2:4a:83:30:67:a3:9f:9c:ed:30:92:03:08:9e:95:3a:2f:
45:0c:24:e1:ff:64:33:06:94:6e:5b:76:bb:16:ef:0d:23:76:
e6:d9:4e:b7:b2:46:e8:55:40:cd:33:4f:59:10:ca:1e:fe:2e:
60:c6:5a:d9:ef:dc:ff:dd:83:4f:17:d7:97:bd:13:8e:d1:62:
b8:0c:0d:0d:3c:43:3d:00:44:71:6d:6a:fd:56:58:2a:a2:0b:
41:f8:d1:ef:d4:d6:9f:03:72:69:e7:9c:b3:b3:69:9c:ea:f9:
a0:ab:e1:b1:ad:0b:c2:08:0f:fa:90:5a:b8:01:bb:0f:19:e5:
6b:88:7e:a1:fe:fd:24:06:4f:c8:6e:ad:85:f9:c6:c3:78:7c:
8f:47:a9:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:31:17 2024 by rpki-client on console-fra.rpki-client.org