Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/h-QgYwMb__5mWPdtxuTPHuR14Wk.roa
File: h-QgYwMb__5mWPdtxuTPHuR14Wk.roa (raw, json)
Hash identifier: 8qDZH4DsMzS0e9dh+6uZf+y+kMZlH7t+rHj+Fd+NaXA=
Subject key identifier: 87:E4:20:63:03:1B:FF:FE:66:58:F7:6D:C6:E4:CF:1E:E4:75:E1:69
Certificate issuer: /CN=2f3136ed10998580a517d9598abca33d9ba66599
Certificate serial: 0185730C9CBA3CC633C19423CCC758F06E78
Authority key identifier: 2F:31:36:ED:10:99:85:80:A5:17:D9:59:8A:BC:A3:3D:9B:A6:65:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LzE27RCZhYClF9lZiryjPZumZZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/h-QgYwMb__5mWPdtxuTPHuR14Wk.roa
Signing time: Mon 02 Jan 2023 15:14:44 +0000
ROA not before: Mon 02 Jan 2023 15:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14340
IP address blocks: 194.145.16.0/21 maxlen: 24
159.92.0.0/16 maxlen: 24
161.71.0.0/17 maxlen: 24
163.79.128.0/17 maxlen: 24
151.106.128.0/20 maxlen: 24
185.79.140.0/22 maxlen: 24
194.145.0.0/20 maxlen: 24
85.222.128.0/19 maxlen: 24
163.76.128.0/17 maxlen: 24
151.106.216.0/22 maxlen: 24
161.71.128.0/17 maxlen: 24
151.106.220.0/22 maxlen: 24
151.106.144.0/20 maxlen: 24
160.8.0.0/16 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:0c:9c:ba:3c:c6:33:c1:94:23:cc:c7:58:f0:6e:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f3136ed10998580a517d9598abca33d9ba66599
Validity
Not Before: Jan 2 15:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=87e42063031bfffe6658f76dc6e4cf1ee475e169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fb:74:63:aa:b9:47:a0:66:86:d3:99:d0:e1:
a1:a0:d0:8a:79:cb:af:c6:d7:0c:51:4d:a8:66:f0:
c8:15:76:fc:eb:af:99:f1:47:a2:f0:4d:13:16:72:
a2:84:ef:8b:87:b1:a0:04:01:76:33:3c:12:d3:d3:
1a:5a:5b:72:e2:64:a8:76:12:20:23:dd:6e:8b:63:
7f:6e:7a:6b:f8:7f:39:19:1e:d9:99:1c:73:98:38:
23:1c:60:ba:08:67:98:8c:7e:a5:22:b2:be:68:44:
0b:ab:db:0e:1f:2a:61:0e:1e:77:59:ed:eb:ea:22:
75:0b:c7:59:02:9f:7a:92:cb:fa:89:8f:76:7d:3d:
36:80:27:b4:d0:43:dd:8e:d1:1f:1a:71:43:02:49:
3a:84:c6:d9:64:97:27:81:f9:f4:04:7a:ab:cb:fd:
91:7f:88:da:65:47:81:9a:63:b0:45:dd:45:04:1c:
84:33:bd:30:9f:19:3a:2b:a6:cc:f9:25:c8:73:01:
ed:95:a4:1a:07:bf:76:74:ed:0d:43:c4:82:e1:17:
f1:09:4f:36:5f:27:7b:c6:71:b4:9d:ea:35:a8:6a:
70:b4:f5:80:25:35:0b:c5:79:ab:24:df:29:0d:30:
88:f7:50:d4:83:61:7e:ff:b7:69:96:0c:91:a7:9e:
e8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:E4:20:63:03:1B:FF:FE:66:58:F7:6D:C6:E4:CF:1E:E4:75:E1:69
X509v3 Authority Key Identifier:
keyid:2F:31:36:ED:10:99:85:80:A5:17:D9:59:8A:BC:A3:3D:9B:A6:65:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LzE27RCZhYClF9lZiryjPZumZZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/h-QgYwMb__5mWPdtxuTPHuR14Wk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.222.128.0/19
151.106.128.0/19
151.106.216.0/21
159.92.0.0/16
160.8.0.0/16
161.71.0.0/16
163.76.128.0/17
163.79.128.0/17
185.79.140.0/22
194.145.0.0-194.145.23.255
Signature Algorithm: sha256WithRSAEncryption
86:8f:af:7a:c4:0f:23:8c:81:fa:a0:20:09:62:d3:c7:ce:bc:
fc:fe:9f:61:70:5a:d6:f1:7e:24:08:90:a8:3f:91:7a:c0:1b:
ce:47:ea:3b:25:47:85:b1:f3:ec:7a:2a:01:aa:0f:4c:dd:5a:
e5:58:d4:c3:b1:27:33:2a:69:94:9e:71:38:24:16:af:23:5b:
d4:7e:66:94:0a:3e:1c:7f:e6:2f:1f:6a:b0:9a:85:15:33:90:
9b:66:80:1d:54:ab:8c:17:0a:05:1d:06:61:58:9b:dd:2f:ae:
44:ab:82:70:86:ff:37:38:3a:ef:51:a6:35:a8:fb:be:95:9d:
15:63:c0:8a:90:0d:a7:c9:e7:4b:8d:83:5b:47:05:1e:a7:5d:
73:b3:ca:0a:cb:87:2b:d0:6d:ee:d7:81:c1:df:b5:8f:b8:57:
96:c1:b1:05:6a:ee:a7:3d:31:bd:3f:5b:03:91:b6:65:25:be:
bd:63:37:7d:a3:3c:06:83:f6:b2:79:a7:48:40:d2:36:d3:fd:
c1:92:15:1c:cc:97:4e:f7:dc:aa:79:d7:15:47:91:d0:0f:3a:
d1:0e:9b:d7:3a:e4:e2:91:7f:1d:24:91:ef:2d:21:15:b9:22:
f0:fc:52:7c:f0:4e:df:7c:cf:ba:fc:9e:62:30:14:e2:d3:df:
f7:84:ac:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:35 2023 by rpki-client on console-fra.rpki-client.org