Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/b3a111-08a0-475d-b691-bdc90a15f7f3/1/4JqwIMDKrL_3uLXgiM8TSkID8Xw.roa
File: 4JqwIMDKrL_3uLXgiM8TSkID8Xw.roa (raw, json)
Hash identifier: gSijdtL9rhgI7+eunUAyOT8n2UDV6j7AohBhGgg7QX8=
Subject key identifier: E0:9A:B0:20:C0:CA:AC:BF:F7:B8:B5:E0:88:CF:13:4A:42:03:F1:7C
Certificate issuer: /CN=f992d817ec34b4731d8d36c7b094d2b045d0bc7c
Certificate serial: 0187E82E29A64D75F7059490F30CE48AE8C1
Authority key identifier: F9:92:D8:17:EC:34:B4:73:1D:8D:36:C7:B0:94:D2:B0:45:D0:BC:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ZLYF-w0tHMdjTbHsJTSsEXQvHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/b3a111-08a0-475d-b691-bdc90a15f7f3/1/4JqwIMDKrL_3uLXgiM8TSkID8Xw.roa
Signing time: Thu 04 May 2023 19:12:32 +0000
ROA not before: Thu 04 May 2023 19:12:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51185
IP address blocks: 94.124.64.0/21 maxlen: 21
94.124.64.0/24 maxlen: 24
94.124.66.0/24 maxlen: 24
94.124.67.0/24 maxlen: 24
94.124.68.0/24 maxlen: 24
94.124.69.0/24 maxlen: 24
94.124.70.0/24 maxlen: 24
94.124.71.0/24 maxlen: 24
94.124.65.0/24 maxlen: 24
185.45.208.0/24 maxlen: 24
185.45.209.0/24 maxlen: 24
185.45.210.0/24 maxlen: 24
185.45.211.0/24 maxlen: 24
178.248.52.0/24 maxlen: 24
178.248.53.0/24 maxlen: 24
178.248.54.0/24 maxlen: 24
178.248.55.0/24 maxlen: 24
185.187.156.0/24 maxlen: 24
185.187.157.0/24 maxlen: 24
185.187.158.0/24 maxlen: 24
185.187.159.0/24 maxlen: 24
178.248.48.0/24 maxlen: 24
178.248.49.0/24 maxlen: 24
178.248.50.0/24 maxlen: 24
178.248.51.0/24 maxlen: 24
2a02:2891:13::/48 maxlen: 48
2a02:2891:4::/48 maxlen: 48
2a02:2890::/48 maxlen: 48
2a02:2891:29::/48 maxlen: 48
2a02:2891:10::/48 maxlen: 48
2a02:2890:ffff::/48 maxlen: 48
2a02:2891:15::/48 maxlen: 48
2a02:2891:1::/48 maxlen: 48
2a02:2892:36::/48 maxlen: 48
2a02:2891:32::/48 maxlen: 48
2a02:2891:12::/48 maxlen: 48
2a02:2892:40::/48 maxlen: 48
2a02:2891:40::/48 maxlen: 48
2a02:2891::/48 maxlen: 48
2a02:2892:32::/48 maxlen: 48
2a02:2891:16::/48 maxlen: 48
2a02:2891:11::/48 maxlen: 48
2a02:2891:2::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e8:2e:29:a6:4d:75:f7:05:94:90:f3:0c:e4:8a:e8:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f992d817ec34b4731d8d36c7b094d2b045d0bc7c
Validity
Not Before: May 4 19:12:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e09ab020c0caacbff7b8b5e088cf134a4203f17c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b9:71:fa:5d:40:dd:9c:d8:a8:39:26:e5:3d:
cf:15:60:5a:ac:44:0e:45:fa:54:4f:7f:b3:c9:6d:
33:7e:1b:b0:87:17:74:4a:5a:16:c9:0d:8c:7d:86:
ea:a9:d0:fa:9f:89:14:ea:d0:fc:f7:07:c6:92:f7:
77:16:fa:5c:68:c7:84:5c:76:f7:61:57:69:fd:11:
9d:4b:96:1e:ba:4a:61:c6:a9:49:db:ae:7e:48:07:
80:ca:6a:f0:30:fe:8b:41:30:a3:b7:44:eb:f5:eb:
e3:4a:ee:46:3f:8a:23:34:f2:2d:79:0e:1a:39:be:
39:fd:ca:26:1b:c4:ce:a0:a2:b4:74:6e:d9:53:4b:
58:0d:57:e8:c4:dd:c6:0c:d6:75:f1:72:68:ea:2d:
f9:e4:3c:6d:82:68:8d:4d:9b:91:74:6f:47:3f:80:
b5:0b:bb:9f:0f:6c:93:d8:94:44:23:78:3b:d0:d7:
88:e2:d6:07:36:23:8a:41:f2:9c:97:d1:4f:1b:98:
a9:a6:8e:57:36:22:8f:51:46:98:1e:45:30:2f:68:
8f:10:7e:08:75:3e:db:0f:79:fd:e7:67:f9:5d:25:
7a:f9:ff:c0:13:88:e5:27:13:81:bf:58:be:ca:bd:
41:ee:d8:0a:de:3a:c9:21:43:8b:0e:bb:74:40:e8:
ed:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:9A:B0:20:C0:CA:AC:BF:F7:B8:B5:E0:88:CF:13:4A:42:03:F1:7C
X509v3 Authority Key Identifier:
keyid:F9:92:D8:17:EC:34:B4:73:1D:8D:36:C7:B0:94:D2:B0:45:D0:BC:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ZLYF-w0tHMdjTbHsJTSsEXQvHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/b3a111-08a0-475d-b691-bdc90a15f7f3/1/4JqwIMDKrL_3uLXgiM8TSkID8Xw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/b3a111-08a0-475d-b691-bdc90a15f7f3/1/1-ZLYF-w0tHMdjTbHsJTSsEXQvHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.124.64.0/21
178.248.48.0/21
185.45.208.0/22
185.187.156.0/22
IPv6:
2a02:2890::/48
2a02:2890:ffff::-2a02:2891:2:ffff:ffff:ffff:ffff:ffff
2a02:2891:4::/48
2a02:2891:10::/46
2a02:2891:15::-2a02:2891:16:ffff:ffff:ffff:ffff:ffff
2a02:2891:29::/48
2a02:2891:32::/48
2a02:2891:40::/48
2a02:2892:32::/48
2a02:2892:36::/48
2a02:2892:40::/48
Signature Algorithm: sha256WithRSAEncryption
72:bd:5d:83:c0:09:32:40:d1:76:5a:4a:e3:1b:c2:17:bb:72:
e4:92:a7:7a:de:5d:1c:cc:a9:fc:1b:f8:fe:2c:e3:dd:fe:27:
72:f5:30:3e:7e:06:8c:fd:63:f0:9c:a4:36:30:87:cd:7e:25:
40:c9:9f:69:1e:a2:86:e0:87:20:66:ae:b1:dd:8e:f8:6d:4b:
46:bb:ca:7f:65:c7:ec:0a:3a:c3:57:16:f3:83:b1:98:b6:f4:
90:55:9e:ef:ab:2d:17:90:96:db:fe:94:06:47:5c:bd:00:a1:
71:1b:7c:83:7a:28:2a:cc:ec:07:78:a4:94:47:83:e7:b3:26:
de:51:d1:8b:63:9f:36:d0:a2:27:af:db:74:f6:16:02:44:28:
19:9c:83:a7:15:3a:70:99:dd:6e:f3:4c:bf:0d:bc:9d:9a:a3:
da:bf:0d:7a:4b:42:dc:ab:30:16:86:3f:01:93:e6:fc:10:d4:
29:72:1b:f6:5c:06:29:d5:91:3a:c4:e0:cf:27:38:0e:75:85:
ff:eb:f0:ef:71:5c:01:bc:3d:50:df:7a:45:f5:9d:d4:17:c7:
3f:0f:b9:66:e0:d2:98:25:ce:13:fe:42:bd:47:06:57:6c:e3:
2d:1b:9a:20:0c:f7:b9:2a:7f:46:2f:ff:8d:33:33:98:5a:18:
1a:92:f6:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:37 2023 by rpki-client on console-fra.rpki-client.org