Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/b3a111-08a0-475d-b691-bdc90a15f7f3/1/M3JoZ8wdplRuhEg1meTXTFtNFcs.roa
File: M3JoZ8wdplRuhEg1meTXTFtNFcs.roa (raw, json)
Hash identifier: Z9dkPEYLL1SHqCHjz0JK2lUOs2Jl3acxBQOVqWdPlac=
Subject key identifier: 33:72:68:67:CC:1D:A6:54:6E:84:48:35:99:E4:D7:4C:5B:4D:15:CB
Certificate issuer: /CN=f992d817ec34b4731d8d36c7b094d2b045d0bc7c
Certificate serial: 01856BC0F9346F103B4505A52FA36545446A
Authority key identifier: F9:92:D8:17:EC:34:B4:73:1D:8D:36:C7:B0:94:D2:B0:45:D0:BC:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ZLYF-w0tHMdjTbHsJTSsEXQvHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/b3a111-08a0-475d-b691-bdc90a15f7f3/1/M3JoZ8wdplRuhEg1meTXTFtNFcs.roa
Signing time: Sun 01 Jan 2023 05:14:46 +0000
ROA not before: Sun 01 Jan 2023 05:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51185
IP address blocks: 94.124.64.0/21 maxlen: 21
94.124.67.0/24 maxlen: 24
94.124.65.0/24 maxlen: 24
185.45.208.0/24 maxlen: 24
185.45.210.0/24 maxlen: 24
178.248.52.0/24 maxlen: 24
178.248.53.0/24 maxlen: 24
178.248.54.0/24 maxlen: 24
185.187.159.0/24 maxlen: 24
178.248.48.0/24 maxlen: 24
178.248.49.0/24 maxlen: 24
178.248.50.0/24 maxlen: 24
178.248.51.0/24 maxlen: 24
2a02:2891:13::/48 maxlen: 48
2a02:2891:4::/48 maxlen: 48
2a02:2890::/48 maxlen: 48
2a02:2891:29::/48 maxlen: 48
2a02:2891:ff::/48 maxlen: 48
2a02:2891:10::/48 maxlen: 48
2a02:2890:ffff::/48 maxlen: 48
2a02:2891:15::/48 maxlen: 48
2a02:2891:1::/48 maxlen: 48
2a02:2892:36::/48 maxlen: 48
2a02:2891:12::/48 maxlen: 48
2a02:2892:40::/48 maxlen: 48
2a02:2891::/48 maxlen: 48
2a02:2892:32::/48 maxlen: 48
2a02:2891:16::/48 maxlen: 48
2a02:2891:11::/48 maxlen: 48
2a02:2891:2::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:c0:f9:34:6f:10:3b:45:05:a5:2f:a3:65:45:44:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f992d817ec34b4731d8d36c7b094d2b045d0bc7c
Validity
Not Before: Jan 1 05:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=33726867cc1da6546e84483599e4d74c5b4d15cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:65:b8:1f:37:8f:61:06:03:74:b5:79:44:3d:
ab:8c:19:6a:2d:a4:fa:52:41:98:84:0d:58:1c:55:
ae:a5:6f:db:1c:54:90:36:d8:fd:34:f4:ac:a7:4e:
ee:48:20:93:aa:b6:07:51:e4:51:ca:7c:34:4a:5f:
71:ee:74:39:52:a3:ea:f8:31:e9:7b:b5:b7:26:39:
89:58:21:e8:56:5a:23:62:e1:3c:53:33:8f:89:90:
54:1a:f0:c2:2c:d6:f7:6b:eb:df:10:b0:6e:d4:84:
9d:39:e6:a6:56:89:1d:6b:14:b3:42:7e:ef:55:a8:
07:eb:97:55:2e:d5:e6:80:13:46:65:4d:3a:01:86:
52:e0:8a:ea:02:d8:95:1e:5a:ab:d2:52:63:04:f4:
c7:a5:c9:df:9c:25:75:02:88:ea:ee:e4:70:8a:f0:
68:5a:41:86:6a:4b:ce:46:38:e1:35:a6:db:52:14:
67:44:47:db:ff:65:c8:17:90:66:4a:20:90:54:c3:
2a:62:94:19:4e:f9:f8:eb:0a:8a:31:16:a2:ed:40:
cf:5b:6e:13:a0:35:7d:57:78:fc:9b:21:cc:53:bd:
a6:ae:21:a7:de:7f:20:c0:eb:7d:84:94:4b:ac:46:
a6:98:09:9a:f1:9c:19:99:2a:c9:0e:a2:20:ca:7d:
11:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:72:68:67:CC:1D:A6:54:6E:84:48:35:99:E4:D7:4C:5B:4D:15:CB
X509v3 Authority Key Identifier:
keyid:F9:92:D8:17:EC:34:B4:73:1D:8D:36:C7:B0:94:D2:B0:45:D0:BC:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ZLYF-w0tHMdjTbHsJTSsEXQvHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/b3a111-08a0-475d-b691-bdc90a15f7f3/1/M3JoZ8wdplRuhEg1meTXTFtNFcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/b3a111-08a0-475d-b691-bdc90a15f7f3/1/1-ZLYF-w0tHMdjTbHsJTSsEXQvHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.124.64.0/21
178.248.48.0-178.248.54.255
185.45.208.0/24
185.45.210.0/24
185.187.159.0/24
IPv6:
2a02:2890::/48
2a02:2890:ffff::-2a02:2891:2:ffff:ffff:ffff:ffff:ffff
2a02:2891:4::/48
2a02:2891:10::/46
2a02:2891:15::-2a02:2891:16:ffff:ffff:ffff:ffff:ffff
2a02:2891:29::/48
2a02:2891:ff::/48
2a02:2892:32::/48
2a02:2892:36::/48
2a02:2892:40::/48
Signature Algorithm: sha256WithRSAEncryption
7d:d6:f1:6b:c1:ac:2d:cd:ab:03:75:a5:fc:60:e1:30:9b:92:
03:45:50:a8:99:f9:cf:40:1d:3a:3a:9a:79:95:fb:85:7c:ef:
83:fe:63:ea:08:a6:70:b5:ef:21:7f:39:1e:70:c5:31:9f:39:
92:41:8d:f0:78:fd:6f:7d:0a:f8:c4:6c:60:71:4f:d7:e8:05:
8f:bf:c1:eb:9f:db:1a:2a:16:12:01:13:33:ca:4e:ba:7e:0b:
15:e5:f0:9e:94:ee:b7:9d:33:a9:a3:c1:bd:c8:4f:b2:a1:2f:
5e:1d:47:e3:76:80:66:dc:08:41:83:06:f3:3e:28:f1:c9:b2:
3f:3a:f4:29:d6:fb:e3:9d:f5:58:41:45:d6:c9:66:f4:dd:9a:
b5:aa:52:8f:2f:bd:99:01:03:b2:88:0f:52:24:17:55:ec:b1:
67:7d:e5:a6:1f:cd:d5:d6:a2:b2:68:5a:f7:bc:f9:c6:b9:ff:
90:0b:79:41:b2:5c:c2:49:38:36:91:ae:e4:d5:69:a5:29:91:
37:d1:96:5e:25:7b:f4:56:d6:e6:11:f0:f4:45:4b:57:d0:57:
c5:2b:ee:d7:6c:44:d2:a1:48:b9:c4:c9:4b:12:2c:7a:97:40:
9e:2e:4e:3c:07:8f:98:51:36:77:6d:fb:17:f2:34:c0:d4:bd:
0d:a2:fc:03
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:37 2023 by rpki-client on console-fra.rpki-client.org