Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/CX3iYDjo1YOWTbL55pL5RbpVwkQ.roa
File: CX3iYDjo1YOWTbL55pL5RbpVwkQ.roa (raw, json)
Hash identifier: XMdVLgxIcZSuwpDJ3fK3t6I/zQ3PrktaINzGmYlkjHo=
Subject key identifier: 09:7D:E2:60:38:E8:D5:83:96:4D:B2:F9:E6:92:F9:45:BA:55:C2:44
Certificate issuer: /CN=2f5cab8a09a9fde23c9635f8e164aef09e17948c
Certificate serial: 018964C05718333E42B220F3928DE198F103
Authority key identifier: 2F:5C:AB:8A:09:A9:FD:E2:3C:96:35:F8:E1:64:AE:F0:9E:17:94:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1yrigmp_eI8ljX44WSu8J4XlIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/CX3iYDjo1YOWTbL55pL5RbpVwkQ.roa
Signing time: Mon 17 Jul 2023 16:47:54 +0000
ROA not before: Mon 17 Jul 2023 16:47:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 193.201.127.0/24 maxlen: 24
193.160.218.0/24 maxlen: 24
193.160.217.0/24 maxlen: 24
193.160.216.0/24 maxlen: 24
45.144.0.0/24 maxlen: 24
45.150.112.0/24 maxlen: 24
185.128.41.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:c0:57:18:33:3e:42:b2:20:f3:92:8d:e1:98:f1:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f5cab8a09a9fde23c9635f8e164aef09e17948c
Validity
Not Before: Jul 17 16:47:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=097de26038e8d583964db2f9e692f945ba55c244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:18:60:d9:34:6a:60:f0:b3:4e:b2:3e:5b:5c:
30:6a:98:34:0d:2c:1d:52:cc:4d:11:58:dc:d5:af:
59:da:ec:f5:1b:ae:bc:29:34:dd:61:52:d6:18:46:
0d:84:92:8a:f8:a8:03:70:bc:ba:a6:e7:40:4a:25:
ae:ba:46:8d:eb:96:08:f2:e1:fa:db:3e:e1:5a:24:
b3:8c:14:23:8d:60:f0:1e:31:0b:88:fa:3b:c5:b6:
aa:e5:d7:66:87:85:50:8a:8c:60:ff:ad:36:36:53:
c2:7d:71:5a:73:89:0a:31:e9:f1:5c:d9:0c:71:5b:
d2:c1:3f:31:76:81:cb:a1:79:19:aa:17:99:28:5d:
f7:a7:84:6f:b9:b6:22:43:2a:1e:e1:28:f7:61:41:
e9:cb:91:69:29:94:4b:3c:d3:4a:fd:91:fd:c8:85:
6f:ca:23:74:e3:b7:8b:07:19:66:cf:b4:07:3d:e1:
95:b1:c2:7f:a1:17:a4:30:b2:dc:ea:19:64:85:fa:
7c:0e:a4:f4:28:e4:51:20:7c:de:f7:a4:47:67:87:
79:5e:4b:2a:14:89:0e:40:ec:cd:11:9e:20:5e:ff:
70:22:4e:8e:83:78:40:09:5d:b7:52:64:88:2f:9f:
90:69:82:ca:ff:96:4c:1d:41:85:de:fa:71:fb:c9:
92:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:7D:E2:60:38:E8:D5:83:96:4D:B2:F9:E6:92:F9:45:BA:55:C2:44
X509v3 Authority Key Identifier:
keyid:2F:5C:AB:8A:09:A9:FD:E2:3C:96:35:F8:E1:64:AE:F0:9E:17:94:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1yrigmp_eI8ljX44WSu8J4XlIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/CX3iYDjo1YOWTbL55pL5RbpVwkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/L1yrigmp_eI8ljX44WSu8J4XlIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.0.0/24
45.150.112.0/24
185.128.41.0/24
193.160.216.0-193.160.218.255
193.201.127.0/24
Signature Algorithm: sha256WithRSAEncryption
18:34:20:f0:58:29:ac:9a:0d:cd:be:36:25:1b:6a:e9:8f:fe:
af:5f:af:ae:5b:4a:a3:ce:06:2a:12:0e:5f:22:47:9e:10:ef:
ff:df:6e:e3:1f:6f:6c:4d:db:7e:81:bb:8e:19:1b:74:1f:a7:
1c:04:20:d9:31:c8:3c:31:28:79:a9:a0:84:5f:8e:31:df:76:
00:3d:b3:6f:a3:e4:4c:03:c2:f8:09:bf:a4:a6:ce:d6:17:ed:
09:31:a4:4c:c5:9d:fd:b1:9d:ff:0e:0d:90:8a:57:57:87:5a:
0a:96:c8:79:09:7c:f8:f1:c9:fd:f0:21:08:68:4c:56:ee:a8:
76:b7:56:30:c3:c2:54:01:e7:81:38:4f:cb:67:ac:18:dd:d8:
d4:6d:45:df:e8:34:63:3e:90:30:a5:a9:24:a6:3c:56:e7:b7:
aa:61:fa:de:5a:ed:06:b2:b1:64:cc:ff:c8:9f:ec:78:67:d7:
ee:ae:28:01:c8:01:c9:af:dc:e8:25:73:33:17:4b:c3:eb:03:
9e:50:c5:06:e9:25:a4:c3:1d:29:1a:86:4b:ad:b3:df:5f:af:
70:7b:f2:35:cf:4b:e2:4b:1a:96:0f:ea:4a:15:c8:47:5c:10:
b3:37:9e:d5:46:8b:90:8a:5a:94:50:f0:82:1c:de:68:9a:fd:
2a:e6:6d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:54 2023 by rpki-client on console-fra.rpki-client.org