Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/33fvcufUnGKtgb4EDJTS_Rr0160.roa
File: 33fvcufUnGKtgb4EDJTS_Rr0160.roa (raw, json)
Hash identifier: XSUK2v9wX0TX26ZQfWdzOnb7r9+UUwBWrQNA4bqwSC8=
Subject key identifier: DF:77:EF:72:E7:D4:9C:62:AD:81:BE:04:0C:94:D2:FD:1A:F4:D7:AD
Certificate issuer: /CN=fe2e22cc15859ed4a0784bfd08584b3c8fb29f9a
Certificate serial: 01856F8256529C4D273CEB5581EA3202DBE5
Authority key identifier: FE:2E:22:CC:15:85:9E:D4:A0:78:4B:FD:08:58:4B:3C:8F:B2:9F:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_i4izBWFntSgeEv9CFhLPI-yn5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/33fvcufUnGKtgb4EDJTS_Rr0160.roa
Signing time: Sun 01 Jan 2023 22:44:50 +0000
ROA not before: Sun 01 Jan 2023 22:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1547
IP address blocks: 37.26.128.0/20 maxlen: 20
95.153.64.0/19 maxlen: 19
185.10.20.0/22 maxlen: 22
77.235.96.0/20 maxlen: 20
217.19.211.0/24 maxlen: 24
217.19.212.0/24 maxlen: 24
217.19.209.0/24 maxlen: 24
217.19.210.0/24 maxlen: 24
217.19.208.0/24 maxlen: 24
217.19.213.0/24 maxlen: 24
217.19.219.0/24 maxlen: 24
217.19.218.0/24 maxlen: 24
217.19.216.0/24 maxlen: 24
217.19.217.0/24 maxlen: 24
217.19.214.0/24 maxlen: 24
217.19.215.0/24 maxlen: 24
217.19.223.0/24 maxlen: 24
77.235.112.0/20 maxlen: 20
217.19.221.0/24 maxlen: 24
217.19.222.0/24 maxlen: 24
217.19.220.0/24 maxlen: 24
95.153.96.0/19 maxlen: 19
80.94.246.0/24 maxlen: 24
80.94.244.0/24 maxlen: 24
80.94.245.0/24 maxlen: 24
80.94.243.0/24 maxlen: 24
80.94.241.0/24 maxlen: 24
80.94.242.0/24 maxlen: 24
80.94.247.0/24 maxlen: 24
80.94.253.0/24 maxlen: 24
80.94.251.0/24 maxlen: 24
80.94.252.0/24 maxlen: 24
80.94.249.0/24 maxlen: 24
80.94.250.0/24 maxlen: 24
80.94.248.0/24 maxlen: 24
80.94.255.0/24 maxlen: 24
31.31.0.0/19 maxlen: 19
80.94.254.0/24 maxlen: 24
62.221.96.0/19 maxlen: 19
80.94.240.0/24 maxlen: 24
62.221.64.0/19 maxlen: 19
2a03:f680::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:82:56:52:9c:4d:27:3c:eb:55:81:ea:32:02:db:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe2e22cc15859ed4a0784bfd08584b3c8fb29f9a
Validity
Not Before: Jan 1 22:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=df77ef72e7d49c62ad81be040c94d2fd1af4d7ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:14:56:ff:aa:05:00:e4:94:56:9e:ea:14:66:
a1:4b:29:84:af:cb:21:7b:80:f9:54:a1:fd:b9:d0:
55:b0:c8:67:0e:1c:b4:14:0a:45:25:3c:5a:27:9f:
bd:c5:c0:2e:78:73:41:2a:f9:32:f1:f8:ae:70:7f:
87:71:d5:ad:b6:bf:87:77:58:c5:3b:54:51:48:38:
11:eb:00:00:1b:35:f5:88:1e:9a:07:19:2b:0f:2b:
2b:ff:45:31:87:d2:37:c0:65:0a:28:fd:40:9d:4e:
f8:64:e1:31:74:fd:9b:a1:85:45:c9:c8:dd:2b:de:
06:dc:b3:2a:9e:e3:ae:54:b9:76:dd:d9:b0:61:45:
26:cd:e2:fe:7c:a4:ee:ae:83:1d:04:e1:21:9a:f2:
1f:0c:60:41:2e:71:de:f2:23:ec:7d:9c:22:ed:e1:
91:87:57:11:fa:2d:54:00:f9:b6:9c:d9:da:41:fe:
6e:6a:d7:be:ae:0c:29:96:42:04:97:a3:14:6d:3a:
d6:8c:09:4f:8a:db:c6:e2:5c:14:70:b9:e8:e9:5f:
4b:18:97:e2:62:77:95:9d:c2:9d:b4:64:b1:b7:0e:
13:a4:c8:1a:53:b3:eb:df:ff:53:f0:42:fc:61:f7:
7b:0c:38:17:f7:6a:a5:63:fa:b3:69:ea:15:b7:5d:
02:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:77:EF:72:E7:D4:9C:62:AD:81:BE:04:0C:94:D2:FD:1A:F4:D7:AD
X509v3 Authority Key Identifier:
keyid:FE:2E:22:CC:15:85:9E:D4:A0:78:4B:FD:08:58:4B:3C:8F:B2:9F:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_i4izBWFntSgeEv9CFhLPI-yn5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/33fvcufUnGKtgb4EDJTS_Rr0160.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.31.0.0/19
37.26.128.0/20
62.221.64.0/18
77.235.96.0/19
80.94.240.0/20
95.153.64.0/18
185.10.20.0/22
217.19.208.0/20
IPv6:
2a03:f680::/32
Signature Algorithm: sha256WithRSAEncryption
89:70:21:25:8c:73:09:e6:f2:57:09:06:2c:1a:09:69:92:da:
7f:63:e1:fd:58:47:db:10:15:ec:52:59:1a:c1:b4:f1:4d:c1:
60:6e:b7:71:a1:9e:d4:6b:75:68:eb:f5:45:6d:17:44:8e:b6:
e0:7b:f3:f7:c2:a8:53:a6:2a:5e:7f:d9:61:2c:80:b8:1b:64:
b2:b6:a7:fd:42:73:21:6d:6d:c2:a2:0d:69:21:86:f3:01:80:
b6:89:fc:df:dc:24:de:9b:e8:9b:b7:a4:a5:11:ab:3f:21:ea:
f7:c0:a8:55:5e:ff:3f:b5:5b:f7:18:f3:19:b4:4c:fc:99:3a:
c1:d0:56:0f:b9:ec:55:60:01:9f:75:2f:5f:c6:a6:2a:0d:49:
fa:5a:e5:cb:ca:97:e9:23:f8:01:b9:41:a2:72:03:f6:a7:ac:
38:11:77:f4:f4:c3:b9:93:f9:e6:c5:44:fd:76:67:32:f7:8f:
51:26:6c:51:8c:6b:bb:ee:65:16:53:0d:dd:17:c6:7e:07:c3:
06:f2:81:b2:8d:95:f1:b5:02:9d:d6:2e:f1:81:49:82:26:de:
86:97:fd:3e:ff:a6:db:33:8a:0f:74:ed:c6:92:94:12:60:1e:
70:df:a4:67:8f:e0:66:43:14:69:db:28:71:02:74:ec:c8:56:
15:bc:a5:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 22 08:26:57 2023 by rpki-client on console-ams.rpki-client.org