Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_CLE3Ihln5XK5P4Sl9jxPZLa-2w.roa
File: _CLE3Ihln5XK5P4Sl9jxPZLa-2w.roa (raw, json)
Hash identifier: MmRfDl+lKmJjAkSR8t30NnWS2KFsPmZ0oixeaZqCgwI=
Subject key identifier: FC:22:C4:DC:88:65:9F:95:CA:E4:FE:12:97:D8:F1:3D:92:DA:FB:6C
Certificate issuer: /CN=fe2e22cc15859ed4a0784bfd08584b3c8fb29f9a
Certificate serial: 018AD10EACC8BFBAC8E937F5F829C8D31AF1
Authority key identifier: FE:2E:22:CC:15:85:9E:D4:A0:78:4B:FD:08:58:4B:3C:8F:B2:9F:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_i4izBWFntSgeEv9CFhLPI-yn5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_CLE3Ihln5XK5P4Sl9jxPZLa-2w.roa
Signing time: Tue 26 Sep 2023 10:35:14 +0000
ROA not before: Tue 26 Sep 2023 10:35:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1547
IP address blocks: 37.26.128.0/20 maxlen: 20
185.10.20.0/22 maxlen: 22
77.235.96.0/19 maxlen: 19
77.235.96.0/20 maxlen: 20
217.19.211.0/24 maxlen: 24
217.19.212.0/24 maxlen: 24
217.19.209.0/24 maxlen: 24
217.19.210.0/24 maxlen: 24
217.19.208.0/24 maxlen: 24
217.19.208.0/20 maxlen: 20
217.19.213.0/24 maxlen: 24
217.19.218.0/24 maxlen: 24
217.19.216.0/24 maxlen: 24
217.19.217.0/24 maxlen: 24
217.19.214.0/24 maxlen: 24
217.19.215.0/24 maxlen: 24
217.19.219.0/24 maxlen: 24
217.19.223.0/24 maxlen: 24
217.19.221.0/24 maxlen: 24
77.235.112.0/20 maxlen: 20
217.19.222.0/24 maxlen: 24
217.19.220.0/24 maxlen: 24
95.153.64.0/18 maxlen: 18
95.153.96.0/19 maxlen: 19
62.221.64.0/18 maxlen: 18
62.221.96.0/19 maxlen: 19
62.221.64.0/19 maxlen: 19
95.153.64.0/19 maxlen: 19
80.94.246.0/24 maxlen: 24
80.94.244.0/24 maxlen: 24
80.94.245.0/24 maxlen: 24
80.94.240.0/20 maxlen: 20
80.94.243.0/24 maxlen: 24
80.94.241.0/24 maxlen: 24
80.94.242.0/24 maxlen: 24
80.94.247.0/24 maxlen: 24
80.94.253.0/24 maxlen: 24
80.94.251.0/24 maxlen: 24
80.94.252.0/24 maxlen: 24
80.94.249.0/24 maxlen: 24
80.94.250.0/24 maxlen: 24
80.94.248.0/24 maxlen: 24
80.94.255.0/24 maxlen: 24
31.31.0.0/19 maxlen: 19
31.31.0.0/20 maxlen: 20
80.94.254.0/24 maxlen: 24
31.31.16.0/20 maxlen: 20
80.94.240.0/24 maxlen: 24
2a03:f680::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d1:0e:ac:c8:bf:ba:c8:e9:37:f5:f8:29:c8:d3:1a:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe2e22cc15859ed4a0784bfd08584b3c8fb29f9a
Validity
Not Before: Sep 26 10:35:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc22c4dc88659f95cae4fe1297d8f13d92dafb6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:6f:d2:c1:f2:96:c3:32:d7:fd:74:da:01:4d:
4f:e3:4a:75:fd:bc:d2:26:e7:42:16:85:bc:0f:4d:
aa:d2:4e:a8:82:1e:5a:42:7a:43:ab:66:a2:c4:dd:
ea:f9:69:ba:69:39:c6:90:81:eb:ee:f0:23:11:19:
e7:c8:83:a7:7d:ae:f9:9c:ec:74:3e:58:03:5f:29:
ec:f3:a9:20:1d:55:97:af:88:6a:ae:89:5f:07:a9:
6f:b4:96:b3:6a:33:48:ae:fa:6b:b2:36:3e:60:ee:
cb:63:1a:d6:be:7d:04:b8:04:9e:29:15:a7:aa:86:
68:97:ea:cc:7c:63:35:48:e8:cd:45:15:c7:47:8b:
ef:17:d9:0a:b0:c4:1c:c8:44:12:c5:f7:85:c7:d5:
82:cf:72:39:ee:6e:03:5c:11:b3:10:4b:d9:b4:c0:
44:cd:81:b4:00:82:c5:98:9d:24:f0:45:23:d3:5e:
dc:e4:1e:0b:af:69:28:40:cd:9d:6d:65:a0:26:8c:
d3:e8:57:5b:74:c9:f7:ef:c3:2f:58:f6:9a:b9:08:
3f:e2:de:c3:d5:6c:42:7c:b4:51:ba:0b:b3:b3:0c:
15:8f:4f:6c:36:e1:6d:de:2b:4e:8f:d1:6e:f5:1a:
5d:14:ad:ec:31:a5:95:6e:36:e3:85:75:4a:4d:13:
b3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:22:C4:DC:88:65:9F:95:CA:E4:FE:12:97:D8:F1:3D:92:DA:FB:6C
X509v3 Authority Key Identifier:
keyid:FE:2E:22:CC:15:85:9E:D4:A0:78:4B:FD:08:58:4B:3C:8F:B2:9F:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_i4izBWFntSgeEv9CFhLPI-yn5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_CLE3Ihln5XK5P4Sl9jxPZLa-2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.31.0.0/19
37.26.128.0/20
62.221.64.0/18
77.235.96.0/19
80.94.240.0/20
95.153.64.0/18
185.10.20.0/22
217.19.208.0/20
IPv6:
2a03:f680::/32
Signature Algorithm: sha256WithRSAEncryption
6a:2e:2d:e3:5b:f8:66:55:c4:27:31:8a:8f:f1:31:13:01:00:
b0:43:ec:c1:c7:ac:ba:2a:44:87:e4:a1:3f:52:ea:5c:de:50:
87:62:3b:9b:fa:35:76:29:2d:8e:37:16:7d:cc:ac:aa:36:65:
61:f0:c2:3e:fb:62:6b:d1:b8:ef:4c:67:5c:04:dd:8b:e1:1c:
25:47:db:14:6e:9b:b8:63:d1:e6:25:8e:49:1d:71:b6:c4:c6:
c1:2a:e0:8a:47:bf:67:19:27:fd:27:05:98:e2:94:76:98:7e:
21:a2:61:15:5a:9c:41:c9:e0:2f:f2:7b:e2:bb:13:18:5a:76:
12:78:ae:40:1a:aa:f0:6a:3b:21:b1:2b:06:32:b2:6e:31:64:
0b:27:5f:d6:51:7f:15:5b:ba:ff:80:c0:20:9d:92:db:97:83:
80:d9:40:ed:66:03:c7:91:b0:9d:12:d5:34:b4:1a:9c:90:a3:
ad:41:ad:23:de:f4:70:11:49:f1:7a:71:c4:e9:93:45:1d:6f:
d0:2f:b5:32:26:f0:82:aa:b2:05:7e:ec:92:16:0e:33:b2:1a:
2a:ee:25:c1:99:0d:b1:29:7f:3f:b4:ac:08:8b:38:54:b2:9e:
4b:72:08:7a:cd:c0:25:64:70:a8:3d:39:72:bf:4e:6f:0e:6a:
66:91:41:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:16:30 2024 by rpki-client on console-ams.rpki-client.org