Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/kUzDT00bgYx0tqzRCv7_loCKLnQ.roa
File: kUzDT00bgYx0tqzRCv7_loCKLnQ.roa (raw, json)
Hash identifier: +Ih4JkrguriDpHFrpDSTHdFvtXfuR6aU6fb1u1BRPNI=
Subject key identifier: 91:4C:C3:4F:4D:1B:81:8C:74:B6:AC:D1:0A:FE:FF:96:80:8A:2E:74
Certificate issuer: /CN=fe2e22cc15859ed4a0784bfd08584b3c8fb29f9a
Certificate serial: 018ABBD9F2103460402502B18E411AF06D9B
Authority key identifier: FE:2E:22:CC:15:85:9E:D4:A0:78:4B:FD:08:58:4B:3C:8F:B2:9F:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_i4izBWFntSgeEv9CFhLPI-yn5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/kUzDT00bgYx0tqzRCv7_loCKLnQ.roa
Signing time: Fri 22 Sep 2023 07:45:37 +0000
ROA not before: Fri 22 Sep 2023 07:45:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1547
IP address blocks: 37.26.128.0/20 maxlen: 20
95.153.64.0/19 maxlen: 19
185.10.20.0/22 maxlen: 22
77.235.96.0/20 maxlen: 20
217.19.211.0/24 maxlen: 24
217.19.212.0/24 maxlen: 24
217.19.209.0/24 maxlen: 24
217.19.210.0/24 maxlen: 24
217.19.208.0/24 maxlen: 24
217.19.213.0/24 maxlen: 24
217.19.219.0/24 maxlen: 24
217.19.218.0/24 maxlen: 24
217.19.216.0/24 maxlen: 24
217.19.217.0/24 maxlen: 24
217.19.214.0/24 maxlen: 24
217.19.215.0/24 maxlen: 24
217.19.223.0/24 maxlen: 24
217.19.221.0/24 maxlen: 24
77.235.112.0/20 maxlen: 20
217.19.222.0/24 maxlen: 24
217.19.220.0/24 maxlen: 24
95.153.96.0/19 maxlen: 19
80.94.246.0/24 maxlen: 24
80.94.244.0/24 maxlen: 24
80.94.245.0/24 maxlen: 24
80.94.240.0/20 maxlen: 20
80.94.243.0/24 maxlen: 24
80.94.241.0/24 maxlen: 24
80.94.242.0/24 maxlen: 24
80.94.247.0/24 maxlen: 24
80.94.253.0/24 maxlen: 24
80.94.251.0/24 maxlen: 24
80.94.252.0/24 maxlen: 24
80.94.249.0/24 maxlen: 24
80.94.250.0/24 maxlen: 24
80.94.248.0/24 maxlen: 24
80.94.255.0/24 maxlen: 24
31.31.0.0/19 maxlen: 19
80.94.254.0/24 maxlen: 24
62.221.96.0/19 maxlen: 19
80.94.240.0/24 maxlen: 24
62.221.64.0/19 maxlen: 19
2a03:f680::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:bb:d9:f2:10:34:60:40:25:02:b1:8e:41:1a:f0:6d:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe2e22cc15859ed4a0784bfd08584b3c8fb29f9a
Validity
Not Before: Sep 22 07:45:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=914cc34f4d1b818c74b6acd10afeff96808a2e74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:56:20:c9:45:77:17:51:7f:ed:6d:de:dd:ce:
97:93:c5:1d:f6:19:fa:ac:0a:fc:a4:59:27:15:a6:
6e:e3:15:db:e1:d0:f3:01:f2:da:0d:c5:52:af:ee:
bf:bb:c4:d5:07:4d:7c:1c:24:a4:a7:65:35:27:f6:
c3:e6:7b:19:59:1f:26:60:64:3c:02:74:42:dd:38:
4d:01:cd:a9:11:b3:a1:a4:1e:33:4f:87:c7:b3:c8:
2f:5d:30:b3:e7:75:f0:1a:23:9c:b0:64:dc:13:da:
d3:57:05:ad:ae:0d:df:35:2a:e2:ab:01:4f:d1:11:
7f:22:99:11:33:d5:a5:52:5f:1c:43:37:de:8f:15:
05:87:2a:e3:53:a3:65:a8:88:a9:6f:42:54:fb:16:
f4:87:e1:d9:4e:46:88:8b:43:fb:f5:41:10:c1:a7:
1f:aa:91:8c:d8:b8:cb:00:ea:60:68:67:7f:78:f5:
e9:18:36:da:07:bb:84:d3:77:9a:4d:f2:d3:e9:27:
5f:d3:ba:a2:57:d9:62:d2:fa:16:ac:b8:48:5b:79:
24:77:6a:b1:e9:dc:91:ad:44:13:fd:99:71:a2:11:
f4:5c:2b:5d:bc:f6:43:b4:06:76:fe:47:6f:e9:f0:
a5:ce:78:a3:e3:27:af:eb:2a:39:cf:99:c7:80:07:
fa:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:4C:C3:4F:4D:1B:81:8C:74:B6:AC:D1:0A:FE:FF:96:80:8A:2E:74
X509v3 Authority Key Identifier:
keyid:FE:2E:22:CC:15:85:9E:D4:A0:78:4B:FD:08:58:4B:3C:8F:B2:9F:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_i4izBWFntSgeEv9CFhLPI-yn5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/kUzDT00bgYx0tqzRCv7_loCKLnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.31.0.0/19
37.26.128.0/20
62.221.64.0/18
77.235.96.0/19
80.94.240.0/20
95.153.64.0/18
185.10.20.0/22
217.19.208.0/20
IPv6:
2a03:f680::/32
Signature Algorithm: sha256WithRSAEncryption
03:b4:7d:73:41:7c:8b:c1:10:d8:1a:f2:23:e7:97:fd:28:27:
6f:eb:09:be:29:aa:f4:e1:12:50:0a:7b:e3:92:44:1b:04:d0:
5d:6b:27:1c:35:12:d1:fb:fe:a0:bd:cc:79:5d:ac:17:98:95:
66:5c:21:66:08:7c:86:71:1c:9f:e1:b4:63:87:74:d0:e1:18:
ba:4f:f0:a8:8d:ce:e0:2d:44:fe:07:ed:eb:b3:eb:a8:bb:36:
c6:87:5f:ca:ab:be:49:5f:10:4c:51:8e:54:63:14:71:cb:92:
9f:d0:8c:32:fb:2c:91:34:93:45:d4:8d:d2:cd:90:a6:7d:92:
7d:98:5a:13:5d:7b:ea:ba:f0:84:9f:b4:21:f5:99:6e:8a:ef:
71:1c:6c:f5:93:5f:0f:97:33:2c:39:de:21:1c:27:ef:b5:34:
8f:b6:33:0a:39:3e:c5:88:dc:6d:e8:d7:50:92:58:35:a4:20:
e1:91:73:c9:17:6a:d6:de:4b:c8:38:dd:aa:15:50:ff:b4:82:
15:68:ad:db:61:40:86:82:f1:03:88:93:2d:7b:12:b3:7b:3e:
8f:37:5c:51:1e:c3:56:88:e6:a0:51:ea:a5:3b:af:b8:a2:8a:
89:37:cd:a0:ec:ba:a8:a3:7c:df:7c:9d:e6:02:ef:91:e2:82:
99:ee:8c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 26 06:40:50 2023 by rpki-client on console-fra.rpki-client.org