Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/Cv00FHoRCbT-ngh4UWfJZ4vZihQ.roa
File: Cv00FHoRCbT-ngh4UWfJZ4vZihQ.roa (raw, json)
Hash identifier: 7AbHCnyozpNGoG7JJOuzOCWwWQb/tfqei0KdCIWrrY4=
Subject key identifier: 0A:FD:34:14:7A:11:09:B4:FE:9E:08:78:51:67:C9:67:8B:D9:8A:14
Certificate issuer: /CN=add353933674a5608f6d1ee2dab4f64c8bff8f39
Certificate serial: 01874C0C6A644C5F912679D9DBD1D93C1270
Authority key identifier: AD:D3:53:93:36:74:A5:60:8F:6D:1E:E2:DA:B4:F6:4C:8B:FF:8F:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/Cv00FHoRCbT-ngh4UWfJZ4vZihQ.roa
Signing time: Tue 04 Apr 2023 11:34:54 +0000
ROA not before: Tue 04 Apr 2023 11:34:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8851
IP address blocks: 194.46.32.0/19 maxlen: 19
91.84.0.0/16 maxlen: 16
91.84.0.0/15 maxlen: 15
194.46.64.0/19 maxlen: 19
194.46.80.0/20 maxlen: 20
212.104.128.0/19 maxlen: 19
212.108.80.0/21 maxlen: 21
212.108.88.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4c:0c:6a:64:4c:5f:91:26:79:d9:db:d1:d9:3c:12:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=add353933674a5608f6d1ee2dab4f64c8bff8f39
Validity
Not Before: Apr 4 11:34:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0afd34147a1109b4fe9e08785167c9678bd98a14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d4:ed:47:77:4c:62:95:49:0c:57:21:6b:02:
dc:9b:73:01:0c:a0:c6:13:70:f5:7e:cc:9e:49:09:
6d:ca:c9:12:33:0d:d4:32:11:2e:14:ba:95:bb:80:
ea:55:39:e8:d4:ed:47:43:f7:2b:d8:e8:94:b4:1d:
c1:14:02:d4:ad:26:19:e9:ca:af:f8:bd:5e:b6:a9:
f6:f1:4c:1b:f8:39:ef:6e:b9:cb:d7:25:4d:c4:1d:
1a:3c:5e:bc:92:51:d3:3a:f1:e9:90:95:80:43:57:
9b:4a:30:88:98:a8:ac:6b:7f:de:f6:7f:8a:c7:b4:
fd:a8:76:4c:88:14:9f:f2:70:21:f4:43:3e:7d:2e:
2a:96:70:71:de:2a:40:2b:2d:f9:23:79:0b:12:f6:
06:58:45:08:5b:06:9d:1b:45:d1:5d:e7:57:c0:26:
c0:d0:e7:60:d0:52:9a:da:df:2d:e8:3a:ad:64:e4:
93:19:b5:86:14:69:a3:80:f4:63:03:45:7a:fc:27:
bf:c8:98:ba:50:90:6c:7e:dc:f6:08:58:5f:7e:18:
d6:54:70:b9:31:f0:62:31:31:5a:0b:2f:3c:bd:51:
7a:40:ef:94:90:61:42:a7:5e:a5:41:0f:51:fb:89:
b9:95:97:26:d8:52:01:85:74:d7:ad:b1:20:ab:60:
f2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:FD:34:14:7A:11:09:B4:FE:9E:08:78:51:67:C9:67:8B:D9:8A:14
X509v3 Authority Key Identifier:
keyid:AD:D3:53:93:36:74:A5:60:8F:6D:1E:E2:DA:B4:F6:4C:8B:FF:8F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/Cv00FHoRCbT-ngh4UWfJZ4vZihQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.84.0.0/15
194.46.32.0-194.46.95.255
212.104.128.0/19
212.108.80.0-212.108.91.255
Signature Algorithm: sha256WithRSAEncryption
0e:b0:2a:3b:98:7c:99:e5:62:a6:89:f3:e0:4e:87:16:77:74:
29:d4:87:e3:b6:89:64:4d:af:7c:57:cd:07:f6:fa:ce:e3:57:
c5:d9:f4:c2:27:f5:1f:a9:1c:d7:b1:68:f6:c8:d7:3b:2d:19:
4d:47:94:e1:5c:0f:3c:71:02:40:49:e4:83:16:13:d1:48:5f:
4b:e8:29:be:bd:3e:16:a2:c5:77:7f:a9:28:fd:d9:6f:75:6c:
6a:04:a0:1d:14:84:d5:8b:9b:50:67:42:65:c6:ed:91:da:39:
af:b7:c2:a1:75:66:8c:56:43:8b:69:d5:12:8b:c9:11:a4:24:
5e:ba:c2:73:1b:54:23:89:23:cb:12:0e:39:20:f7:95:ad:26:
7e:9f:4f:fd:4f:52:3b:db:72:d6:b2:11:e3:33:62:e4:92:81:
c9:7a:41:ce:bb:e7:60:93:e6:84:85:12:3e:26:60:42:f4:77:
02:1c:d5:8e:40:9a:6f:fb:0a:b8:8e:29:9c:07:7b:3f:90:24:
00:cc:66:e9:63:bd:58:06:9c:3a:85:67:c1:45:1c:27:5a:1b:
fa:2f:74:ef:22:3c:41:28:1f:33:d9:47:69:a7:d6:82:58:3d:
08:92:67:3a:e1:45:38:ef:b4:23:37:2f:ba:c9:75:10:3f:ae:
e5:4a:8c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 1 22:29:36 2023 by rpki-client on console-ams.rpki-client.org