Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/qcEefgfDuG_UbQvHjUZmPmJxs_w.roa
File: qcEefgfDuG_UbQvHjUZmPmJxs_w.roa (raw, json)
Hash identifier: ewlqD5s/ygObDyTlC+f2L3qWK7B2BJitHAX5hCmkaZE=
Subject key identifier: A9:C1:1E:7E:07:C3:B8:6F:D4:6D:0B:C7:8D:46:66:3E:62:71:B3:FC
Certificate issuer: /CN=dbb653bbd1704c47bada62ab6ce3502307f244b6
Certificate serial: 0189623CB1612344013F4EF1FE344DA3969F
Authority key identifier: DB:B6:53:BB:D1:70:4C:47:BA:DA:62:AB:6C:E3:50:23:07:F2:44:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27ZTu9FwTEe62mKrbONQIwfyRLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/qcEefgfDuG_UbQvHjUZmPmJxs_w.roa
Signing time: Mon 17 Jul 2023 05:04:51 +0000
ROA not before: Mon 17 Jul 2023 05:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34785
IP address blocks: 193.186.80.0/22 maxlen: 22
193.186.84.0/23 maxlen: 23
193.228.112.0/21 maxlen: 21
193.228.122.0/24 maxlen: 24
193.228.120.0/23 maxlen: 23
185.72.137.0/24 maxlen: 24
185.72.138.0/24 maxlen: 24
80.80.240.0/20 maxlen: 20
185.72.136.0/24 maxlen: 24
193.186.72.0/21 maxlen: 21
2a01:af80::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:62:3c:b1:61:23:44:01:3f:4e:f1:fe:34:4d:a3:96:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbb653bbd1704c47bada62ab6ce3502307f244b6
Validity
Not Before: Jul 17 05:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a9c11e7e07c3b86fd46d0bc78d46663e6271b3fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:81:53:e4:c3:d0:ef:a3:8e:03:e0:b7:97:5e:
6a:c6:d3:bb:a3:1c:8b:98:16:18:d7:aa:69:04:b2:
72:82:8e:84:e6:02:f4:0b:da:a9:03:9f:b9:98:da:
a0:f2:9a:4b:99:a3:bd:c6:29:d6:9f:7f:2d:f1:f1:
25:31:aa:6d:44:b1:c6:44:e4:7d:bc:c6:2d:6b:88:
b0:43:06:27:92:34:72:70:39:6e:95:bd:e8:49:82:
60:c4:f7:ad:f2:8e:d7:97:bd:0c:43:8a:a3:cb:9f:
a8:f1:fa:f3:51:c3:a3:3d:c4:08:e9:35:74:97:06:
da:f7:e2:51:64:c3:e7:22:42:67:ad:92:b7:a1:64:
98:90:1c:9d:9c:61:53:62:6d:ec:14:5d:38:74:52:
43:71:9e:16:dd:55:a7:c0:ca:53:34:dd:36:23:1c:
93:a4:fe:0b:7c:27:e0:3c:66:5c:5f:aa:04:da:8f:
12:32:d7:9d:97:4c:59:66:06:42:99:48:36:93:65:
98:df:87:a6:28:74:b6:09:65:dc:b8:6f:d0:67:dc:
02:28:42:e4:42:41:a2:21:16:20:87:18:5c:79:d7:
d2:28:00:78:10:70:b6:d5:54:73:e5:79:40:f8:a7:
50:49:b1:0b:96:2e:d5:07:8a:53:f1:16:5d:6e:f5:
a8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C1:1E:7E:07:C3:B8:6F:D4:6D:0B:C7:8D:46:66:3E:62:71:B3:FC
X509v3 Authority Key Identifier:
keyid:DB:B6:53:BB:D1:70:4C:47:BA:DA:62:AB:6C:E3:50:23:07:F2:44:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27ZTu9FwTEe62mKrbONQIwfyRLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/qcEefgfDuG_UbQvHjUZmPmJxs_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.80.240.0/20
185.72.136.0-185.72.138.255
193.186.72.0-193.186.85.255
193.228.112.0-193.228.122.255
IPv6:
2a01:af80::/32
Signature Algorithm: sha256WithRSAEncryption
66:5b:aa:83:c8:31:27:5d:cb:03:14:b6:6e:7e:39:7a:4e:cb:
aa:6e:57:e0:d2:2c:fc:ad:64:cb:66:1a:96:ba:bf:41:71:50:
c1:31:19:32:99:a2:45:1d:69:34:62:2c:58:9b:59:88:a0:7b:
05:31:33:c6:50:9f:58:4b:21:57:c3:a7:e1:c3:ab:bf:29:c3:
ec:d0:17:fe:b8:44:dd:09:35:ca:f9:ae:02:76:50:73:18:db:
c9:17:0f:3b:c7:f3:b9:ab:b0:d2:9a:8c:b6:3a:de:78:4e:5e:
d7:cc:51:89:0a:53:40:82:be:2b:88:cf:17:8f:ac:b1:ae:a6:
d0:e6:f9:e6:38:20:8a:c0:e9:c0:9e:6b:af:ea:bb:63:14:1d:
e0:c3:9d:70:0c:c6:ea:a4:47:8f:2c:e0:89:3c:d8:3a:db:b5:
b7:cb:96:a2:e9:08:c8:fa:55:b0:ff:c8:f3:fb:70:d3:12:d1:
fb:60:ed:9a:8b:bb:43:65:4a:e8:33:0a:6e:f7:56:8d:94:c8:
f5:4d:19:64:30:83:8a:2b:83:ac:49:d3:c9:a2:33:e8:64:d9:
11:f0:3a:41:c2:aa:1a:ef:46:7a:9f:1a:7d:40:dc:5e:c5:0f:
78:ca:0e:8d:33:6f:49:44:06:e7:6b:ee:5b:d3:68:c9:e0:5d:
fe:93:8c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:47 2024 by rpki-client on console-fra.rpki-client.org