Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/36VPePKvDqvSkNDHLVIUdczfN3k.roa
File: 36VPePKvDqvSkNDHLVIUdczfN3k.roa (raw, json)
Hash identifier: ESSuC3ZeId0XpyNo1BSlBNh/Bu99dVZAQ7iVHH1fGhw=
Subject key identifier: DF:A5:4F:78:F2:AF:0E:AB:D2:90:D0:C7:2D:52:14:75:CC:DF:37:79
Certificate issuer: /CN=3b230442feae9fc26b8bd887faa0ed0275827a58
Certificate serial: 018697498EC258D925551AC2908C11281DA1
Authority key identifier: 3B:23:04:42:FE:AE:9F:C2:6B:8B:D8:87:FA:A0:ED:02:75:82:7A:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OyMEQv6un8Jri9iH-qDtAnWCelg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/36VPePKvDqvSkNDHLVIUdczfN3k.roa
Signing time: Tue 28 Feb 2023 09:10:25 +0000
ROA not before: Tue 28 Feb 2023 09:10:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48951
IP address blocks: 93.122.84.0/22 maxlen: 22
93.122.80.0/22 maxlen: 22
81.7.208.0/22 maxlen: 22
81.7.208.0/21 maxlen: 21
93.122.88.0/22 maxlen: 22
93.122.92.0/22 maxlen: 22
81.7.216.0/21 maxlen: 21
81.7.216.0/22 maxlen: 22
81.7.220.0/22 maxlen: 22
93.122.28.0/22 maxlen: 22
93.122.32.0/22 maxlen: 22
93.122.36.0/22 maxlen: 22
93.122.44.0/22 maxlen: 22
93.122.40.0/22 maxlen: 22
93.122.48.0/22 maxlen: 22
93.122.52.0/22 maxlen: 22
93.122.56.0/22 maxlen: 22
93.122.60.0/22 maxlen: 22
93.122.64.0/22 maxlen: 22
81.7.192.0/19 maxlen: 19
93.122.68.0/22 maxlen: 22
93.122.72.0/21 maxlen: 21
82.210.192.0/18 maxlen: 18
82.210.224.0/19 maxlen: 19
93.122.16.0/22 maxlen: 22
93.122.20.0/22 maxlen: 22
93.122.24.0/22 maxlen: 22
78.140.64.0/24 maxlen: 24
78.140.64.0/21 maxlen: 21
78.140.67.0/24 maxlen: 24
82.210.255.0/24 maxlen: 24
78.140.66.0/24 maxlen: 24
78.140.68.0/24 maxlen: 24
82.210.254.0/24 maxlen: 24
78.140.65.0/24 maxlen: 24
78.140.64.0/18 maxlen: 18
78.140.72.0/22 maxlen: 22
78.140.72.0/24 maxlen: 24
78.140.76.0/24 maxlen: 24
78.140.76.0/22 maxlen: 22
78.140.81.0/24 maxlen: 24
78.140.80.0/23 maxlen: 23
78.140.80.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:97:49:8e:c2:58:d9:25:55:1a:c2:90:8c:11:28:1d:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b230442feae9fc26b8bd887faa0ed0275827a58
Validity
Not Before: Feb 28 09:10:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dfa54f78f2af0eabd290d0c72d521475ccdf3779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:94:49:66:c8:c5:a6:67:65:38:7d:06:98:8b:
47:07:6d:e3:1e:35:9d:d7:7f:4d:61:71:9d:1d:a7:
03:19:cc:24:21:47:19:02:2d:89:4e:3b:0d:a6:7c:
38:84:ce:2e:e4:09:fe:ee:95:9f:6a:08:45:e6:0c:
7f:34:8d:2e:ed:cb:dc:08:1f:8b:7b:33:a6:79:4b:
47:81:42:98:97:32:75:b9:41:71:27:bc:95:c4:1c:
34:c7:10:7b:75:a1:96:76:84:d4:59:11:fb:8f:47:
f0:5f:05:16:57:06:d4:7e:d6:36:95:d4:50:13:47:
1b:fa:83:eb:5f:5e:75:46:f3:d1:03:31:f8:d1:51:
c2:7d:4e:79:32:5f:44:56:ce:b8:02:e1:dc:8a:0c:
5f:0a:40:ff:b6:ed:c3:e7:eb:3c:52:50:c7:c7:c5:
b4:18:70:2a:e5:eb:66:9f:28:99:57:0d:c7:82:1b:
21:e8:90:71:e0:4f:13:75:a4:25:a7:c8:02:09:ba:
51:67:73:3a:77:0d:cf:54:c8:01:85:66:06:0b:68:
05:cc:b4:af:bc:04:a9:b7:a2:13:34:0d:e3:8e:ff:
02:3e:73:0f:68:5c:5f:4e:6f:a0:72:5f:62:05:bd:
cc:dd:f9:e5:1a:0e:58:14:63:98:5c:ad:e4:3d:33:
84:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A5:4F:78:F2:AF:0E:AB:D2:90:D0:C7:2D:52:14:75:CC:DF:37:79
X509v3 Authority Key Identifier:
keyid:3B:23:04:42:FE:AE:9F:C2:6B:8B:D8:87:FA:A0:ED:02:75:82:7A:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OyMEQv6un8Jri9iH-qDtAnWCelg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/36VPePKvDqvSkNDHLVIUdczfN3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.140.64.0/18
81.7.192.0/19
82.210.192.0/18
93.122.16.0-93.122.95.255
Signature Algorithm: sha256WithRSAEncryption
34:a7:45:40:e3:99:6e:1f:81:4a:8a:eb:3b:10:07:50:08:8d:
e7:e8:1c:36:82:da:3b:99:5c:7e:29:32:97:db:f3:61:62:f5:
94:af:d2:a5:1d:13:f2:6c:96:ab:2e:6c:39:16:19:df:85:a0:
64:be:a0:0b:99:ad:53:f2:e6:ef:77:65:b7:45:b0:7c:8f:b5:
fe:4f:dc:e7:ea:aa:33:d5:75:a4:90:1d:f6:41:1a:f4:66:17:
5d:e5:e8:49:11:32:be:21:1d:8f:0f:84:15:51:9b:00:3c:30:
41:18:49:3e:2e:4c:da:11:1d:55:6e:4a:a5:2f:fc:8f:40:d0:
40:10:21:f9:e5:55:76:f5:b4:0a:91:1f:7b:a1:b1:a0:ab:f3:
cb:6b:08:f3:84:57:0b:e4:bb:3f:1b:8a:1a:c1:f2:c5:53:10:
8b:05:ee:e6:87:ad:36:7b:15:8e:50:df:d5:43:a0:06:fa:18:
be:6d:10:86:42:64:09:b6:b7:f5:29:df:a1:39:db:88:14:20:
bb:55:ad:f2:36:a1:60:e4:39:de:11:36:77:f6:f7:dc:cd:3c:
2b:ee:67:2f:7e:26:e0:58:33:c7:6d:8a:6b:d8:1d:43:b3:e1:
65:01:7e:e8:af:da:80:1e:29:66:df:dd:af:e5:49:18:d2:31:
59:f4:0c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:40 2023 by rpki-client on console-fra.rpki-client.org