Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/xGeSfteWhPm_-4N8S0apQEeDiHM.roa
File: xGeSfteWhPm_-4N8S0apQEeDiHM.roa (raw, json)
Hash identifier: uQD9Od2hz4wyKQYo23HousQgW3XekZN9H5Bwlyk5CA8=
Subject key identifier: C4:67:92:7E:D7:96:84:F9:BF:FB:83:7C:4B:46:A9:40:47:83:88:73
Certificate issuer: /CN=adac830ccaa74783dd961fab241a228d7cc6f808
Certificate serial: 0185707057AF9920DBB6DBD5E6A37558B36C
Authority key identifier: AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/xGeSfteWhPm_-4N8S0apQEeDiHM.roa
Signing time: Mon 02 Jan 2023 03:04:48 +0000
ROA not before: Mon 02 Jan 2023 03:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8427
IP address blocks: 31.47.112.0/20 maxlen: 20
212.21.16.0/20 maxlen: 20
79.134.0.0/19 maxlen: 19
79.134.0.0/24 maxlen: 24
79.134.24.0/21 maxlen: 21
178.18.96.0/20 maxlen: 20
178.18.96.0/21 maxlen: 21
178.18.104.0/21 maxlen: 21
212.21.0.0/19 maxlen: 19
109.201.192.0/20 maxlen: 20
109.201.192.0/19 maxlen: 19
46.167.64.0/18 maxlen: 18
109.201.208.0/20 maxlen: 20
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:57:af:99:20:db:b6:db:d5:e6:a3:75:58:b3:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adac830ccaa74783dd961fab241a228d7cc6f808
Validity
Not Before: Jan 2 03:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c467927ed79684f9bffb837c4b46a94047838873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:56:c7:6c:5f:47:19:54:8a:18:c0:66:48:bb:
de:1a:43:bf:3a:61:00:82:3f:46:c0:35:ed:b8:ed:
78:dd:33:bc:cb:44:62:60:27:ce:09:73:84:34:d5:
21:8b:33:53:46:48:5f:9c:8e:fe:8a:e1:11:c3:ed:
7e:51:fe:f1:f9:02:cd:29:e5:f0:5d:a9:23:5c:f7:
24:2e:59:5f:25:3d:9f:7f:bf:c9:c4:1b:cd:5a:97:
d7:cc:52:27:93:fd:b4:a6:47:1d:7c:bd:21:48:11:
7f:b6:dc:d6:65:f1:42:ff:a5:2a:ac:f3:af:1b:c5:
ca:48:d8:bf:9c:08:fb:01:b2:b1:da:85:30:73:85:
a5:56:30:a9:3e:f6:b4:5b:79:5a:50:95:c8:06:e9:
ea:9c:56:67:20:2b:d9:af:5a:86:0c:94:1b:22:b5:
c8:23:2e:0f:0b:20:12:9c:02:14:f7:c1:ec:a8:4f:
77:20:91:9f:eb:52:d0:d4:f2:ab:68:f9:63:85:b3:
f4:65:47:e3:2e:d0:d6:f7:8a:49:29:ab:a2:aa:67:
f0:0d:a3:df:b3:e6:15:45:d1:b6:f8:28:2e:ff:24:
98:83:37:26:06:48:be:31:cf:02:a4:fb:41:65:cb:
c4:72:33:48:c5:f1:bb:8f:d8:e6:bb:80:7d:35:a0:
9d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:67:92:7E:D7:96:84:F9:BF:FB:83:7C:4B:46:A9:40:47:83:88:73
X509v3 Authority Key Identifier:
keyid:AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/xGeSfteWhPm_-4N8S0apQEeDiHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.47.112.0/20
46.167.64.0/18
79.134.0.0/19
109.201.192.0/19
178.18.96.0/20
212.21.0.0/19
Signature Algorithm: sha256WithRSAEncryption
b2:79:33:52:87:eb:99:73:00:a4:0f:33:f6:d3:34:f1:06:2a:
3c:3d:32:2e:5f:53:1a:6e:78:ca:28:ca:e2:5b:22:3f:9f:c7:
3a:a5:40:65:c0:31:2d:d0:83:92:ee:99:9d:ad:7d:3a:0d:12:
43:93:9d:5c:5e:32:77:3c:23:dc:91:96:09:9d:79:12:14:bc:
a2:8d:8f:54:ac:54:24:d0:76:cf:d9:e8:76:a6:30:4b:f5:fb:
1d:b5:88:58:13:e8:90:01:0a:d7:a5:b1:e7:4b:9a:70:ba:93:
52:e4:d7:3c:d6:fa:91:65:fd:ca:71:b6:8b:f5:97:5c:53:d5:
20:e1:d1:c7:62:93:64:34:81:14:0c:37:a3:d6:c2:ac:d7:11:
08:21:67:65:d1:a1:16:b9:71:24:15:6e:df:89:6f:d2:fe:b9:
f2:46:71:b0:0f:c4:14:68:42:f6:e6:8a:57:0e:43:08:eb:f2:
8f:d3:4f:5b:d2:c5:fb:8b:0a:f6:a0:3c:9e:54:1e:c7:8b:ad:
fc:5f:d1:a4:e0:e9:08:78:de:66:eb:bf:d5:d1:5a:64:9a:83:
77:21:86:6e:71:14:ab:bb:98:94:d1:47:75:d8:f0:3c:1b:f0:
34:2d:2e:f6:87:85:15:db:e1:b3:0a:f8:c4:71:47:1d:8e:95:
ed:1c:09:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:32 2024 by rpki-client on console-ams.rpki-client.org