Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/02a616-e614-45a0-9c90-8ad87e0dd596/1/9GANeXf0no5JXX0AGGRIUutcYb0.roa
File: 9GANeXf0no5JXX0AGGRIUutcYb0.roa (raw, json)
Hash identifier: kbq+eILw3nsZhwgmPf3s+tDWK0UEp452o7FAvbCIz1s=
Subject key identifier: F4:60:0D:79:77:F4:9E:8E:49:5D:7D:00:18:64:48:52:EB:5C:61:BD
Certificate issuer: /CN=fd1523694bd5fb92d768435db3bb68ed843e5d53
Certificate serial: 01856D8ABCC0438A7598DB188AC5065B54D9
Authority key identifier: FD:15:23:69:4B:D5:FB:92:D7:68:43:5D:B3:BB:68:ED:84:3E:5D:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_RUjaUvV-5LXaENds7to7YQ-XVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/02a616-e614-45a0-9c90-8ad87e0dd596/1/9GANeXf0no5JXX0AGGRIUutcYb0.roa
Signing time: Sun 01 Jan 2023 13:34:46 +0000
ROA not before: Sun 01 Jan 2023 13:34:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48070
IP address blocks: 94.126.232.0/23 maxlen: 23
94.126.232.0/24 maxlen: 24
94.126.233.0/24 maxlen: 24
94.126.236.0/24 maxlen: 24
94.126.235.0/24 maxlen: 24
94.126.238.0/24 maxlen: 24
94.126.237.0/24 maxlen: 24
94.126.239.0/24 maxlen: 24
94.126.234.0/24 maxlen: 24
2a11:5700::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8a:bc:c0:43:8a:75:98:db:18:8a:c5:06:5b:54:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd1523694bd5fb92d768435db3bb68ed843e5d53
Validity
Not Before: Jan 1 13:34:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f4600d7977f49e8e495d7d0018644852eb5c61bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b6:1c:d8:c7:29:73:a6:af:87:68:5d:25:bf:
da:02:8e:95:67:30:72:0d:44:13:06:c0:7a:4b:c0:
4f:73:eb:83:93:ad:53:93:f1:dc:e0:e1:8b:c1:8e:
31:44:a1:a2:7f:09:9e:2b:a7:4c:09:e2:4d:bb:05:
70:05:7b:cb:31:04:f2:67:25:cd:8d:9f:f8:4c:fe:
1d:3f:b5:79:69:29:28:0e:41:e6:36:6c:fc:d3:42:
19:85:43:d4:f2:76:53:fa:4d:8c:74:65:3c:90:b7:
a6:0e:8f:cd:ec:1d:2f:a1:9a:35:5f:f4:ec:c3:e9:
17:01:a0:0e:d7:64:db:93:29:d3:f1:ed:a1:95:61:
97:72:25:64:21:d2:75:8d:db:a4:5b:19:7b:95:1f:
38:37:40:f4:b9:25:30:a1:63:4d:76:d2:65:bb:fd:
a6:81:97:df:2f:ea:29:83:1f:c0:e3:ca:d6:98:ba:
7f:03:14:e1:58:e3:e7:a9:8c:6d:10:3c:53:f7:23:
63:f4:1a:82:ca:55:a1:b0:61:a4:05:6c:1b:07:99:
c2:36:2c:33:1c:93:97:ea:76:c5:91:33:cf:c2:ed:
97:d6:12:23:ba:de:87:72:8f:f2:52:2f:b7:3c:ea:
79:80:e4:74:1e:d2:2f:1e:64:96:22:e5:cb:cc:62:
9e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:60:0D:79:77:F4:9E:8E:49:5D:7D:00:18:64:48:52:EB:5C:61:BD
X509v3 Authority Key Identifier:
keyid:FD:15:23:69:4B:D5:FB:92:D7:68:43:5D:B3:BB:68:ED:84:3E:5D:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_RUjaUvV-5LXaENds7to7YQ-XVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/02a616-e614-45a0-9c90-8ad87e0dd596/1/9GANeXf0no5JXX0AGGRIUutcYb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/02a616-e614-45a0-9c90-8ad87e0dd596/1/_RUjaUvV-5LXaENds7to7YQ-XVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.126.232.0/21
IPv6:
2a11:5700::/32
Signature Algorithm: sha256WithRSAEncryption
65:2a:e3:17:f2:08:dc:ff:8f:66:4b:ed:51:69:4b:fc:25:a3:
78:69:42:ed:ef:5e:f1:a7:63:36:9c:63:70:2b:7e:cf:d5:ba:
28:66:80:e5:da:12:41:a5:90:3e:f6:72:e9:4f:5e:f6:4c:6d:
c0:65:43:63:f9:a6:7a:43:a5:87:fd:d2:82:d1:d8:94:cd:13:
59:e9:cd:3d:28:12:64:15:30:60:3b:c6:a3:08:7e:a0:56:26:
94:e4:64:7e:df:22:bf:fc:3a:7d:39:08:1b:5a:ff:50:1f:d0:
3c:6e:fe:8e:80:25:f7:4b:b4:bc:14:c4:dd:5b:3b:5b:5f:d6:
7a:ae:b6:c4:62:b1:5d:01:bd:ba:59:07:b8:ee:90:83:fc:2c:
62:79:d4:7a:94:5b:2c:2d:16:72:3f:d7:fe:0e:85:bc:4c:ea:
b4:4c:78:90:39:5a:13:22:e8:9a:7c:72:10:98:82:06:5b:be:
89:73:e1:ec:8a:46:65:52:41:3d:50:ff:cf:c7:76:f1:bf:48:
e4:85:4d:3a:4d:0d:7d:4e:1d:15:e4:5f:9a:3c:e8:35:dc:dd:
01:5f:f1:eb:c0:b5:9f:19:f7:65:bc:78:f4:27:8b:f6:c3:11:
ad:cb:67:63:17:38:b6:c7:ad:0b:90:64:e2:e2:e3:32:27:b9:
4a:30:92:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:22 2023 by rpki-client on console-ams.rpki-client.org