Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/f6ee9d-756f-437e-bc03-e703e94b7beb/1/9lQbUmNZ5Awast4cvJ36Vzm9dRw.roa
File: 9lQbUmNZ5Awast4cvJ36Vzm9dRw.roa (raw, json)
Hash identifier: 9O0+jWU51CAJ+rY7/yc+deZHXsiU6mCw5OMRp604e1o=
Subject key identifier: F6:54:1B:52:63:59:E4:0C:1A:B2:DE:1C:BC:9D:FA:57:39:BD:75:1C
Certificate issuer: /CN=74b33fb20dd557cd0b14edfe10880f0e0d21c529
Certificate serial: 01856C5C9E7449FCF03AC9399130AA460EB6
Authority key identifier: 74:B3:3F:B2:0D:D5:57:CD:0B:14:ED:FE:10:88:0F:0E:0D:21:C5:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLM_sg3VV80LFO3-EIgPDg0hxSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f6ee9d-756f-437e-bc03-e703e94b7beb/1/9lQbUmNZ5Awast4cvJ36Vzm9dRw.roa
Signing time: Sun 01 Jan 2023 08:04:47 +0000
ROA not before: Sun 01 Jan 2023 08:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199484
IP address blocks: 195.142.133.0/24 maxlen: 24
195.142.134.0/24 maxlen: 24
185.28.2.0/24 maxlen: 24
185.28.3.0/24 maxlen: 24
185.28.0.0/22 maxlen: 24
195.142.135.0/24 maxlen: 24
185.28.0.0/24 maxlen: 24
185.28.1.0/24 maxlen: 24
37.75.11.0/24 maxlen: 24
195.142.104.0/24 maxlen: 24
37.75.9.0/24 maxlen: 24
195.142.105.0/24 maxlen: 24
37.75.10.0/24 maxlen: 24
37.75.8.0/24 maxlen: 24
37.75.8.0/21 maxlen: 21
195.142.106.0/24 maxlen: 24
37.75.12.0/24 maxlen: 24
37.75.15.0/24 maxlen: 24
195.142.109.0/24 maxlen: 24
195.142.110.0/24 maxlen: 24
37.75.13.0/24 maxlen: 24
195.142.107.0/24 maxlen: 24
37.75.14.0/24 maxlen: 24
195.142.108.0/24 maxlen: 24
195.142.111.0/24 maxlen: 24
195.142.132.0/24 maxlen: 24
195.142.1.0/24 maxlen: 24
195.142.2.0/24 maxlen: 24
195.142.0.0/24 maxlen: 24
195.142.3.0/24 maxlen: 24
2a03:c040:1::/48 maxlen: 48
2a03:c040::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:5c:9e:74:49:fc:f0:3a:c9:39:91:30:aa:46:0e:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b33fb20dd557cd0b14edfe10880f0e0d21c529
Validity
Not Before: Jan 1 08:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f6541b526359e40c1ab2de1cbc9dfa5739bd751c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7a:0f:9b:4f:ac:b8:f3:b6:6d:a0:d3:24:a6:
70:ae:b4:32:63:d3:4b:58:18:bf:76:c1:56:1f:64:
06:97:0e:a5:1d:20:f5:c9:cb:8a:f5:70:7d:79:61:
f7:4c:fa:2b:67:90:d3:9e:68:df:32:97:c3:66:e5:
66:56:ab:46:9b:78:fd:51:e8:95:3c:01:8e:43:47:
9c:78:e1:2b:97:8d:b1:90:61:6a:63:6d:95:ca:17:
89:87:73:91:7a:6f:1d:55:01:ef:10:76:46:66:f4:
fe:2f:02:69:19:03:54:e3:16:ca:f7:4b:71:2a:4e:
f9:80:f0:6d:ab:8b:1e:7e:66:1f:1b:c3:91:26:34:
0f:29:fe:7e:5f:19:61:be:d0:fb:cc:74:ac:48:8c:
9c:f6:e7:51:96:2a:3d:6b:fc:5b:6b:d0:a1:14:4c:
ff:c3:37:cd:64:13:3c:13:aa:11:7e:a7:02:f3:ea:
72:67:55:0e:5c:c9:a0:f9:3a:f7:5e:fc:41:dc:b9:
79:d3:c5:74:93:cb:a2:63:d1:5d:95:9a:d8:c9:99:
83:dc:9d:e0:34:e2:42:fc:98:4b:51:c5:a0:5d:e5:
1e:3b:d5:17:71:22:95:29:39:ac:c0:4a:e4:f8:cc:
ec:7b:10:fc:8d:9f:e9:22:d0:03:47:c2:cc:5b:bd:
ea:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:54:1B:52:63:59:E4:0C:1A:B2:DE:1C:BC:9D:FA:57:39:BD:75:1C
X509v3 Authority Key Identifier:
keyid:74:B3:3F:B2:0D:D5:57:CD:0B:14:ED:FE:10:88:0F:0E:0D:21:C5:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLM_sg3VV80LFO3-EIgPDg0hxSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f6ee9d-756f-437e-bc03-e703e94b7beb/1/9lQbUmNZ5Awast4cvJ36Vzm9dRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f6ee9d-756f-437e-bc03-e703e94b7beb/1/dLM_sg3VV80LFO3-EIgPDg0hxSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.75.8.0/21
185.28.0.0/22
195.142.0.0/22
195.142.104.0/21
195.142.132.0/22
IPv6:
2a03:c040::/32
Signature Algorithm: sha256WithRSAEncryption
95:4d:45:e6:65:e7:c0:e8:ea:d5:b4:98:2f:9b:76:40:55:ed:
be:81:32:f7:65:2d:2c:6c:c2:25:af:c8:25:9b:8f:bb:02:94:
e9:1f:97:36:ae:28:f3:e5:cd:e5:e1:1d:2a:21:47:68:86:2c:
f7:85:78:d9:fd:85:84:f1:aa:26:80:e3:6f:a0:7e:08:de:5f:
ab:27:8a:1b:a6:e1:e9:2b:b4:9e:4c:ff:6d:39:50:5f:fb:22:
97:78:3f:56:a9:d7:47:36:9c:17:fd:fb:cb:3e:f0:ce:73:9f:
e8:93:f9:b7:a0:e1:3f:fb:1a:09:13:6c:4b:7f:eb:88:c0:34:
e2:bf:c3:a4:bd:2c:4e:82:82:21:d1:55:f5:ec:23:1b:ad:7d:
ce:15:2b:e6:a9:7b:ce:70:69:98:2e:3e:d9:f4:fc:95:65:67:
93:82:f8:21:18:21:38:9e:06:7b:d8:f3:39:60:e1:c4:ab:02:
c6:cd:54:a1:5b:22:13:bf:39:59:9b:77:c1:ae:05:09:7a:b5:
18:53:50:a5:5b:d3:b6:21:d6:d1:05:95:4b:7f:0b:2f:bc:7e:
d0:21:db:47:2e:5f:68:e9:0f:52:f3:9b:45:18:3a:a5:31:60:
54:8d:c8:35:05:5f:1f:c4:7a:52:0e:71:e4:70:48:c8:2c:61:
a4:b3:8d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:01:20 2024 by rpki-client on console-ams.rpki-client.org