Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/Af-mc6E5G0Ca1azd8QR9AaK-Xnw.roa
File: Af-mc6E5G0Ca1azd8QR9AaK-Xnw.roa (raw, json)
Hash identifier: IgcvAlglB+vKaLPgVP15B0sU7klSSAZU1vaL2mO51ms=
Subject key identifier: 01:FF:A6:73:A1:39:1B:40:9A:D5:AC:DD:F1:04:7D:01:A2:BE:5E:7C
Certificate issuer: /CN=126c660b30f5692b2b16e289b24901c518fda520
Certificate serial: 018703DED57255A5D028DF4B6A8C5B10BB12
Authority key identifier: 12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/Af-mc6E5G0Ca1azd8QR9AaK-Xnw.roa
Signing time: Tue 21 Mar 2023 11:12:27 +0000
ROA not before: Tue 21 Mar 2023 11:12:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 192.144.52.0/22 maxlen: 24
193.187.168.0/22 maxlen: 24
193.9.36.0/22 maxlen: 24
185.220.28.0/22 maxlen: 24
193.9.40.0/22 maxlen: 24
45.83.112.0/22 maxlen: 24
194.39.68.0/22 maxlen: 24
185.181.56.0/22 maxlen: 24
80.254.236.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:03:de:d5:72:55:a5:d0:28:df:4b:6a:8c:5b:10:bb:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=126c660b30f5692b2b16e289b24901c518fda520
Validity
Not Before: Mar 21 11:12:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=01ffa673a1391b409ad5acddf1047d01a2be5e7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:39:d4:f1:60:94:55:c3:c9:bc:61:3f:d5:af:
3d:3d:52:5b:7f:9b:71:de:59:fd:47:d0:e2:d1:2d:
92:14:02:f6:f3:3a:7b:eb:d9:b1:03:d3:c3:f1:04:
9c:0a:ff:b5:8b:20:65:5c:2b:53:b5:dc:43:69:76:
5e:e4:ac:49:68:d0:41:4a:97:4c:b0:c0:c0:4a:8c:
ce:67:bd:1c:07:05:36:dc:0f:7d:23:3d:ec:9f:49:
a8:9e:11:72:be:2c:34:78:46:33:ff:f1:4c:f7:7b:
9e:1d:e4:f0:b9:30:02:45:d3:09:a0:f5:7c:5c:1c:
2a:f9:4f:de:bb:d8:61:80:9d:e7:51:3d:ff:19:19:
34:41:d6:80:d8:62:42:bf:09:ce:bb:17:79:4b:b1:
22:c8:51:d3:8a:94:56:8b:5e:25:57:23:9e:d4:6b:
eb:93:8b:b3:a8:a4:13:73:cc:ab:9b:b5:f5:3e:c6:
eb:5d:fb:bd:40:8e:83:30:9e:40:ca:d2:13:8c:d9:
d8:9b:ec:8c:3f:93:11:50:00:32:70:2a:a9:3f:97:
06:0f:1e:ea:21:eb:ec:94:33:ac:52:b4:3f:19:a5:
c7:a6:fd:8a:21:a5:99:f5:c7:2e:0f:b6:e4:3a:66:
d8:80:50:62:31:9e:fd:bc:fb:57:57:df:e5:c4:51:
60:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:FF:A6:73:A1:39:1B:40:9A:D5:AC:DD:F1:04:7D:01:A2:BE:5E:7C
X509v3 Authority Key Identifier:
keyid:12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/Af-mc6E5G0Ca1azd8QR9AaK-Xnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.112.0/22
80.254.236.0/22
185.181.56.0/22
185.220.28.0/22
192.144.52.0/22
193.9.36.0-193.9.43.255
193.187.168.0/22
194.39.68.0/22
Signature Algorithm: sha256WithRSAEncryption
c5:de:35:6c:1a:21:fe:e4:0e:a0:a8:91:a8:52:33:22:9d:e9:
07:5f:9e:2c:ef:78:01:9e:de:27:bf:ad:4f:93:d9:f1:05:7f:
56:25:b4:f3:d9:e6:94:76:54:da:16:c2:81:b6:1b:3a:8c:5e:
68:32:94:45:7b:30:3b:e4:52:99:5a:1d:3a:a9:b6:fb:52:d9:
05:30:1a:a1:10:3e:45:7f:74:71:7f:e6:5b:a1:de:0b:a0:14:
d5:bb:fd:ca:ff:7d:3e:85:8a:01:10:f8:a6:32:38:93:40:55:
9b:c7:6d:95:43:84:01:4e:2b:2b:82:c1:9b:e0:1c:d3:2f:5b:
06:8a:f9:bc:83:ad:48:18:a6:2f:e0:09:6c:a2:c1:fc:37:06:
c2:61:c8:9b:4a:a2:87:79:b4:ad:12:87:e0:0a:73:38:63:07:
34:65:20:25:4a:06:44:f9:d4:95:9d:c6:b1:92:b1:7a:45:b5:
9a:20:50:65:79:ff:59:22:c8:c1:b0:22:5f:23:ac:94:f3:0e:
3f:73:84:de:73:3a:a1:53:f6:7a:29:7e:f7:41:1c:31:a3:ac:
69:f9:43:44:c4:4f:dd:ce:4a:5c:0a:7e:d0:e3:fc:ca:51:87:
aa:8d:c8:da:2f:f0:88:f7:5c:17:75:44:b0:b4:99:41:86:ff:
2b:f0:0d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:10 2023 by rpki-client on console-ams.rpki-client.org