Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/ccimPg912qv3Q5TGg5PFjCsqhmo.roa
File: ccimPg912qv3Q5TGg5PFjCsqhmo.roa (raw, json)
Hash identifier: BGSD/cd20pIvfcbjqoxnGFZkNp1/Y01YXXLwpF/DgmY=
Subject key identifier: 71:C8:A6:3E:0F:75:DA:AB:F7:43:94:C6:83:93:C5:8C:2B:2A:86:6A
Certificate issuer: /CN=0bac82804700ad36538bf86f34c073e971430da5
Certificate serial: 0185737181E0F6467A4349BB741CC419ABF8
Authority key identifier: 0B:AC:82:80:47:00:AD:36:53:8B:F8:6F:34:C0:73:E9:71:43:0D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/ccimPg912qv3Q5TGg5PFjCsqhmo.roa
Signing time: Mon 02 Jan 2023 17:04:56 +0000
ROA not before: Mon 02 Jan 2023 17:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8674
IP address blocks: 213.32.232.0/21 maxlen: 21
194.58.192.0/22 maxlen: 22
194.58.192.0/24 maxlen: 24
194.58.195.0/24 maxlen: 24
194.58.196.0/24 maxlen: 24
194.58.197.0/24 maxlen: 24
194.58.198.0/24 maxlen: 24
194.58.193.0/24 maxlen: 24
194.58.194.0/24 maxlen: 24
194.58.194.0/23 maxlen: 23
194.58.199.0/24 maxlen: 24
194.146.105.0/24 maxlen: 24
194.146.106.0/24 maxlen: 24
194.146.106.0/23 maxlen: 24
194.146.107.0/24 maxlen: 24
212.237.196.0/22 maxlen: 22
212.237.194.0/24 maxlen: 24
212.237.195.0/24 maxlen: 24
185.42.136.0/23 maxlen: 23
77.72.224.0/21 maxlen: 21
2001:67c:1011::/48 maxlen: 48
2001:67c:1010::/48 maxlen: 48
2001:67c:1010::/47 maxlen: 47
2a01:3f1:3000::/38 maxlen: 38
2a01:3f1::/32 maxlen: 32
2a01:3f1:5000::/38 maxlen: 38
2a01:3f1:a000::/38 maxlen: 38
2a01:3f1:400::/38 maxlen: 38
2a01:3f1:f000::/36 maxlen: 48
2a01:3f1:c000::/38 maxlen: 38
2a01:3f1:800::/38 maxlen: 38
2a01:3f1::/38 maxlen: 38
2a01:3f1:8000::/38 maxlen: 38
2a01:3f0::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:71:81:e0:f6:46:7a:43:49:bb:74:1c:c4:19:ab:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bac82804700ad36538bf86f34c073e971430da5
Validity
Not Before: Jan 2 17:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=71c8a63e0f75daabf74394c68393c58c2b2a866a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ef:5e:83:69:e5:12:7a:a3:ae:fe:2a:e4:e9:
91:62:bc:19:85:21:57:ab:de:01:93:0c:ac:4d:f5:
13:5e:8e:7f:bd:f6:43:73:51:21:c4:ec:d3:35:56:
1d:af:c3:e7:19:f9:84:09:5b:b3:e1:37:17:38:56:
59:22:a1:76:0a:b9:e6:b1:c6:d1:59:3e:5b:1a:f1:
5d:04:5c:ed:9f:3e:4c:d4:73:6f:c9:4b:89:28:91:
a8:b9:6d:26:2f:e4:5d:1f:bd:c7:f3:5c:55:c7:07:
16:97:fd:d4:64:fa:30:c1:3b:d7:9b:b1:0f:c7:62:
83:7e:b2:a7:a2:b5:23:8b:64:c9:91:d3:c3:85:98:
a2:4b:99:0b:d9:0e:1d:8c:fa:01:a6:c4:08:6b:73:
81:ad:4e:22:5c:c9:a3:1b:f2:76:f6:60:21:5f:45:
fd:bb:01:61:fd:cc:ff:13:44:d5:4e:58:a2:c4:5e:
97:60:3e:9b:4c:96:3d:e7:45:a8:c9:b1:32:71:36:
09:3c:ab:d7:64:cd:3b:7e:f3:4c:95:8e:a1:47:8f:
90:ce:c7:14:45:2b:10:43:4f:ba:e6:03:69:2e:ef:
79:72:97:d3:63:a4:db:ac:44:50:b9:ba:76:88:b4:
48:69:34:7d:7b:c5:f2:42:f1:7b:2f:ce:94:2b:55:
b1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C8:A6:3E:0F:75:DA:AB:F7:43:94:C6:83:93:C5:8C:2B:2A:86:6A
X509v3 Authority Key Identifier:
keyid:0B:AC:82:80:47:00:AD:36:53:8B:F8:6F:34:C0:73:E9:71:43:0D:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/ccimPg912qv3Q5TGg5PFjCsqhmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.72.224.0/21
185.42.136.0/23
194.58.192.0/21
194.146.105.0-194.146.107.255
212.237.194.0-212.237.199.255
213.32.232.0/21
IPv6:
2001:67c:1010::/47
2a01:3f0::/31
Signature Algorithm: sha256WithRSAEncryption
3b:ed:03:f9:67:00:c1:26:76:01:3f:6f:fb:38:07:ea:38:8c:
76:cf:3d:5d:2f:b1:44:00:f2:23:a3:77:17:72:5a:96:9b:b6:
43:6f:8d:29:79:84:7f:2d:c8:40:99:ff:72:89:f1:65:1b:e9:
a9:b6:bd:4a:5c:82:a7:d1:e2:74:33:3c:04:a5:31:1c:a7:96:
e1:b8:2f:c4:fd:cf:cf:d7:85:19:79:0f:6c:e3:09:e4:19:25:
03:ad:7e:88:39:7b:25:76:54:10:e1:a1:87:71:4a:20:e1:1c:
0a:f6:ac:81:37:e6:e9:ec:1b:be:29:55:20:2a:61:91:2f:12:
7d:1d:4a:fe:76:4d:a6:11:d3:78:ec:77:40:5f:a5:ad:e3:7c:
b8:44:48:43:e6:90:26:c1:4b:51:80:d5:c4:5c:75:8c:72:71:
f3:68:98:4b:4d:a1:00:fa:0b:21:21:b6:08:23:5b:37:b4:28:
6a:d8:eb:66:12:69:74:e5:eb:de:11:c2:87:f4:fc:0a:2f:ae:
c2:d7:e5:d0:cb:0b:e6:7d:ef:11:ff:5e:a2:9e:3b:0e:c6:4c:
db:2d:5d:0b:b4:6d:d9:11:57:54:56:f5:37:f1:b8:49:9e:f3:
e8:f8:03:6f:f5:40:4f:ff:c5:bc:ad:3d:04:bf:5f:f4:5f:65:
e7:ea:2c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:40 2023 by rpki-client on console-ams.rpki-client.org