Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/awNKU0CwgBgdFSrJ9zAM5SoM6j4.roa
File: awNKU0CwgBgdFSrJ9zAM5SoM6j4.roa (raw, json)
Hash identifier: EikU/oknF4tx12T9LBglEybnD//HRIg758Xh/m6Wslw=
Subject key identifier: 6B:03:4A:53:40:B0:80:18:1D:15:2A:C9:F7:30:0C:E5:2A:0C:EA:3E
Certificate issuer: /CN=34f47b73ee8fbedd25f41b3b17b2be08f5bf6563
Certificate serial: 018ABD6489F4B14AC82FCDECA584F9916E7A
Authority key identifier: 34:F4:7B:73:EE:8F:BE:DD:25:F4:1B:3B:17:B2:BE:08:F5:BF:65:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/awNKU0CwgBgdFSrJ9zAM5SoM6j4.roa
Signing time: Fri 22 Sep 2023 14:56:37 +0000
ROA not before: Fri 22 Sep 2023 14:56:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15734
IP address blocks: 217.15.42.0/24 maxlen: 24
217.15.46.0/24 maxlen: 24
88.84.64.0/19 maxlen: 24
88.84.80.0/24 maxlen: 24
88.84.82.0/24 maxlen: 24
88.84.93.0/24 maxlen: 24
88.84.92.0/24 maxlen: 24
185.117.178.0/24 maxlen: 24
185.117.179.0/24 maxlen: 24
185.117.176.0/24 maxlen: 24
217.15.32.0/20 maxlen: 24
217.149.144.0/20 maxlen: 24
95.142.0.0/20 maxlen: 24
95.142.3.0/24 maxlen: 24
217.149.148.0/22 maxlen: 24
95.142.8.0/24 maxlen: 24
95.142.10.0/24 maxlen: 24
217.149.157.0/24 maxlen: 24
217.149.156.0/24 maxlen: 24
95.142.13.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:bd:64:89:f4:b1:4a:c8:2f:cd:ec:a5:84:f9:91:6e:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f47b73ee8fbedd25f41b3b17b2be08f5bf6563
Validity
Not Before: Sep 22 14:56:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b034a5340b080181d152ac9f7300ce52a0cea3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:84:e9:9a:f6:6e:80:b0:3e:53:a9:26:c2:eb:
2d:dc:f5:bf:26:d6:c2:f4:3c:29:a7:e9:9e:1e:c4:
c9:dd:29:48:b4:f5:e1:99:1d:66:a9:2e:43:90:e5:
92:0f:51:a9:77:26:a6:0a:43:4f:f9:c6:38:68:0f:
60:cb:7c:5e:60:a8:be:9a:0b:bf:cd:26:e2:27:a4:
c4:f6:e2:00:40:71:2d:82:4d:ca:80:72:27:55:3f:
36:16:48:aa:d1:b5:23:4c:bc:b3:b3:79:1a:eb:b3:
3f:b0:a1:91:d2:c7:15:c5:91:e0:11:fb:6a:10:2c:
35:94:de:ef:b6:89:c0:87:bd:47:6b:7b:9f:5a:02:
cd:53:fc:9f:64:06:b7:54:55:2a:ef:2b:53:53:48:
85:02:87:a1:1e:2f:02:d8:4b:84:7f:24:63:9a:a0:
1c:a7:9b:e1:51:53:da:74:4e:b1:a2:7f:60:b1:f6:
c1:61:30:b9:72:37:bf:a4:88:2e:05:e0:79:f1:f3:
b2:eb:2d:1b:f1:2e:a7:5a:88:f9:0e:80:08:8a:e8:
47:7a:38:b9:8a:45:5f:e2:df:f9:91:ad:96:b8:5b:
50:c8:68:a7:f5:53:e6:be:30:ce:a8:1b:9b:30:a1:
08:87:5a:02:68:0c:80:63:15:4c:00:62:35:9c:05:
c6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:03:4A:53:40:B0:80:18:1D:15:2A:C9:F7:30:0C:E5:2A:0C:EA:3E
X509v3 Authority Key Identifier:
keyid:34:F4:7B:73:EE:8F:BE:DD:25:F4:1B:3B:17:B2:BE:08:F5:BF:65:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/awNKU0CwgBgdFSrJ9zAM5SoM6j4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.84.64.0/19
95.142.0.0/20
185.117.176.0/24
185.117.178.0/23
217.15.32.0/20
217.149.144.0/20
Signature Algorithm: sha256WithRSAEncryption
12:e4:7d:ec:ee:10:50:28:81:1c:a1:ab:3f:ca:55:fb:ec:32:
6a:02:51:45:fe:21:30:97:a2:8d:a6:3b:b6:a1:b6:87:8b:2c:
e6:bc:ab:41:59:95:0b:61:ee:34:7c:65:d3:ca:cd:6b:b4:7e:
eb:62:4a:96:08:99:df:99:5a:88:4e:00:3f:b9:7f:65:58:45:
83:9d:d5:2d:32:46:d7:5a:0f:8c:9a:38:c0:90:a3:90:89:5e:
48:a3:e4:0d:36:10:0f:66:91:e9:89:03:8d:d1:3c:91:78:4f:
cf:1c:22:c3:dd:09:71:08:70:48:4f:5c:c3:f7:a2:d2:7f:21:
42:ee:2f:18:58:84:bf:74:9c:c9:e6:60:26:b5:27:21:75:0f:
1a:aa:21:2d:3f:ea:a8:7c:5e:34:c1:2d:fa:fa:3f:2b:58:c7:
47:21:9c:ac:81:66:5a:6f:20:a1:c9:53:5a:93:1b:a7:fe:33:
fb:50:66:e9:65:81:51:d9:b4:15:9c:72:4b:77:22:1c:cf:6c:
3f:13:c5:42:56:da:24:3b:6b:4a:e0:a8:c8:32:be:15:09:57:
dd:36:51:d2:9f:b4:d3:d7:70:50:d3:60:c0:70:a5:06:1f:a6:
83:4d:e0:ac:8e:ef:7c:97:45:3e:c7:6e:b2:0f:0d:60:3c:77:
25:7d:8a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:22:17 2024 by rpki-client on console-ams.rpki-client.org