Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/9jnM26osg4nZOXeQ3oZf5CWVdS8.roa
File: 9jnM26osg4nZOXeQ3oZf5CWVdS8.roa (raw, json)
Hash identifier: UF0zVG8OTSfNEqLz4s3PENknC2nMymF18NTR8MS8G4Q=
Subject key identifier: F6:39:CC:DB:AA:2C:83:89:D9:39:77:90:DE:86:5F:E4:25:95:75:2F
Certificate issuer: /CN=efad344eb5f7eb1dee4b8f8435fb5b9d87663e9d
Certificate serial: 018CCEB291D3C92312E6F322274F47A36E09
Authority key identifier: EF:AD:34:4E:B5:F7:EB:1D:EE:4B:8F:84:35:FB:5B:9D:87:66:3E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7600TrX36x3uS4-ENftbnYdmPp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/9jnM26osg4nZOXeQ3oZf5CWVdS8.roa
Signing time: Wed 03 Jan 2024 09:40:58 +0000
ROA not before: Wed 03 Jan 2024 09:40:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12479
IP address blocks: 93.117.88.0/21 maxlen: 21
93.117.88.0/22 maxlen: 22
149.74.1.0/24 maxlen: 24
149.74.0.0/24 maxlen: 24
149.74.0.0/22 maxlen: 22
149.74.0.0/16 maxlen: 16
149.74.16.0/22 maxlen: 22
145.1.232.0/21 maxlen: 21
145.1.228.0/22 maxlen: 22
145.1.240.0/20 maxlen: 20
145.1.192.0/20 maxlen: 20
145.1.208.0/20 maxlen: 20
145.1.224.0/22 maxlen: 22
145.1.128.0/19 maxlen: 19
145.1.128.0/17 maxlen: 17
107.183.128.0/17 maxlen: 17
145.1.160.0/19 maxlen: 19
113.203.128.0/18 maxlen: 18
149.74.102.0/23 maxlen: 23
149.74.100.0/23 maxlen: 23
149.74.104.0/23 maxlen: 23
149.74.106.0/23 maxlen: 23
149.74.108.0/23 maxlen: 23
149.74.110.0/23 maxlen: 23
149.74.112.0/21 maxlen: 21
1.178.224.0/21 maxlen: 21
1.178.224.0/19 maxlen: 19
1.178.232.0/21 maxlen: 21
149.74.120.0/21 maxlen: 21
149.74.128.0/22 maxlen: 22
149.74.132.0/22 maxlen: 22
109.205.130.0/23 maxlen: 23
109.205.128.0/21 maxlen: 21
109.205.128.0/23 maxlen: 23
109.205.128.0/22 maxlen: 22
109.205.132.0/22 maxlen: 22
109.205.132.0/23 maxlen: 23
109.205.134.0/23 maxlen: 23
149.74.134.0/24 maxlen: 24
1.178.240.0/21 maxlen: 21
149.74.136.0/22 maxlen: 22
1.178.248.0/21 maxlen: 21
149.74.140.0/22 maxlen: 22
149.74.144.0/22 maxlen: 22
149.74.152.0/21 maxlen: 21
149.74.148.0/22 maxlen: 22
149.74.160.0/22 maxlen: 22
149.74.164.0/22 maxlen: 22
149.74.168.0/22 maxlen: 22
149.74.170.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ce:b2:91:d3:c9:23:12:e6:f3:22:27:4f:47:a3:6e:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efad344eb5f7eb1dee4b8f8435fb5b9d87663e9d
Validity
Not Before: Jan 3 09:40:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f639ccdbaa2c8389d9397790de865fe42595752f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:4f:4b:ec:a7:84:dc:c9:ca:13:61:3c:62:4c:
82:97:42:25:b0:30:dc:7f:84:59:20:75:5d:0e:71:
45:4a:eb:ac:5d:60:0d:a6:ed:c6:9b:5a:7b:11:a8:
e5:3e:32:27:49:cb:69:16:f8:f7:4b:45:9c:b0:df:
44:7a:e4:71:4d:97:60:65:ef:b0:34:2f:d6:c5:54:
09:c6:9d:c3:8f:63:de:74:67:79:1c:fe:e8:00:a6:
75:14:bc:da:c0:42:ee:a4:07:21:03:da:87:00:bb:
7f:76:bf:ed:49:a5:4d:c3:c6:c5:69:65:51:12:35:
6d:61:01:0b:aa:91:09:b2:93:fc:96:a6:fe:b0:70:
7f:91:34:aa:51:d0:62:cf:33:ee:d9:4f:f7:be:08:
14:1e:13:1a:c9:04:a7:e2:b7:25:d8:0c:2c:73:69:
6e:a7:e3:00:80:7e:04:60:47:30:56:3c:1c:f9:b3:
ee:80:e2:89:cd:0f:2f:05:6d:1a:f4:ca:55:24:b8:
f2:2a:89:10:e3:eb:f0:f8:59:2a:13:8e:74:4e:54:
b4:64:f9:fc:3e:40:c9:f7:ec:28:4f:97:f0:19:65:
d5:63:a6:d9:83:d5:7f:72:96:e4:a4:df:8c:99:ff:
b3:0a:13:18:4a:26:91:24:3d:c1:d8:b9:ec:b8:e2:
3c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:39:CC:DB:AA:2C:83:89:D9:39:77:90:DE:86:5F:E4:25:95:75:2F
X509v3 Authority Key Identifier:
keyid:EF:AD:34:4E:B5:F7:EB:1D:EE:4B:8F:84:35:FB:5B:9D:87:66:3E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7600TrX36x3uS4-ENftbnYdmPp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/9jnM26osg4nZOXeQ3oZf5CWVdS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/7600TrX36x3uS4-ENftbnYdmPp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.178.224.0/19
93.117.88.0/21
107.183.128.0/17
109.205.128.0/21
113.203.128.0/18
145.1.128.0/17
149.74.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a7:64:6b:63:73:63:b8:f9:99:87:50:f8:4d:45:51:22:f6:96:
d5:d9:5e:88:a2:25:da:f6:39:5c:64:13:3b:b1:c6:bb:54:a2:
bd:45:31:c3:89:b2:34:11:13:db:5b:58:4e:ef:5e:45:a7:1d:
a2:41:27:04:cc:ce:54:81:19:ba:76:4c:f9:62:e9:8e:16:13:
99:29:cc:66:99:68:c0:2a:45:70:51:05:bc:f9:92:4f:b2:65:
82:24:d1:3a:54:31:23:a0:e6:0c:7f:76:67:c6:64:1f:c6:8d:
ec:56:b7:5f:a2:3e:b5:54:2e:46:ec:d2:de:47:7e:74:56:53:
b0:83:36:f1:38:af:9b:3e:91:87:ef:67:db:7b:34:c8:e6:00:
e8:d3:aa:f2:d7:df:41:d6:45:e0:9d:87:e1:84:aa:32:14:9e:
be:89:25:43:f6:f9:7e:80:56:7c:3c:46:61:cf:bb:ed:3a:b6:
dc:73:ed:f3:8d:aa:04:8b:40:28:88:75:be:4f:bf:cd:1e:4b:
4a:c8:6c:9e:bb:b9:82:8a:b4:26:00:0c:b1:16:d3:56:95:47:
71:18:50:be:d1:e0:e6:1b:9c:d5:41:1d:1c:45:5c:0a:85:3f:
6e:8e:44:c2:3d:bb:68:fc:42:48:5b:d1:e3:d4:1c:c8:01:b9:
9e:e7:f2:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 3 18:36:46 2024 by rpki-client on console-ams.rpki-client.org