Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/nIlbFZ6jTD7qOfJltIaEZeVHh30.roa
File: nIlbFZ6jTD7qOfJltIaEZeVHh30.roa (raw, json)
Hash identifier: GNnR3Rna3LaJcJkreweLGPrD/fA8YZwXzRyQ3fYmURE=
Subject key identifier: 9C:89:5B:15:9E:A3:4C:3E:EA:39:F2:65:B4:86:84:65:E5:47:87:7D
Certificate issuer: /CN=053d04e72bb249c79eb1168cf1d43a3ca548c206
Certificate serial: 018866E6D82767CFDCC98B68B85A36B3585B
Authority key identifier: 05:3D:04:E7:2B:B2:49:C7:9E:B1:16:8C:F1:D4:3A:3C:A5:48:C2:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BT0E5yuySceesRaM8dQ6PKVIwgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/nIlbFZ6jTD7qOfJltIaEZeVHh30.roa
Signing time: Mon 29 May 2023 09:46:24 +0000
ROA not before: Mon 29 May 2023 09:46:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29422
IP address blocks: 194.29.192.0/21 maxlen: 21
217.30.176.0/20 maxlen: 20
83.150.64.0/18 maxlen: 18
77.91.212.0/22 maxlen: 22
81.17.192.0/21 maxlen: 21
83.145.192.0/18 maxlen: 18
109.75.224.0/21 maxlen: 21
217.149.48.0/20 maxlen: 20
194.79.16.0/22 maxlen: 22
94.101.0.0/20 maxlen: 20
188.117.0.0/18 maxlen: 18
185.123.116.0/22 maxlen: 22
193.104.38.0/24 maxlen: 24
80.69.160.0/21 maxlen: 21
77.86.128.0/17 maxlen: 17
213.157.64.0/19 maxlen: 19
80.69.168.0/22 maxlen: 22
2a01:51c0::/29 maxlen: 29
2001:1bc8::/32 maxlen: 32
2a01:51c1::/32 maxlen: 32
2001:1bc8::/29 maxlen: 29
2a01:51c0::/32 maxlen: 32
2001:67c:70::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:66:e6:d8:27:67:cf:dc:c9:8b:68:b8:5a:36:b3:58:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=053d04e72bb249c79eb1168cf1d43a3ca548c206
Validity
Not Before: May 29 09:46:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c895b159ea34c3eea39f265b4868465e547877d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a2:4b:23:84:34:da:48:a3:95:93:b7:19:e3:
57:30:57:7e:5c:0c:0a:be:64:5b:7c:f9:7c:c3:ea:
83:65:c6:3d:ee:43:fb:bd:7b:59:b7:1c:53:95:33:
38:9a:20:c8:56:33:74:f8:f8:66:20:c1:57:0d:a5:
e9:c0:27:0e:a0:66:db:08:50:2e:cb:6e:b7:40:ed:
4d:2a:e7:7e:18:98:73:44:01:60:9c:29:85:95:d6:
72:b5:ea:72:ee:ea:27:d4:03:5e:02:8d:04:d7:4a:
49:55:d4:bc:48:ba:44:66:14:d0:cf:a9:e7:06:cb:
5e:3a:f8:5c:fe:e8:18:f7:3d:27:c3:5d:71:32:5d:
48:bf:0d:3d:fc:15:53:d4:64:e6:64:6e:f0:b4:ce:
94:7f:46:c8:ad:3b:d6:4e:f4:9a:50:97:20:b9:9d:
a3:f6:02:50:7c:9c:86:3c:76:ae:a1:07:75:5d:31:
49:5d:e8:2a:b6:39:6a:6b:a8:46:c1:5f:ae:f8:3e:
32:07:6b:e8:a4:12:51:58:5e:bd:2f:04:a0:9e:5a:
d6:83:d9:98:e1:89:f6:1e:0b:93:7d:56:a9:98:e1:
2a:0b:d2:52:e8:c6:82:47:f0:d2:3b:21:5a:53:dc:
e4:a6:fd:c9:ec:6f:5c:76:30:f4:0e:8a:58:5b:3b:
5f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:89:5B:15:9E:A3:4C:3E:EA:39:F2:65:B4:86:84:65:E5:47:87:7D
X509v3 Authority Key Identifier:
keyid:05:3D:04:E7:2B:B2:49:C7:9E:B1:16:8C:F1:D4:3A:3C:A5:48:C2:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BT0E5yuySceesRaM8dQ6PKVIwgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/nIlbFZ6jTD7qOfJltIaEZeVHh30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.86.128.0/17
77.91.212.0/22
80.69.160.0-80.69.171.255
81.17.192.0/21
83.145.192.0/18
83.150.64.0/18
94.101.0.0/20
109.75.224.0/21
185.123.116.0/22
188.117.0.0/18
193.104.38.0/24
194.29.192.0/21
194.79.16.0/22
213.157.64.0/19
217.30.176.0/20
217.149.48.0/20
IPv6:
2001:67c:70::/48
2001:1bc8::/29
2a01:51c0::/29
Signature Algorithm: sha256WithRSAEncryption
70:a3:10:89:8d:03:09:de:c5:76:6e:90:01:1e:4c:58:ba:d8:
d4:2d:f3:f4:0b:d4:d8:64:1b:cb:8e:bd:c0:53:9c:66:af:e0:
c6:4f:5c:e1:b2:9a:46:b9:e9:fa:01:70:ac:94:79:01:d7:e0:
8b:f0:cf:57:e0:ed:74:fe:fd:86:1b:5f:eb:eb:a5:0a:aa:09:
af:f6:ed:21:28:74:41:8a:47:2f:bd:a9:0b:92:9b:f5:16:21:
6a:21:5c:94:62:10:d6:7b:c4:ad:75:0f:90:47:c0:b7:ca:e9:
90:7b:a5:17:d5:e1:38:ce:0c:84:a8:4f:25:da:e1:d0:af:4a:
2c:42:ae:58:83:15:98:91:3a:73:c1:d4:6e:55:a5:5c:0e:1b:
5b:64:95:03:0e:ff:ca:e9:6f:8e:1c:88:1a:bf:c4:67:ab:dd:
b0:77:81:dd:ba:f9:7e:fb:2b:3f:cb:1e:cb:d0:12:2a:e4:f6:
fa:4e:a2:67:6e:94:b3:8d:6c:4a:f4:d9:8f:17:1a:53:8d:1e:
b8:8e:2e:91:c1:d2:c7:25:1a:21:9f:c7:f0:e2:78:4a:82:4c:
00:04:72:4c:57:7e:73:b6:6d:a3:b6:ea:ee:f5:f6:aa:13:2e:
d6:ef:d8:44:74:93:e6:a5:c5:dc:a3:f8:b1:15:21:9f:fa:33:
92:0c:a2:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:12 2023 by rpki-client on console-fra.rpki-client.org