Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/bD00kfZPqVnO3ox6qWrzmXJvCB8.roa
File: bD00kfZPqVnO3ox6qWrzmXJvCB8.roa (raw, json)
Hash identifier: TILfLrpF+fn4buu75/B2wVRFrHJ+a1QFYaavPLvWHCg=
Subject key identifier: 6C:3D:34:91:F6:4F:A9:59:CE:DE:8C:7A:A9:6A:F3:99:72:6F:08:1F
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 01865105156C2629912C16E013E5E9632EF6
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/bD00kfZPqVnO3ox6qWrzmXJvCB8.roa
Signing time: Tue 14 Feb 2023 17:42:13 +0000
ROA not before: Tue 14 Feb 2023 17:42:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60800
IP address blocks: 91.210.100.0/22 maxlen: 24
103.82.0.0/22 maxlen: 24
192.145.55.0/24 maxlen: 24
185.42.16.0/22 maxlen: 24
125.62.72.0/22 maxlen: 24
185.17.172.0/22 maxlen: 24
185.222.112.0/22 maxlen: 24
2a03:ec40::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 13 Oct 2023 15:56:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:51:05:15:6c:26:29:91:2c:16:e0:13:e5:e9:63:2e:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Feb 14 17:42:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6c3d3491f64fa959cede8c7aa96af399726f081f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:89:f9:aa:0e:b7:5f:31:b0:29:a8:77:e3:cb:
bd:61:13:3e:06:04:ea:68:8d:4a:e4:0f:92:aa:86:
4d:bc:08:18:5a:fe:e5:4c:cf:47:8e:2e:40:a9:c9:
5f:cf:34:90:3c:c0:fc:ec:f6:a9:a3:62:b4:42:78:
e2:1a:ba:c7:55:2e:89:d8:50:11:33:d8:df:00:91:
58:16:45:67:57:ec:5f:2e:27:04:2e:3a:bd:71:31:
57:ee:91:3d:95:fb:a4:32:61:40:23:f5:a1:87:fc:
0b:67:1e:bc:76:69:7e:f6:ab:9f:56:a0:34:5d:23:
8a:e5:6b:25:52:ac:24:41:08:84:33:bf:4e:6d:86:
8c:48:5f:76:e9:ab:32:23:67:11:bb:ff:77:42:60:
37:55:e4:3b:2e:11:82:27:d7:25:dd:2a:56:79:93:
b8:7b:f8:9c:a5:a1:e7:d5:5a:ee:a9:f3:ec:20:32:
da:e6:39:8e:04:1a:4d:b0:d3:27:23:cc:fb:94:36:
97:12:ca:8c:42:4d:cd:e5:01:70:30:6d:75:11:d5:
a3:7b:3b:67:ea:88:bd:62:4a:45:9d:63:3b:c8:2d:
a5:e6:25:12:fd:a3:45:b5:f0:ed:5b:00:3e:e5:72:
f3:a3:16:33:be:b8:bc:8e:16:4b:76:f3:f8:81:c0:
ca:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:3D:34:91:F6:4F:A9:59:CE:DE:8C:7A:A9:6A:F3:99:72:6F:08:1F
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/bD00kfZPqVnO3ox6qWrzmXJvCB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.210.100.0/22
103.82.0.0/22
125.62.72.0/22
185.17.172.0/22
185.42.16.0/22
185.222.112.0/22
192.145.55.0/24
IPv6:
2a03:ec40::/29
Signature Algorithm: sha256WithRSAEncryption
64:7a:df:61:72:94:7e:b2:8a:28:8a:b8:66:f7:34:f4:d5:21:
b2:72:fb:f7:bd:11:38:ec:97:65:ec:8b:3d:1c:d3:c9:b1:0f:
f0:5f:59:3a:83:24:ed:cc:23:ac:20:5a:8c:63:62:23:b5:64:
7d:c4:59:1c:c0:fb:62:d1:47:4a:3b:e0:1f:e5:8f:bd:6b:5d:
d9:ce:e7:06:ba:83:83:a9:05:f8:40:8d:cd:32:6f:a0:6b:c6:
dc:af:6f:e2:68:d6:0f:25:d7:41:02:2f:ed:8d:9f:93:c6:2c:
9c:6b:e8:48:cd:f6:82:01:8d:ba:76:13:32:dd:04:31:55:79:
0c:e2:8e:19:ce:b9:b1:bf:8d:86:f6:fd:c8:f2:28:7a:78:17:
e6:af:c1:c2:62:e4:6f:52:1b:0a:31:53:f8:27:29:14:03:bf:
5a:cc:d9:54:a7:fd:81:e9:34:01:f0:42:b1:6c:81:51:a4:37:
4f:98:6f:c3:6c:3a:7f:bc:e3:43:13:52:5d:3b:e5:d2:e9:47:
de:f2:a3:43:11:9c:0e:c7:a2:69:82:60:61:bc:36:0b:db:80:
2d:b6:e6:26:6d:7a:89:8e:9e:fc:c0:36:01:2a:1b:32:9a:e1:
5f:07:0e:3e:72:71:e5:dd:a1:cf:6c:b3:3f:a4:1f:84:90:60:
ab:f1:b9:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:08 2024 by rpki-client on console-ams.rpki-client.org