Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/kBlbHIg4czTNGNS8zHqG30LfpXA.roa
File: kBlbHIg4czTNGNS8zHqG30LfpXA.roa (raw, json)
Hash identifier: 3mQoJ1O0EKb24RfxvVsOCF5vym8e2qtxmfNDCJJye3c=
Subject key identifier: 90:19:5B:1C:88:38:73:34:CD:18:D4:BC:CC:7A:86:DF:42:DF:A5:70
Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Certificate serial: 01857115477B2615B5A03682CBAC0AAAB101
Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/kBlbHIg4czTNGNS8zHqG30LfpXA.roa
Signing time: Mon 02 Jan 2023 06:04:57 +0000
ROA not before: Mon 02 Jan 2023 06:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5588
IP address blocks: 217.8.160.0/19 maxlen: 19
94.42.0.0/16 maxlen: 16
195.94.192.0/19 maxlen: 19
78.133.128.0/17 maxlen: 17
85.219.128.0/17 maxlen: 17
89.174.0.0/16 maxlen: 16
89.174.23.0/24 maxlen: 24
217.153.0.0/16 maxlen: 16
157.25.0.0/16 maxlen: 16
2001:4190::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:15:47:7b:26:15:b5:a0:36:82:cb:ac:0a:aa:b1:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Validity
Not Before: Jan 2 06:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=90195b1c88387334cd18d4bccc7a86df42dfa570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:84:38:e4:89:9d:b1:99:91:b0:89:22:b7:aa:
00:23:e0:50:08:38:68:09:8a:b2:28:24:8b:a7:38:
4d:b2:27:24:d5:28:a8:94:4e:d1:53:1d:9f:da:d0:
96:a2:98:7b:5b:7b:0c:58:ea:70:fa:9a:5c:b9:6d:
84:06:4a:1f:e9:31:ae:46:52:9d:ee:b5:76:6b:84:
c8:6e:5b:c1:04:cd:7d:f1:ff:9d:36:ff:24:79:44:
1c:c9:61:3f:f5:99:5d:a0:51:69:05:9e:5b:53:03:
e9:2d:55:43:d5:5c:85:fc:88:be:03:48:48:dd:55:
6a:5f:64:03:a2:23:6d:e6:ee:ef:21:35:e6:95:15:
e8:b1:9e:93:ba:19:65:0f:23:6c:a2:17:ad:c0:a4:
5e:20:4f:44:6f:96:07:a1:4d:d9:6e:ac:7e:1c:9d:
f4:e0:c9:ec:b2:1f:63:b8:c7:41:92:43:72:89:a9:
5b:34:bd:91:9a:f0:2a:20:05:b6:19:ba:5e:59:6b:
d9:04:30:d6:cf:d1:37:46:73:88:66:50:9f:08:29:
41:97:a5:86:73:74:7f:c3:ae:9d:40:b4:83:be:11:
2e:9b:7a:46:b0:c5:60:08:9b:db:79:68:ad:73:9a:
2a:74:99:a2:25:5c:f3:5a:5a:8e:10:1b:55:7b:a5:
ab:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:19:5B:1C:88:38:73:34:CD:18:D4:BC:CC:7A:86:DF:42:DF:A5:70
X509v3 Authority Key Identifier:
keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/kBlbHIg4czTNGNS8zHqG30LfpXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.133.128.0/17
85.219.128.0/17
89.174.0.0/16
94.42.0.0/16
157.25.0.0/16
195.94.192.0/19
217.8.160.0/19
217.153.0.0/16
IPv6:
2001:4190::/32
Signature Algorithm: sha256WithRSAEncryption
02:fd:ee:a4:2f:fc:d1:68:c9:9d:f5:a2:ef:9f:8f:16:de:aa:
e3:7b:80:b2:82:19:10:c8:d7:06:3e:27:23:d6:79:51:64:22:
99:1d:fe:78:5e:72:d6:c0:3a:72:e2:e7:ba:d2:6e:c4:c1:27:
fd:e6:dd:9f:d0:2b:1f:15:4b:03:78:67:54:cd:20:e8:61:14:
98:3d:49:3d:37:61:e9:7d:3a:36:38:ce:ea:8a:47:17:6f:7c:
8a:ef:fd:a4:a1:79:e7:a4:31:72:ec:48:d1:b4:9e:80:e5:b5:
7c:f9:91:71:b2:f9:7c:14:cc:79:cd:6c:60:28:ba:fe:45:3b:
5e:65:52:8b:af:a1:6d:a7:28:e0:0d:8d:3f:bc:72:67:54:13:
8f:33:e3:f2:54:10:06:66:cc:fb:64:bb:fc:0c:e3:7b:fe:dc:
39:56:b0:47:1c:76:88:d9:f5:a2:ca:bf:72:c4:f5:4a:49:aa:
d2:1a:4c:5b:05:96:39:29:14:8b:d8:82:b1:fe:27:6a:5c:6f:
46:45:36:25:49:34:f0:10:7a:8f:fc:38:73:d4:46:ea:7d:f2:
ac:fc:ed:25:a3:ec:0b:d2:db:00:80:bc:39:e8:0a:c7:0d:74:
d9:ea:36:b8:27:04:34:05:de:87:d7:f3:db:2f:66:26:45:3b:
cc:f9:3e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:41:22 2024 by rpki-client on console-ams.rpki-client.org