Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/ChbZjHlIjAyy6AgvXvixWSO9bhA.roa
File: ChbZjHlIjAyy6AgvXvixWSO9bhA.roa (raw, json)
Hash identifier: FObpaTHMxUYIs0xoD8Dr9Zz0PDi3uF/uBWXpFFJmhwk=
Subject key identifier: 0A:16:D9:8C:79:48:8C:0C:B2:E8:08:2F:5E:F8:B1:59:23:BD:6E:10
Certificate issuer: /CN=e319d0cd65593d969e8d45382a194aaa73c0ff8c
Certificate serial: 01856D789C3704DADAD69BDA8E78BCAAE019
Authority key identifier: E3:19:D0:CD:65:59:3D:96:9E:8D:45:38:2A:19:4A:AA:73:C0:FF:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/ChbZjHlIjAyy6AgvXvixWSO9bhA.roa
Signing time: Sun 01 Jan 2023 13:14:58 +0000
ROA not before: Sun 01 Jan 2023 13:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206943
IP address blocks: 185.102.48.0/22 maxlen: 23
185.206.58.0/23 maxlen: 23
185.206.56.0/23 maxlen: 23
31.42.128.0/20 maxlen: 20
178.218.128.0/21 maxlen: 21
178.218.136.0/21 maxlen: 21
31.42.144.0/20 maxlen: 20
178.159.64.0/20 maxlen: 20
185.171.30.0/23 maxlen: 23
185.171.28.0/23 maxlen: 23
185.183.90.0/23 maxlen: 23
185.183.88.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:78:9c:37:04:da:da:d6:9b:da:8e:78:bc:aa:e0:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e319d0cd65593d969e8d45382a194aaa73c0ff8c
Validity
Not Before: Jan 1 13:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a16d98c79488c0cb2e8082f5ef8b15923bd6e10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:16:ab:46:da:39:e1:1e:c4:12:1e:b1:e7:00:
fd:88:16:55:b9:0b:7d:58:57:77:57:54:be:a5:83:
b6:f0:ff:87:e9:a1:91:a4:cb:f2:61:a0:75:a4:e8:
27:9e:25:d7:d9:ac:6e:31:b0:0f:20:c3:2b:7e:f8:
1b:fc:a5:f0:d9:de:c1:37:eb:8e:83:f7:32:b7:d0:
65:3e:e6:67:d8:af:6c:f6:67:74:a0:6e:2e:ee:a6:
73:71:79:40:af:cc:b5:d5:d4:1d:c2:01:16:10:43:
db:03:c4:a7:72:fc:55:4a:eb:e6:f6:a5:f8:d7:3c:
07:da:9a:c0:e1:1f:29:68:01:ac:6f:a1:9d:f5:8f:
c7:05:67:1c:05:1c:3f:e8:06:60:61:cb:79:36:b4:
82:23:65:0c:98:c3:80:4d:4e:2e:e5:40:e8:b3:26:
49:da:78:c5:6e:cc:b6:41:a4:fe:2a:1a:3a:3c:4a:
d4:c6:1a:46:54:c8:66:56:f8:7c:29:8d:8e:ff:36:
61:43:ff:f8:74:f3:3c:f2:7e:d9:08:85:4a:0a:95:
bb:26:0a:b7:b2:1e:f4:7a:c4:63:f1:57:05:92:72:
e0:9e:35:b6:da:13:7e:b3:c7:1d:c0:c0:9b:2b:b4:
ce:a3:92:cc:f8:e5:6d:21:e4:7c:6e:39:e4:a7:2d:
db:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:16:D9:8C:79:48:8C:0C:B2:E8:08:2F:5E:F8:B1:59:23:BD:6E:10
X509v3 Authority Key Identifier:
keyid:E3:19:D0:CD:65:59:3D:96:9E:8D:45:38:2A:19:4A:AA:73:C0:FF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/ChbZjHlIjAyy6AgvXvixWSO9bhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.128.0/19
178.159.64.0/20
178.218.128.0/20
185.102.48.0/22
185.171.28.0/22
185.183.88.0/22
185.206.56.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:3d:be:c1:9f:ec:7e:30:82:34:69:d0:e2:52:68:ff:22:96:
96:8e:16:42:73:7e:bf:ae:c5:8a:4d:23:ca:36:5f:fb:c7:19:
2b:d0:7f:7e:7e:70:6c:99:0c:5b:0c:b1:1b:0f:93:b3:be:07:
ad:a4:0e:30:ae:ab:10:b5:5b:a1:01:14:57:b5:1b:31:41:f6:
45:39:91:6f:da:af:4b:1c:b8:11:b2:7d:36:15:a2:61:d8:e3:
8e:b8:e1:a1:a3:92:9e:90:c4:4a:54:87:13:e8:f7:5f:d4:6d:
98:a6:bb:81:5e:6b:99:fc:6d:12:b8:29:a2:4f:ec:1d:44:d2:
5b:e8:f0:d8:2d:45:81:9b:99:58:c1:1c:0f:27:6f:b2:2b:23:
4d:29:e8:fa:65:1f:a0:65:93:e6:7e:73:f8:6e:8e:cf:81:54:
6d:93:d3:b0:9a:68:72:d8:5e:c0:05:bc:e8:2a:07:a0:6d:17:
c3:6e:7e:02:45:5a:2b:73:4b:cf:38:64:f5:33:0d:a0:89:75:
58:9c:6e:e6:51:2c:a2:45:df:bf:49:1a:80:d7:55:71:ca:52:
48:6d:6e:b2:02:dd:28:4d:43:80:57:c3:5c:b4:a8:d6:e6:86:
59:d3:27:1c:e2:aa:1f:8a:aa:c3:77:4e:3a:b3:bb:e1:36:12:
da:94:86:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:23 2023 by rpki-client on console-ams.rpki-client.org