Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/Cg9kuUdEYclyjcb-j07ce2fmudk.roa
File: Cg9kuUdEYclyjcb-j07ce2fmudk.roa (raw, json)
Hash identifier: HTMUaq44s9cnQnyysReTxm78SwXRdUIF6WR122JqzjI=
Subject key identifier: 0A:0F:64:B9:47:44:61:C9:72:8D:C6:FE:8F:4E:DC:7B:67:E6:B9:D9
Certificate issuer: /CN=a65fbcb4ea308a98b09397625e63866383c16dd0
Certificate serial: 01909813368864ECB0C17203CD0097E57860
Authority key identifier: A6:5F:BC:B4:EA:30:8A:98:B0:93:97:62:5E:63:86:63:83:C1:6D:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pl-8tOowipiwk5diXmOGY4PBbdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/Cg9kuUdEYclyjcb-j07ce2fmudk.roa
Signing time: Tue 09 Jul 2024 15:18:34 +0000
ROA not before: Tue 09 Jul 2024 15:18:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 32708
IP address blocks: 85.92.100.0/22 maxlen: 22
85.92.100.0/24 maxlen: 24
85.92.101.0/24 maxlen: 24
85.92.102.0/24 maxlen: 24
85.92.103.0/24 maxlen: 24
103.91.56.0/22 maxlen: 22
103.91.56.0/24 maxlen: 24
103.91.57.0/24 maxlen: 24
103.91.58.0/24 maxlen: 24
103.91.59.0/24 maxlen: 24
103.108.188.0/23 maxlen: 23
103.108.188.0/24 maxlen: 24
103.108.189.0/24 maxlen: 24
103.115.204.0/23 maxlen: 23
103.115.204.0/24 maxlen: 24
103.115.205.0/24 maxlen: 24
123.253.104.0/22 maxlen: 22
123.253.105.0/24 maxlen: 24
123.253.106.0/24 maxlen: 24
123.253.107.0/24 maxlen: 24
185.211.78.0/24 maxlen: 24
2a0d:b8c0::/48 maxlen: 48
2a0d:b8c0:1::/48 maxlen: 48
2a11:b000:1::/48 maxlen: 48
2a11:b000:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 11 Aug 2024 17:05:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:98:13:36:88:64:ec:b0:c1:72:03:cd:00:97:e5:78:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a65fbcb4ea308a98b09397625e63866383c16dd0
Validity
Not Before: Jul 9 15:18:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0a0f64b9474461c9728dc6fe8f4edc7b67e6b9d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:67:e8:42:b9:0b:58:91:1a:e0:33:dc:98:cc:
5b:4e:3c:90:f7:53:c4:92:ec:e2:ea:8e:bb:14:3e:
99:df:42:a4:4c:de:45:9d:70:a0:5e:a1:9e:97:91:
7e:59:8e:23:1c:72:f1:14:1f:75:af:2d:cd:c8:e9:
73:cc:65:2b:6e:25:f8:24:76:b9:cc:b4:40:fa:d8:
78:f8:d5:44:85:94:1a:16:b5:f4:47:74:35:cf:f3:
33:55:a0:f2:22:63:fa:e8:37:d4:af:e0:ea:fb:e5:
56:37:34:c8:62:7b:fb:d3:e8:f5:75:e7:6c:71:21:
df:57:0e:d7:74:e7:95:3e:b2:00:60:74:87:d1:8a:
60:ee:ea:41:ce:a4:5e:47:78:28:8b:a2:e0:e5:5b:
9c:04:9b:8b:59:20:52:d9:5c:cb:5f:0d:c9:f3:a2:
53:bc:e7:cb:75:32:15:46:52:58:b8:88:68:03:66:
76:b8:ed:29:69:00:65:83:7c:35:a8:5b:00:a1:a5:
9c:fd:b9:aa:44:1f:62:e1:be:4b:55:68:aa:b9:23:
2c:c2:9d:08:d8:8b:cf:b5:8e:43:3c:bb:a3:31:fd:
4c:e4:19:35:f8:6f:5c:e2:c4:3f:b9:ba:72:b1:e9:
b3:77:7f:95:b0:be:ef:53:be:fd:95:7e:00:5a:8d:
70:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:0F:64:B9:47:44:61:C9:72:8D:C6:FE:8F:4E:DC:7B:67:E6:B9:D9
X509v3 Authority Key Identifier:
keyid:A6:5F:BC:B4:EA:30:8A:98:B0:93:97:62:5E:63:86:63:83:C1:6D:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pl-8tOowipiwk5diXmOGY4PBbdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/Cg9kuUdEYclyjcb-j07ce2fmudk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.92.100.0/22
103.91.56.0/22
103.108.188.0/23
103.115.204.0/23
123.253.104.0/22
185.211.78.0/24
IPv6:
2a0d:b8c0::/47
2a11:b000:1::-2a11:b000:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
96:31:46:06:e4:e2:bd:c7:0c:89:5b:56:75:5e:db:b5:03:35:
bc:40:d8:e0:bb:e4:3b:a8:7d:6d:59:23:79:58:80:91:30:83:
83:e8:a9:a8:da:6d:78:79:1a:37:22:92:65:17:00:ec:12:a9:
2a:ad:b5:26:f5:c8:9f:4c:f6:dd:3d:a9:e5:7e:0a:0e:01:e3:
a0:e6:bd:54:d2:b6:15:0b:c8:e3:e4:57:e1:e5:ad:af:12:4a:
ec:67:b1:e4:e5:d4:94:a9:54:a4:df:16:65:a7:8e:fd:28:ae:
cc:cc:ae:b9:7b:5f:72:a9:be:d8:0f:ee:c5:db:b6:25:31:1f:
9a:02:bc:a4:79:53:c0:a1:75:fd:4c:38:00:6b:89:0b:c0:35:
61:f6:b3:74:76:67:9d:12:2d:24:27:4c:98:26:63:89:92:a0:
d5:42:3d:7b:b6:4d:13:0d:74:83:13:0b:19:a6:a2:6b:bd:ab:
9a:3a:25:01:06:04:57:1d:53:f2:09:ef:d8:95:39:ac:67:13:
2f:77:99:fb:67:d6:49:da:cf:50:c3:61:3b:3d:f0:e6:aa:b6:
40:fb:05:20:72:18:52:41:86:40:b1:85:ca:78:a1:58:59:5a:
a9:d1:7c:56:06:94:da:ce:17:d0:f4:5b:a9:3b:90:d5:f8:08:
af:25:8c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 11 19:28:23 2024 by rpki-client on console-ams.rpki-client.org