Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/ARspsDDsHSDziz8KmJJlqUc40uY.roa
File: ARspsDDsHSDziz8KmJJlqUc40uY.roa (raw, json)
Hash identifier: qapc84U7kz0LxXjnWTt/Ph6avl8e16VMmyy4/h48RIg=
Subject key identifier: 01:1B:29:B0:30:EC:1D:20:F3:8B:3F:0A:98:92:65:A9:47:38:D2:E6
Certificate issuer: /CN=1e36de27974727aa0046b3e9c8d0624674541255
Certificate serial: 0188D45ED1C4E2397F3FF6AD8DA8E21E241B
Authority key identifier: 1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/ARspsDDsHSDziz8KmJJlqUc40uY.roa
Signing time: Mon 19 Jun 2023 15:56:03 +0000
ROA not before: Mon 19 Jun 2023 15:56:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47844
IP address blocks: 62.122.88.0/21 maxlen: 21
31.130.0.0/19 maxlen: 19
31.130.12.0/22 maxlen: 22
31.130.16.0/20 maxlen: 20
178.212.80.0/21 maxlen: 21
93.157.163.0/24 maxlen: 24
93.157.160.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d4:5e:d1:c4:e2:39:7f:3f:f6:ad:8d:a8:e2:1e:24:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e36de27974727aa0046b3e9c8d0624674541255
Validity
Not Before: Jun 19 15:56:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=011b29b030ec1d20f38b3f0a989265a94738d2e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b8:9c:a5:ad:9c:7c:0e:94:6d:bf:36:aa:d4:
81:5a:ba:4c:8a:04:21:c9:6f:0c:1b:75:7c:f9:27:
f4:a0:ca:6a:7b:94:64:83:56:ea:f9:bd:2a:6f:8f:
81:8d:7e:b6:d2:ea:4c:a4:8d:d3:82:88:b7:ca:dc:
7b:20:28:d7:e8:c3:88:23:70:73:17:1f:cb:12:9d:
b0:98:cf:97:57:30:52:e4:54:92:6f:96:28:40:79:
d8:1f:a2:03:59:3c:d5:76:8b:c9:0a:b3:2b:95:dd:
58:42:7b:e4:8f:d9:1f:25:14:84:68:45:50:ce:d4:
25:1f:76:3e:e3:6e:dd:8d:ef:7d:4f:f2:50:d7:86:
73:f7:e4:ba:a9:66:32:90:f5:c9:bb:8f:ac:df:b8:
2e:df:5f:5a:e1:04:27:3e:c8:9d:db:39:76:58:68:
ad:53:6c:d4:f7:01:60:77:a9:84:91:42:54:ac:7c:
d2:82:6f:23:88:b5:cf:41:aa:da:d5:5a:13:a1:e5:
68:0f:e8:2b:e2:d0:5d:89:29:58:61:64:82:dc:1a:
da:6b:d8:d6:cf:c3:1b:c1:17:99:8b:1f:02:ca:e9:
f9:84:d1:3d:3a:c1:61:07:b2:36:2c:64:fe:f3:a4:
b3:0a:ad:50:a3:65:61:92:ee:93:b7:0c:af:53:64:
98:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:1B:29:B0:30:EC:1D:20:F3:8B:3F:0A:98:92:65:A9:47:38:D2:E6
X509v3 Authority Key Identifier:
keyid:1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/ARspsDDsHSDziz8KmJJlqUc40uY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.130.0.0/19
62.122.88.0/21
93.157.160.0/21
178.212.80.0/21
Signature Algorithm: sha256WithRSAEncryption
97:64:2e:20:1b:30:42:97:6c:96:1c:a5:15:87:3f:70:fa:33:
9a:45:2e:c0:80:15:55:74:9a:a0:68:2e:09:c5:c2:f0:74:e2:
23:07:96:05:0a:ed:37:ff:2b:c9:1f:01:30:99:4c:ce:aa:91:
ac:78:14:84:49:b7:3e:4b:c5:e7:38:b7:81:69:b9:c1:cf:14:
80:9b:d2:cb:94:f5:c6:3a:98:0d:a0:3f:2c:9a:cf:ec:62:ef:
88:9a:57:14:20:08:81:f1:b8:20:08:21:6c:1c:52:80:91:f5:
aa:85:cc:e5:9e:e1:63:b1:35:2c:50:84:4f:a7:6e:1e:f9:a1:
7c:14:5b:1e:31:1e:12:f8:e0:18:ea:4b:88:ea:a5:9f:a9:67:
4b:51:fd:fc:ec:af:5a:71:84:d3:d7:5a:60:4f:63:3b:db:31:
4d:bc:5b:67:c4:2b:0e:a8:63:d5:e3:9d:cb:f3:fb:cb:fb:0b:
18:0e:db:1c:7c:1a:da:73:d9:f7:ea:0c:5f:9d:19:6a:b0:19:
f0:40:15:e9:e4:56:f6:bb:c6:80:7d:e5:bf:65:af:da:ea:78:
99:17:6c:d5:f4:ab:ef:56:b9:4b:bf:fb:98:47:f6:7b:df:ab:
9d:d3:7c:22:d6:44:01:4b:4f:ee:7f:3d:3a:fe:02:81:c8:f4:
3d:06:36:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:18 2023 by rpki-client on console-ams.rpki-client.org