Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/DUsuBNN7AmPlizkWLfpV4J-iY5Q.roa
File: DUsuBNN7AmPlizkWLfpV4J-iY5Q.roa (raw, json)
Hash identifier: Yk2XYlqhcJmG8wUAFoOkzA/TsAo97lohOmRM8Z0rFXQ=
Subject key identifier: 0D:4B:2E:04:D3:7B:02:63:E5:8B:39:16:2D:FA:55:E0:9F:A2:63:94
Certificate issuer: /CN=09cd218abcdf66e79500ab913cd21cf06e405d4e
Certificate serial: 01880440B4FB68882A57AB323F93533FD8B8
Authority key identifier: 09:CD:21:8A:BC:DF:66:E7:95:00:AB:91:3C:D2:1C:F0:6E:40:5D:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/DUsuBNN7AmPlizkWLfpV4J-iY5Q.roa
Signing time: Wed 10 May 2023 06:02:09 +0000
ROA not before: Wed 10 May 2023 06:02:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35753
IP address blocks: 82.167.208.0/20 maxlen: 20
80.240.64.0/20 maxlen: 20
82.167.224.0/21 maxlen: 21
82.167.232.0/21 maxlen: 21
82.167.240.0/22 maxlen: 22
82.167.244.0/22 maxlen: 22
82.167.252.0/23 maxlen: 23
82.167.248.0/24 maxlen: 24
82.167.250.0/23 maxlen: 23
82.167.249.0/24 maxlen: 24
82.167.152.0/22 maxlen: 22
82.167.148.0/22 maxlen: 22
82.167.156.0/22 maxlen: 22
82.167.160.0/22 maxlen: 22
82.167.164.0/22 maxlen: 22
82.167.172.0/22 maxlen: 22
82.167.168.0/22 maxlen: 22
82.167.192.0/20 maxlen: 20
82.167.192.0/18 maxlen: 18
82.167.255.0/24 maxlen: 24
82.167.254.0/24 maxlen: 24
82.167.0.0/17 maxlen: 17
82.167.0.0/16 maxlen: 16
82.167.96.0/22 maxlen: 22
82.167.92.0/22 maxlen: 22
82.167.104.0/22 maxlen: 22
82.167.100.0/22 maxlen: 22
82.167.108.0/22 maxlen: 22
82.167.112.0/22 maxlen: 22
82.167.116.0/22 maxlen: 22
82.167.124.0/22 maxlen: 22
82.167.120.0/22 maxlen: 22
82.167.128.0/19 maxlen: 19
82.167.144.0/22 maxlen: 22
82.167.64.0/22 maxlen: 22
82.167.68.0/22 maxlen: 22
82.167.76.0/22 maxlen: 22
82.167.72.0/22 maxlen: 22
82.167.80.0/22 maxlen: 22
82.167.84.0/22 maxlen: 22
82.167.88.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:04:40:b4:fb:68:88:2a:57:ab:32:3f:93:53:3f:d8:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09cd218abcdf66e79500ab913cd21cf06e405d4e
Validity
Not Before: May 10 06:02:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d4b2e04d37b0263e58b39162dfa55e09fa26394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:44:86:cc:da:e2:97:8d:f8:77:cc:05:5a:27:
fa:b2:44:90:34:fb:cc:b4:44:ce:48:c4:c4:90:7a:
1a:f7:de:ff:ba:64:98:a2:37:27:15:ac:e6:fe:9a:
97:2e:30:64:b5:ea:53:38:4a:16:d6:cc:5a:7c:2c:
54:2e:17:57:04:17:b6:11:1f:3f:e0:45:68:db:82:
8f:2a:33:80:1b:98:24:da:0d:c4:ac:fc:01:71:70:
67:0f:d6:e6:63:3a:73:f6:07:35:74:3e:b2:b3:47:
3e:e8:ab:e2:59:4c:2c:52:5f:8e:58:61:35:78:90:
ba:05:a8:1a:9a:67:6d:df:66:5c:6d:f8:10:3f:47:
c8:46:07:a0:7d:7a:25:b0:59:df:14:ef:4e:16:5a:
a9:0e:ed:2b:c1:48:01:09:80:59:e8:2c:f1:28:e2:
77:53:e6:24:31:5c:d7:46:b2:4d:cf:b5:67:16:9d:
33:58:01:ae:27:20:ec:32:a5:99:64:3b:03:61:6e:
47:5d:25:62:30:df:71:f8:1d:64:9f:f6:5e:7e:be:
75:d8:b7:c9:17:3b:48:19:89:31:fa:69:12:98:d7:
ab:84:a2:51:ff:ce:54:38:73:5a:1f:3d:87:15:a4:
0a:9e:8e:12:2e:af:ef:37:cc:9d:d3:da:4e:38:75:
10:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:4B:2E:04:D3:7B:02:63:E5:8B:39:16:2D:FA:55:E0:9F:A2:63:94
X509v3 Authority Key Identifier:
keyid:09:CD:21:8A:BC:DF:66:E7:95:00:AB:91:3C:D2:1C:F0:6E:40:5D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/DUsuBNN7AmPlizkWLfpV4J-iY5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.240.64.0/20
82.167.0.0/16
Signature Algorithm: sha256WithRSAEncryption
04:56:8c:7f:e7:92:3e:b5:a0:2d:68:84:52:24:54:ad:eb:ad:
2d:99:9a:2d:00:c3:dc:86:02:01:f9:01:19:63:e3:5e:f0:00:
bd:59:aa:89:c3:62:96:49:05:f1:49:50:bb:e4:d0:aa:27:28:
7f:08:fa:15:ab:03:2e:92:62:f5:a6:8b:7e:3e:c6:00:09:d2:
b4:ee:29:a2:b8:c7:e8:d9:ae:d3:38:52:5b:fb:09:13:ab:bc:
f5:76:31:58:3e:15:12:d8:ce:d4:00:e8:ae:b5:ca:c7:20:49:
7d:5b:90:29:21:9f:56:a7:72:73:65:a9:da:9b:68:da:b0:d3:
f3:e4:b2:51:00:8b:36:40:f5:6c:4e:90:94:bf:20:03:90:0b:
ce:e3:13:8e:e0:44:bc:0a:18:15:42:b9:67:81:b9:9d:82:0d:
50:03:ed:a8:e5:fb:8b:cf:e8:e0:b0:87:0d:55:cc:6e:98:91:
71:21:fa:3f:a5:97:c7:ee:ec:b6:6d:79:cf:1b:c6:65:ff:44:
92:69:85:6f:ce:40:33:94:d6:75:39:44:6c:b5:31:b1:83:0b:
c9:79:5e:9d:6e:43:87:29:e1:76:8f:68:f9:70:0b:8c:09:6a:
53:33:d8:77:63:49:ce:30:3f:9a:d2:51:8e:03:83:ab:d0:09:
c3:e7:d1:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:03 2023 by rpki-client on console-ams.rpki-client.org