Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/QXb2R4AbUBwRhOMV0qvoAlPs25I.roa
File: QXb2R4AbUBwRhOMV0qvoAlPs25I.roa (raw, json)
Hash identifier: +bJWTNhvNdqv5us/MFxNVDsbCudxT8QMmmj+mwZVJXs=
Subject key identifier: 41:76:F6:47:80:1B:50:1C:11:84:E3:15:D2:AB:E8:02:53:EC:DB:92
Certificate issuer: /CN=09cd218abcdf66e79500ab913cd21cf06e405d4e
Certificate serial: 018B0308B359A81D3879A1E07B3124650C40
Authority key identifier: 09:CD:21:8A:BC:DF:66:E7:95:00:AB:91:3C:D2:1C:F0:6E:40:5D:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/QXb2R4AbUBwRhOMV0qvoAlPs25I.roa
Signing time: Fri 06 Oct 2023 03:29:43 +0000
ROA not before: Fri 06 Oct 2023 03:29:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35753
IP address blocks: 82.167.208.0/20 maxlen: 20
80.240.64.0/20 maxlen: 20
82.167.224.0/21 maxlen: 21
82.167.232.0/21 maxlen: 21
82.167.240.0/22 maxlen: 22
82.167.244.0/22 maxlen: 22
82.167.252.0/23 maxlen: 23
82.167.250.0/23 maxlen: 23
82.167.248.0/24 maxlen: 24
82.167.249.0/24 maxlen: 24
82.167.152.0/22 maxlen: 22
82.167.148.0/22 maxlen: 22
82.167.156.0/22 maxlen: 22
82.167.160.0/22 maxlen: 22
82.167.164.0/22 maxlen: 22
82.167.172.0/22 maxlen: 22
82.167.168.0/22 maxlen: 22
82.167.180.0/22 maxlen: 22
82.167.180.0/23 maxlen: 23
82.167.192.0/20 maxlen: 20
82.167.192.0/18 maxlen: 18
82.167.255.0/24 maxlen: 24
82.167.254.0/24 maxlen: 24
82.167.254.0/23 maxlen: 23
82.167.0.0/17 maxlen: 17
82.167.0.0/16 maxlen: 16
82.167.96.0/22 maxlen: 22
82.167.92.0/22 maxlen: 22
82.167.104.0/22 maxlen: 22
82.167.100.0/22 maxlen: 22
82.167.108.0/22 maxlen: 22
82.167.112.0/22 maxlen: 22
82.167.116.0/22 maxlen: 22
82.167.124.0/22 maxlen: 22
82.167.120.0/22 maxlen: 22
82.167.128.0/19 maxlen: 19
82.167.144.0/22 maxlen: 22
82.167.64.0/22 maxlen: 22
82.167.68.0/22 maxlen: 22
82.167.76.0/22 maxlen: 22
82.167.72.0/22 maxlen: 22
82.167.80.0/22 maxlen: 22
82.167.84.0/22 maxlen: 22
82.167.88.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:03:08:b3:59:a8:1d:38:79:a1:e0:7b:31:24:65:0c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09cd218abcdf66e79500ab913cd21cf06e405d4e
Validity
Not Before: Oct 6 03:29:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4176f647801b501c1184e315d2abe80253ecdb92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:91:7e:bb:8d:60:3a:8d:0b:ae:c8:eb:89:27:
9b:c3:16:ad:ca:bf:26:15:ba:03:dc:98:9b:20:a2:
29:3b:07:c1:65:4c:da:5f:27:b1:99:2d:93:5a:8d:
f8:ee:67:71:42:ba:36:ad:b3:67:c7:0c:f0:93:65:
6a:45:db:cd:0d:ea:98:9a:e9:21:14:a6:ee:fd:36:
80:cf:b2:d3:f7:cf:b4:ee:3a:a5:b3:f7:6d:b8:04:
43:c1:13:c0:eb:fa:59:29:af:0a:46:3c:4a:f2:d0:
38:20:55:56:7e:d1:ad:51:00:e8:a0:98:4c:b3:c6:
55:5a:4f:54:6f:74:3f:ef:bf:12:c8:b8:f7:54:5b:
f1:e3:47:76:41:19:f7:48:ea:50:29:15:48:eb:59:
11:3d:39:25:9d:27:0b:4b:75:76:3e:a5:3e:35:be:
90:5e:fb:a3:d8:38:5a:1a:23:04:f9:96:d4:23:a7:
7b:dc:1f:6d:84:8c:b4:2a:10:b4:4f:6c:09:32:9b:
45:e9:b1:8b:1d:94:95:42:68:88:84:3b:b4:db:65:
09:14:c9:cd:00:1e:25:e6:f0:52:fe:36:ee:83:45:
b5:4a:77:fe:02:61:a2:9c:33:66:2a:d0:df:a6:49:
ec:7d:15:90:34:61:29:ba:96:54:f9:f4:3d:11:6b:
d9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:76:F6:47:80:1B:50:1C:11:84:E3:15:D2:AB:E8:02:53:EC:DB:92
X509v3 Authority Key Identifier:
keyid:09:CD:21:8A:BC:DF:66:E7:95:00:AB:91:3C:D2:1C:F0:6E:40:5D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/QXb2R4AbUBwRhOMV0qvoAlPs25I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.240.64.0/20
82.167.0.0/16
Signature Algorithm: sha256WithRSAEncryption
22:12:9c:d0:69:c1:5d:79:56:ee:1a:67:24:b3:a4:05:b2:b3:
cd:93:95:87:0e:49:2c:45:10:75:b9:98:e2:1b:7c:c7:c8:c0:
36:19:86:bb:06:c2:0b:23:c6:1d:e5:37:29:34:3f:f2:99:dd:
e7:8e:95:6f:51:c4:20:85:13:5f:80:00:a0:cb:65:2e:cd:f7:
65:78:d7:98:cc:df:20:2c:67:ce:16:c7:7f:49:36:0b:f6:db:
73:39:4e:60:87:72:a0:9e:e4:a9:51:71:40:6b:9f:07:ad:00:
ed:2f:47:78:aa:70:96:bf:c4:b3:e2:bd:2e:d9:ff:43:5b:32:
33:60:82:57:9b:78:76:4a:01:b2:a7:bd:83:00:0f:87:81:da:
22:cd:a4:82:a4:51:99:b8:48:12:65:c0:ec:82:c5:2b:d0:1f:
62:69:cc:7f:84:5b:29:80:48:03:3d:77:18:fb:39:ee:c2:23:
e3:5e:d8:4a:1c:da:78:6c:4f:aa:7f:69:30:13:4d:a0:ad:d5:
e4:7b:cd:69:66:29:68:a3:9b:d5:3b:7e:00:c7:f4:d0:1e:68:
cb:30:8b:d8:30:d5:d1:47:1b:83:ad:8c:72:ae:5b:fd:2a:b3:
fb:cf:cf:99:fb:96:c7:ec:bb:5c:85:2b:18:9e:25:ad:0e:5a:
8d:6f:6f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:16:59 2024 by rpki-client on console-ams.rpki-client.org