Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/W703Q3KRDyEBdn7nDJE5m4UJ28w.roa
File: W703Q3KRDyEBdn7nDJE5m4UJ28w.roa (raw, json)
Hash identifier: AF7k2rxp4D+f9ONAZ4LbACubg/1gSuwfRY5+f3aLtIg=
Subject key identifier: 5B:BD:37:43:72:91:0F:21:01:76:7E:E7:0C:91:39:9B:85:09:DB:CC
Certificate issuer: /CN=09cd218abcdf66e79500ab913cd21cf06e405d4e
Certificate serial: 01883D5955C350A4A5082574B00072058C17
Authority key identifier: 09:CD:21:8A:BC:DF:66:E7:95:00:AB:91:3C:D2:1C:F0:6E:40:5D:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/W703Q3KRDyEBdn7nDJE5m4UJ28w.roa
Signing time: Sun 21 May 2023 08:07:24 +0000
ROA not before: Sun 21 May 2023 08:07:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35753
IP address blocks: 82.167.208.0/20 maxlen: 20
80.240.64.0/20 maxlen: 20
82.167.224.0/21 maxlen: 21
82.167.232.0/21 maxlen: 21
82.167.240.0/22 maxlen: 22
82.167.244.0/22 maxlen: 22
82.167.252.0/23 maxlen: 23
82.167.248.0/24 maxlen: 24
82.167.250.0/23 maxlen: 23
82.167.249.0/24 maxlen: 24
82.167.152.0/22 maxlen: 22
82.167.148.0/22 maxlen: 22
82.167.156.0/22 maxlen: 22
82.167.160.0/22 maxlen: 22
82.167.164.0/22 maxlen: 22
82.167.172.0/22 maxlen: 22
82.167.168.0/22 maxlen: 22
82.167.180.0/22 maxlen: 22
82.167.180.0/23 maxlen: 23
82.167.192.0/20 maxlen: 20
82.167.192.0/18 maxlen: 18
82.167.255.0/24 maxlen: 24
82.167.254.0/24 maxlen: 24
82.167.0.0/17 maxlen: 17
82.167.0.0/16 maxlen: 16
82.167.96.0/22 maxlen: 22
82.167.92.0/22 maxlen: 22
82.167.104.0/22 maxlen: 22
82.167.100.0/22 maxlen: 22
82.167.108.0/22 maxlen: 22
82.167.112.0/22 maxlen: 22
82.167.116.0/22 maxlen: 22
82.167.124.0/22 maxlen: 22
82.167.120.0/22 maxlen: 22
82.167.128.0/19 maxlen: 19
82.167.144.0/22 maxlen: 22
82.167.64.0/22 maxlen: 22
82.167.68.0/22 maxlen: 22
82.167.76.0/22 maxlen: 22
82.167.72.0/22 maxlen: 22
82.167.80.0/22 maxlen: 22
82.167.84.0/22 maxlen: 22
82.167.88.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:3d:59:55:c3:50:a4:a5:08:25:74:b0:00:72:05:8c:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09cd218abcdf66e79500ab913cd21cf06e405d4e
Validity
Not Before: May 21 08:07:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5bbd374372910f2101767ee70c91399b8509dbcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e1:e8:40:0d:8e:b9:3f:f0:a9:6b:4b:fa:7f:
d9:d6:02:7e:ef:b1:a3:ef:f3:f2:3d:05:22:69:e9:
52:e4:22:04:c9:80:2e:f7:2e:12:a4:cc:ef:7a:cf:
04:d6:0e:f9:e7:f9:10:d6:81:0e:0f:c4:ab:c3:1c:
5a:bf:76:4b:fc:b9:75:d8:08:e2:a5:9d:db:6d:13:
67:4b:11:a0:a8:00:6a:8d:ae:46:2e:77:98:55:d3:
f1:0f:1d:54:da:ad:8d:d7:2f:0a:1c:ae:46:d8:a9:
66:de:e6:78:52:9a:8c:16:30:55:f7:f6:fb:da:d4:
95:9a:d4:2a:8d:c0:db:d9:2a:34:e5:0f:31:64:fe:
9b:59:e6:61:cb:9b:e4:4d:15:3c:b1:08:c0:70:50:
3f:75:b4:db:6e:2d:73:6c:2c:be:97:5c:ac:bc:c2:
ef:32:28:b4:df:d6:30:ca:3e:4b:f5:95:f4:f9:da:
c9:bc:30:6e:7c:91:09:8a:49:35:8e:76:73:28:b0:
c8:5b:25:8d:66:12:92:75:95:ee:fb:a2:2d:d1:ae:
1e:9e:16:c4:83:fa:4a:d8:59:c6:c4:2c:9f:ec:88:
c9:6a:a0:ca:1c:d5:51:61:1f:57:08:41:96:01:da:
f2:d7:62:51:b0:c2:21:9b:e3:84:30:d2:b4:8e:40:
7a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:BD:37:43:72:91:0F:21:01:76:7E:E7:0C:91:39:9B:85:09:DB:CC
X509v3 Authority Key Identifier:
keyid:09:CD:21:8A:BC:DF:66:E7:95:00:AB:91:3C:D2:1C:F0:6E:40:5D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/W703Q3KRDyEBdn7nDJE5m4UJ28w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.240.64.0/20
82.167.0.0/16
Signature Algorithm: sha256WithRSAEncryption
59:19:73:d4:4a:93:cd:2d:00:7e:ed:81:8b:17:93:0a:29:d6:
32:70:0b:f8:3d:f7:a7:fe:dd:d1:40:6b:e8:83:70:3b:ec:2d:
db:a1:6d:e8:a9:a5:ef:f5:e1:a2:65:76:18:8d:f2:53:db:b0:
e8:28:3e:93:24:bd:c3:2c:4b:cc:93:9d:03:b3:db:02:a4:08:
8a:c5:f4:45:2a:7c:84:b4:c7:0f:b1:22:df:0f:de:a0:06:06:
66:a0:b9:cf:9f:59:d1:c8:3a:bc:ef:88:7b:a1:29:57:74:69:
25:71:38:33:96:72:f5:56:af:29:66:a1:97:59:fc:0a:c1:96:
ee:e7:68:64:cd:38:ae:a1:62:36:27:a0:c8:02:75:1a:ed:3d:
cc:13:9c:5e:e4:4b:a1:25:7f:95:30:6f:65:c4:2b:26:56:0c:
52:74:20:66:ff:8d:59:02:43:da:8f:25:b4:09:c8:7c:86:4c:
c8:a6:33:cb:16:29:c2:7d:29:c2:61:c0:da:ef:52:1e:18:c6:
16:54:21:ed:74:91:7a:0e:09:77:16:1b:63:e7:5d:5a:f0:de:
3f:7d:d2:38:22:21:12:f0:96:53:3c:5c:f1:2f:29:2e:c6:17:
44:d6:46:31:6e:05:cd:d8:38:fa:ad:83:c0:65:d8:b3:b3:cb:
c5:22:ce:c8
-----BEGIN CERTIFICATE-----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Generated at Fri Oct 6 03:53:02 2023 by rpki-client on console-fra.rpki-client.org