Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/IcKdKvfUzn-fP0kJGC8cDZYoeLk.roa
File: IcKdKvfUzn-fP0kJGC8cDZYoeLk.roa (raw, json)
Hash identifier: yLzF3ksFIFgpeg/YLeMl65eXt12Y8ZW6u2iJ2dDH89E=
Subject key identifier: 21:C2:9D:2A:F7:D4:CE:7F:9F:3F:49:09:18:2F:1C:0D:96:28:78:B9
Certificate issuer: /CN=86d542323c0e3051c9c7bb8ed1d1e8acfd3db834
Certificate serial: 0185EB2205C5890929B642D572C3B473A454
Authority key identifier: 86:D5:42:32:3C:0E:30:51:C9:C7:BB:8E:D1:D1:E8:AC:FD:3D:B8:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/IcKdKvfUzn-fP0kJGC8cDZYoeLk.roa
Signing time: Wed 25 Jan 2023 22:52:33 +0000
ROA not before: Wed 25 Jan 2023 22:52:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29695
IP address blocks: 178.16.64.0/20 maxlen: 20
80.89.32.0/19 maxlen: 19
89.162.0.0/17 maxlen: 17
185.65.152.0/22 maxlen: 22
185.10.28.0/22 maxlen: 22
77.222.192.0/19 maxlen: 19
141.0.224.0/19 maxlen: 19
77.110.192.0/18 maxlen: 18
194.182.224.0/21 maxlen: 21
Validation: Failed, certificate revoked on Sun 04 Jun 2023 22:29:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:eb:22:05:c5:89:09:29:b6:42:d5:72:c3:b4:73:a4:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d542323c0e3051c9c7bb8ed1d1e8acfd3db834
Validity
Not Before: Jan 25 22:52:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=21c29d2af7d4ce7f9f3f4909182f1c0d962878b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:93:9e:0d:45:9b:fb:45:40:85:56:61:23:ef:
0b:1c:55:49:8e:8b:de:68:bb:a0:0d:88:19:06:63:
35:a1:4b:23:aa:70:96:02:58:f8:7d:46:29:4d:c8:
5a:b2:bc:da:e6:08:67:4e:1a:48:cd:32:28:25:d9:
fc:9e:e8:90:af:90:8b:6f:d7:4f:1e:d1:fd:38:e8:
31:36:89:fb:44:74:60:c2:03:f6:05:70:04:b8:0c:
17:65:d9:85:64:0a:82:ca:24:2c:5e:89:76:d6:35:
6e:78:70:04:3c:b0:f6:f6:3e:96:25:76:c9:44:3a:
d8:1c:0a:a8:fa:4a:c7:83:d2:f5:49:8d:fb:81:24:
17:19:b2:92:bd:33:44:75:10:f7:3d:1d:b1:25:3c:
39:e0:0b:3f:20:03:cd:d6:8c:ea:35:cb:69:4c:dc:
10:bc:cc:7d:d4:1d:99:02:0f:d7:7c:46:4a:88:e3:
c7:ee:04:38:04:47:b2:94:57:a9:d0:c4:c6:ae:25:
c1:58:ae:e6:9d:85:0f:57:47:76:95:48:3e:b0:f6:
7d:93:02:e2:ed:97:87:e8:25:15:f2:2f:67:7d:17:
77:08:a8:1e:ff:34:e7:6a:03:2f:53:3d:7c:6d:c9:
d9:2f:b8:fa:39:94:f9:21:b0:b2:e9:3b:88:d3:16:
60:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:C2:9D:2A:F7:D4:CE:7F:9F:3F:49:09:18:2F:1C:0D:96:28:78:B9
X509v3 Authority Key Identifier:
keyid:86:D5:42:32:3C:0E:30:51:C9:C7:BB:8E:D1:D1:E8:AC:FD:3D:B8:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/IcKdKvfUzn-fP0kJGC8cDZYoeLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.110.192.0/18
77.222.192.0/19
80.89.32.0/19
89.162.0.0/17
141.0.224.0/19
178.16.64.0/20
185.10.28.0/22
185.65.152.0/22
194.182.224.0/21
Signature Algorithm: sha256WithRSAEncryption
7b:fe:ea:35:ec:e5:6a:b2:d6:16:63:b8:4f:e4:2a:c0:ea:5d:
f9:b5:c2:a2:42:78:2f:79:af:95:09:ea:db:fa:0f:5e:82:0d:
a1:f0:50:19:f8:c5:e6:e6:eb:73:30:15:64:1a:f8:c9:a0:90:
57:44:6d:c0:01:6b:68:85:4a:e2:0f:e1:00:b4:fe:1f:8b:8a:
b3:29:c1:08:c3:71:79:04:f5:88:ab:a4:ad:06:2f:4f:0b:e6:
3a:8a:a0:50:4b:a3:8b:fe:8e:48:aa:32:81:81:a9:9f:a0:ab:
ab:11:79:b9:50:90:0a:0a:ea:79:6a:59:b4:4d:61:1f:3a:41:
f1:87:e6:06:ae:9e:b2:b7:5e:56:ac:56:b3:60:2a:b1:01:fd:
16:cc:89:e2:33:a7:e4:6f:3e:19:d8:0f:5c:b1:f2:a8:d2:91:
12:92:ae:85:fb:fe:8d:e2:84:1c:38:35:05:6d:06:cb:13:b1:
b4:6d:e1:f8:cc:f2:eb:02:56:58:4c:c5:1f:e5:93:0f:39:04:
69:de:3d:30:aa:31:99:76:7e:3d:c8:9a:a3:88:68:d4:a4:4f:
ff:48:52:23:a1:a0:5d:36:7e:7b:81:b6:c1:aa:16:b9:86:4c:
f9:33:89:f0:84:73:c6:34:20:9d:c5:71:8d:8b:11:6f:24:e9:
e0:70:7e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:06 2024 by rpki-client on console-ams.rpki-client.org