Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/NmZncB7k9mALerdHZPOcQ96v6j4.roa
File: NmZncB7k9mALerdHZPOcQ96v6j4.roa (raw, json)
Hash identifier: xIqUueZxGEGJyW48lMFwtS3jarvJS46MJcaGQ5xV9WE=
Subject key identifier: 36:66:67:70:1E:E4:F6:60:0B:7A:B7:47:64:F3:9C:43:DE:AF:EA:3E
Certificate issuer: /CN=d9d63156c1836f16c3b430effbb72ac69932ea9b
Certificate serial: 01856C415A745C8C9C980B55CD76BE831966
Authority key identifier: D9:D6:31:56:C1:83:6F:16:C3:B4:30:EF:FB:B7:2A:C6:99:32:EA:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/NmZncB7k9mALerdHZPOcQ96v6j4.roa
Signing time: Sun 01 Jan 2023 07:35:00 +0000
ROA not before: Sun 01 Jan 2023 07:35:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207990
IP address blocks: 185.4.226.0/24 maxlen: 32
80.240.98.0/23 maxlen: 32
193.31.56.0/22 maxlen: 32
31.40.228.0/22 maxlen: 32
212.107.0.0/22 maxlen: 32
91.196.180.0/22 maxlen: 32
194.31.176.0/22 maxlen: 32
195.3.136.0/22 maxlen: 32
194.187.36.0/22 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:41:5a:74:5c:8c:9c:98:0b:55:cd:76:be:83:19:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d63156c1836f16c3b430effbb72ac69932ea9b
Validity
Not Before: Jan 1 07:35:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=366667701ee4f6600b7ab74764f39c43deafea3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a9:5b:32:f2:79:f0:de:9e:be:6d:08:05:db:
3b:41:3b:6b:d5:76:58:75:a3:4c:9f:8f:fd:67:71:
e3:72:cb:38:dc:9a:db:a3:e1:27:2f:4c:b8:1d:08:
60:4c:e4:8f:fa:01:ae:32:7f:d7:60:2e:87:91:ec:
0d:d8:7b:0b:84:82:f4:06:48:16:5a:46:8b:30:62:
6b:e0:31:f4:1a:d6:90:75:5b:83:64:0b:2e:cb:5b:
8c:4d:f5:ac:d4:85:68:48:17:50:97:27:02:c0:08:
c6:0d:63:da:c7:63:0a:e6:19:e0:96:31:23:2f:ce:
92:2d:a3:57:b1:83:ae:37:7c:14:48:81:bb:4a:03:
7b:df:f4:eb:72:2c:66:dd:38:f5:59:88:57:c3:48:
c9:fb:46:6b:6b:51:07:bb:89:8d:33:89:3a:6b:eb:
4f:dc:ae:7d:58:4a:c3:cc:89:7f:6c:cf:6d:d8:37:
0b:27:c9:d7:35:46:e8:a5:43:23:3b:da:55:ca:b0:
24:21:e2:69:ef:d9:02:9d:47:cd:df:4d:a8:bb:7e:
14:f7:d4:a2:a3:c0:61:c8:44:8a:12:68:57:98:20:
ae:74:97:ab:9c:fe:2a:e5:d4:bd:8d:99:8c:59:12:
58:65:08:e7:35:d9:d6:f9:02:e5:6b:e6:7e:7c:e4:
37:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:66:67:70:1E:E4:F6:60:0B:7A:B7:47:64:F3:9C:43:DE:AF:EA:3E
X509v3 Authority Key Identifier:
keyid:D9:D6:31:56:C1:83:6F:16:C3:B4:30:EF:FB:B7:2A:C6:99:32:EA:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/NmZncB7k9mALerdHZPOcQ96v6j4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.228.0/22
80.240.98.0/23
91.196.180.0/22
185.4.226.0/24
193.31.56.0/22
194.31.176.0/22
194.187.36.0/22
195.3.136.0/22
212.107.0.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:12:b1:00:83:3a:77:1f:ce:0c:7c:25:ea:68:03:b7:85:70:
a1:db:89:c2:78:00:21:de:50:aa:e9:59:9c:29:36:2b:eb:2c:
97:f3:e6:b1:48:d8:dd:73:81:fe:71:f5:1d:65:91:22:d6:9d:
44:ba:45:2d:a9:98:6a:18:b8:d8:a8:f9:4b:76:74:61:fd:b6:
57:5c:97:cb:e0:ea:1e:0b:3c:e3:b9:23:d9:9d:0e:46:c5:d0:
39:a8:5f:29:ec:d9:cb:6e:cf:9d:12:e9:42:49:82:00:a8:53:
c3:83:58:91:62:12:1f:ed:c3:a1:96:4f:69:34:52:94:2c:9e:
48:7a:92:4e:c2:68:32:4f:47:e2:19:ea:60:03:b0:bd:b8:7f:
4b:e1:eb:b3:30:e2:64:c7:d7:68:bb:17:97:9f:53:25:67:6d:
43:bd:f1:08:4a:89:5b:fe:03:46:fd:a9:c9:2a:19:b8:d8:e1:
bd:4a:ee:08:4e:23:34:bf:f2:7a:2a:89:8d:ef:3d:0b:51:dd:
da:b4:7a:0a:ea:e0:fe:d1:4c:bf:36:9f:0e:a4:10:7c:27:31:
35:7f:9c:e4:87:1d:19:16:cb:ea:55:24:56:d1:8b:ce:2b:b3:
5b:18:2f:61:59:61:ab:4a:72:dd:56:34:50:ff:a2:15:45:44:
69:3e:4c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:33 2023 by rpki-client on console-ams.rpki-client.org