Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/3WBZorZ4RU-nz55fc-Sv1eoDrP8.roa
File: 3WBZorZ4RU-nz55fc-Sv1eoDrP8.roa (raw, json)
Hash identifier: 131rdfcpmaJTwylPc8Lon8GBHkk5PHtefcE9ai+O6H0=
Subject key identifier: DD:60:59:A2:B6:78:45:4F:A7:CF:9E:5F:73:E4:AF:D5:EA:03:AC:FF
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01856CCAD51CFE006E0A2B1DDF1DFAD4341E
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/3WBZorZ4RU-nz55fc-Sv1eoDrP8.roa
Signing time: Sun 01 Jan 2023 10:05:10 +0000
ROA not before: Sun 01 Jan 2023 10:05:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 192.71.227.0/24 maxlen: 24
194.71.227.0/24 maxlen: 24
192.71.249.0/24 maxlen: 24
192.121.22.0/24 maxlen: 24
192.121.23.0/24 maxlen: 24
194.68.26.0/24 maxlen: 24
194.68.27.0/24 maxlen: 24
192.121.47.0/24 maxlen: 24
194.71.126.0/24 maxlen: 24
192.121.46.0/23 maxlen: 24
192.121.46.0/24 maxlen: 24
194.68.44.0/24 maxlen: 24
194.14.208.0/24 maxlen: 24
194.14.217.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:d5:1c:fe:00:6e:0a:2b:1d:df:1d:fa:d4:34:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 10:05:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd6059a2b678454fa7cf9e5f73e4afd5ea03acff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:17:8b:7b:b1:08:71:68:ae:94:60:7e:39:50:
20:20:ac:02:68:b6:7d:30:36:95:a0:c0:f3:07:b8:
5e:9a:b2:c4:6c:73:76:e8:59:bb:55:92:b0:ee:31:
7f:f7:82:a6:9b:63:31:5e:33:8c:64:2d:10:06:6f:
29:76:95:42:69:37:be:54:5b:a1:3b:0b:61:bb:ff:
7d:74:f2:1b:db:ed:66:1c:38:bc:e6:10:04:e4:07:
4e:af:ab:de:c8:23:54:33:42:d1:be:ef:a1:f2:c7:
c8:10:b8:87:74:ce:e1:6f:f8:77:28:78:83:5c:1f:
ef:b4:6c:f5:d1:5c:b0:56:cd:d0:56:40:7c:ec:5d:
d6:d1:da:f0:9f:17:06:f0:0f:29:77:29:15:f3:92:
4e:53:51:13:c3:c9:32:87:6f:8c:ca:c2:57:a6:74:
3c:a1:e3:fe:ba:d7:0f:f2:7f:b2:e8:9a:cf:16:1f:
9f:3d:53:90:b3:5b:c4:04:28:7d:97:2b:df:12:e2:
f7:a7:69:2a:3e:7d:47:60:ac:7f:7a:94:a6:61:45:
19:eb:8b:c0:51:3c:b2:4b:83:7c:1b:cd:24:36:67:
e8:fa:78:0d:77:4f:a8:ec:17:42:3d:42:ba:f2:11:
c9:c9:75:89:e0:0b:96:ce:c4:b4:f6:51:8f:17:4a:
8a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:60:59:A2:B6:78:45:4F:A7:CF:9E:5F:73:E4:AF:D5:EA:03:AC:FF
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/3WBZorZ4RU-nz55fc-Sv1eoDrP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.71.227.0/24
192.71.249.0/24
192.121.22.0/23
192.121.46.0/23
194.14.208.0/24
194.14.217.0/24
194.68.26.0/23
194.68.44.0/24
194.71.126.0/24
194.71.227.0/24
Signature Algorithm: sha256WithRSAEncryption
26:c2:f3:d5:99:9c:5d:48:0d:1f:2f:4a:5b:68:fc:07:7c:58:
98:21:f8:68:80:4b:8e:97:1d:4f:8a:52:29:3d:09:f9:41:e2:
ac:7b:a9:17:15:42:0b:e6:bb:66:2f:ef:fe:52:c5:eb:0b:20:
84:80:5d:a3:3a:c9:cf:bf:09:18:21:51:e6:9b:89:6a:25:e1:
fd:7e:20:84:ce:34:b3:50:ac:f5:1c:94:8e:f2:13:da:61:64:
d3:1f:72:88:9b:a2:44:71:c1:79:9b:59:e1:4d:3c:02:4b:c0:
20:4e:fc:38:3a:07:75:a4:35:03:de:18:d1:48:28:1d:39:3f:
6f:61:f3:0a:ab:48:97:1a:98:c7:06:fb:50:32:b0:1e:89:c9:
2e:fc:da:1f:4d:b8:38:db:72:e4:c7:a9:df:92:3d:be:a8:1e:
9b:57:7f:89:b1:16:2c:0c:bb:20:fd:b5:f3:86:13:7f:48:16:
f5:6d:50:52:a9:b1:10:1d:90:22:71:3a:0f:71:76:a9:07:d1:
5c:f7:92:ca:e8:38:9c:72:10:c4:ee:77:94:3b:29:1e:0b:4c:
9c:60:87:f8:58:6d:07:12:c8:60:b4:0d:d6:2f:dd:a9:b5:ef:
f2:26:84:e1:43:42:2c:05:68:a0:ad:59:15:cf:82:5a:16:0f:
9a:5c:73:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:47 2023 by rpki-client on console-fra.rpki-client.org