Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/8d6Om11Y2vsayBgrL6IFfEUetQ0.roa
File: 8d6Om11Y2vsayBgrL6IFfEUetQ0.roa (raw, json)
Hash identifier: IWDWE42qx5STlX5tnt6HrexZ7G19WvLQqr+J8x1H1wk=
Subject key identifier: F1:DE:8E:9B:5D:58:DA:FB:1A:C8:18:2B:2F:A2:05:7C:45:1E:B5:0D
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018A27E2A784B8CBF69EEE58DDADE152233F
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/8d6Om11Y2vsayBgrL6IFfEUetQ0.roa
Signing time: Thu 24 Aug 2023 14:11:20 +0000
ROA not before: Thu 24 Aug 2023 14:11:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57630
IP address blocks: 194.71.0.0/23 maxlen: 23
193.234.94.0/24 maxlen: 24
192.71.0.0/24 maxlen: 24
194.103.16.0/23 maxlen: 24
193.234.116.0/22 maxlen: 22
193.183.20.0/24 maxlen: 24
193.181.34.0/24 maxlen: 24
194.103.197.0/24 maxlen: 24
194.103.95.0/24 maxlen: 24
193.234.205.0/24 maxlen: 24
194.68.244.0/22 maxlen: 22
194.14.57.0/24 maxlen: 24
193.234.3.0/24 maxlen: 24
192.165.3.0/24 maxlen: 24
194.103.145.0/24 maxlen: 24
194.132.166.0/24 maxlen: 24
194.132.164.0/24 maxlen: 24
193.183.49.0/24 maxlen: 24
193.234.144.0/24 maxlen: 24
192.165.134.0/23 maxlen: 23
194.132.186.0/24 maxlen: 24
193.183.59.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:27:e2:a7:84:b8:cb:f6:9e:ee:58:dd:ad:e1:52:23:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Aug 24 14:11:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f1de8e9b5d58dafb1ac8182b2fa2057c451eb50d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f4:99:55:d4:9c:dd:f5:1a:74:78:a4:c3:e9:
32:d3:e8:96:6a:f4:77:88:f2:8f:5f:7b:cc:c3:86:
4b:88:c8:5d:0b:8a:d4:2e:d0:95:e5:c5:de:eb:52:
4b:bc:9e:21:38:b5:4b:38:23:17:7a:bd:2b:fb:73:
1c:47:20:71:b4:f8:f9:dc:74:e2:ca:d3:7d:ea:73:
6e:9e:c9:07:8f:d6:d0:f6:c3:03:e9:98:16:d8:40:
b9:9b:c2:7f:a7:ed:98:39:84:7e:f2:1b:71:6c:b0:
02:dc:47:40:0d:b3:30:a1:6b:06:df:9c:00:31:ba:
1c:cd:2f:0e:2c:f9:4b:dd:64:1e:a0:68:61:9e:a9:
48:8e:ad:58:a2:a1:0f:32:c6:08:f8:e2:21:8f:a8:
e6:8b:0c:9f:6c:4d:42:ab:94:ae:6f:91:95:88:eb:
53:f0:3c:1c:5d:8c:42:ef:4b:c7:7e:0c:2c:cb:d4:
99:da:98:4d:f9:d9:83:c1:f2:c5:8e:56:e2:87:4f:
c9:f3:1f:6b:62:ce:cb:b9:68:8f:f2:ba:fc:b2:a6:
57:95:a5:22:cc:67:98:2e:59:af:d1:62:14:59:bf:
4e:fd:d5:bc:a8:e3:57:da:04:04:30:90:42:64:2d:
1b:b5:8c:5b:fe:73:ef:0f:61:f5:e5:be:b9:bd:96:
2e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:DE:8E:9B:5D:58:DA:FB:1A:C8:18:2B:2F:A2:05:7C:45:1E:B5:0D
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/8d6Om11Y2vsayBgrL6IFfEUetQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.71.0.0/24
192.165.3.0/24
192.165.134.0/23
193.181.34.0/24
193.183.20.0/24
193.183.49.0/24
193.183.59.0/24
193.234.3.0/24
193.234.94.0/24
193.234.116.0/22
193.234.144.0/24
193.234.205.0/24
194.14.57.0/24
194.68.244.0/22
194.71.0.0/23
194.103.16.0/23
194.103.95.0/24
194.103.145.0/24
194.103.197.0/24
194.132.164.0/24
194.132.166.0/24
194.132.186.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:b6:ba:b7:ac:aa:3b:e5:70:61:eb:4a:5c:ef:7e:92:bd:71:
fd:3c:1b:5f:67:58:5f:14:bb:74:6e:8c:ed:9c:6c:70:dd:45:
a7:55:01:41:0e:e3:6d:e7:59:fc:99:06:0e:b9:ec:5e:64:93:
fc:0b:33:7c:64:fe:86:f5:76:4a:a3:06:16:77:01:7a:b4:69:
1e:f1:e9:0e:f8:5d:6f:7f:92:53:c9:1a:7c:e9:41:a7:af:c1:
a7:ec:f8:96:1d:c1:f4:52:c8:a3:e4:a2:63:8b:ca:81:18:d7:
07:6e:2a:ee:cc:d8:fd:69:59:4e:a8:d5:25:a6:4e:7a:45:98:
c7:f1:c8:a3:af:97:a7:59:05:87:aa:93:0b:63:58:82:c0:4e:
4c:6e:1c:28:6a:2c:53:97:91:34:bf:a6:f2:58:fe:8d:20:3d:
de:e4:58:05:f8:73:4f:e0:dd:1e:56:7e:0c:56:65:13:44:fc:
61:f9:dd:99:61:49:90:8e:1e:fb:82:49:7e:05:7e:bc:e7:78:
a4:52:61:61:d6:d5:15:7a:8c:6a:fb:ec:f2:ca:bd:a3:10:83:
8b:c2:83:36:06:eb:97:e7:4b:be:06:a0:90:15:da:48:1a:b9:
ed:8a:d1:b1:30:41:85:03:36:f8:47:da:5d:50:df:92:94:22:
cc:b4:12:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 6 15:38:52 2023 by rpki-client on console-ams.rpki-client.org