Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/CdDvyrGPY3n0Fxm3WN_LuCf9lRw.roa
File: CdDvyrGPY3n0Fxm3WN_LuCf9lRw.roa (raw, json)
Hash identifier: nXI65jIiwmvClY8pvNojPWQURvnvZeF8INgAHafhwoI=
Subject key identifier: 09:D0:EF:CA:B1:8F:63:79:F4:17:19:B7:58:DF:CB:B8:27:FD:95:1C
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018852213AEA695C065D3DAE43F7EDD1DB3D
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/CdDvyrGPY3n0Fxm3WN_LuCf9lRw.roa
Signing time: Thu 25 May 2023 08:58:09 +0000
ROA not before: Thu 25 May 2023 08:58:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56630
IP address blocks: 194.68.225.0/24 maxlen: 24
194.71.107.0/24 maxlen: 24
192.121.163.0/24 maxlen: 24
192.71.26.0/24 maxlen: 24
192.121.171.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:52:21:3a:ea:69:5c:06:5d:3d:ae:43:f7:ed:d1:db:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: May 25 08:58:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=09d0efcab18f6379f41719b758dfcbb827fd951c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c0:90:cc:0c:ed:cb:91:6f:3f:f9:bb:6c:39:
62:8a:31:6f:bd:ed:6c:83:5e:c4:35:66:51:ef:44:
ca:7a:eb:f2:16:b5:42:e6:e6:c7:54:b8:f0:55:3f:
98:c2:e8:89:1a:87:3f:79:06:a5:3f:9b:f5:5d:9d:
16:63:19:19:4e:4b:3d:ec:2a:b8:d4:b5:a0:c7:59:
8a:54:58:d2:10:38:08:1f:0d:97:5f:50:ff:12:29:
f1:b0:5e:75:45:18:32:97:3c:45:07:bf:97:b0:7c:
73:c8:e4:5f:b0:fe:46:89:0e:41:84:9b:ab:30:f5:
d1:11:f9:d6:a4:48:fa:6f:ab:03:69:80:18:89:5b:
ef:cb:b5:d9:3f:44:35:d1:f7:ac:81:1c:d8:a9:69:
c4:ea:35:55:49:f6:9d:59:92:e1:51:ce:26:5e:96:
a5:46:d6:45:70:0a:9c:90:1c:d5:3b:75:5f:ff:db:
47:f3:a8:2f:77:cb:cb:0f:0e:52:11:1e:87:80:e0:
91:69:e9:95:45:16:02:d4:a1:16:f1:f0:aa:a6:b2:
67:95:e7:65:61:13:b1:69:e0:36:73:b2:b3:84:86:
cd:0f:34:1a:c2:4a:50:e1:c3:68:25:e8:f2:ca:60:
89:33:ee:a4:0b:98:dc:ef:cc:3f:57:25:29:0c:29:
a9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D0:EF:CA:B1:8F:63:79:F4:17:19:B7:58:DF:CB:B8:27:FD:95:1C
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/CdDvyrGPY3n0Fxm3WN_LuCf9lRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.71.26.0/24
192.121.163.0/24
192.121.171.0/24
194.68.225.0/24
194.71.107.0/24
Signature Algorithm: sha256WithRSAEncryption
06:1b:c1:1a:be:3a:28:28:96:f0:a1:52:db:02:3f:4f:90:ff:
9f:0f:19:23:9f:57:60:6f:72:e9:4e:f2:14:73:d6:36:08:e8:
a9:af:b1:db:81:6f:f2:4d:a1:9c:f2:7a:d0:7e:32:94:ee:64:
21:f9:41:d6:a5:08:0f:17:41:13:9a:7d:80:35:63:73:b0:d7:
e3:09:15:fc:0e:e8:70:13:70:70:1d:54:3c:a5:e3:5c:4a:8e:
9b:be:74:46:b0:e6:7f:99:84:90:a7:9f:3b:9a:cf:ca:72:6e:
0f:91:ff:a7:ac:0b:ee:1d:c0:46:9b:9f:73:71:e3:b9:86:bd:
79:83:af:2e:5f:c1:a2:b8:ac:33:d9:88:8e:57:65:c2:c3:2d:
85:ba:a2:72:65:ba:a8:1a:c6:6f:db:84:0d:78:1c:bb:d7:41:
21:92:01:04:fb:88:98:3f:e6:1a:b5:36:13:74:7f:ed:13:0b:
26:e6:db:0c:62:94:26:9d:1b:73:ee:ea:5a:44:a4:77:a0:03:
91:51:3d:53:00:50:4f:bf:53:cf:7c:8d:70:e3:b0:2f:10:60:
bd:56:23:4f:c1:c1:4b:59:9f:e5:07:02:41:da:58:07:94:a8:
9d:9f:8f:53:b2:a9:1e:52:17:ce:d1:dd:97:da:b2:e1:62:7b:
2b:74:09:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:47 2023 by rpki-client on console-fra.rpki-client.org