Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/sTnvqkLAxZwrU33B7uBQwAhnRAk.roa
File: sTnvqkLAxZwrU33B7uBQwAhnRAk.roa (raw, json)
Hash identifier: 4uG8SGpziRuKS15HfGOAhUtp3F3LPsGnFGfcbwJERVA=
Subject key identifier: B1:39:EF:AA:42:C0:C5:9C:2B:53:7D:C1:EE:E0:50:C0:08:67:44:09
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 0186A72BF354F0AAF0539B2127DE66EB619F
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/sTnvqkLAxZwrU33B7uBQwAhnRAk.roa
Signing time: Fri 03 Mar 2023 11:12:00 +0000
ROA not before: Fri 03 Mar 2023 11:12:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197942
IP address blocks: 193.234.81.0/24 maxlen: 24
194.103.18.0/24 maxlen: 24
193.183.188.0/24 maxlen: 24
193.234.198.0/24 maxlen: 24
193.180.160.0/23 maxlen: 23
192.36.180.0/24 maxlen: 24
194.71.64.0/22 maxlen: 22
194.71.68.0/22 maxlen: 22
194.14.218.0/24 maxlen: 24
194.71.72.0/21 maxlen: 24
194.71.81.0/24 maxlen: 24
193.182.121.0/24 maxlen: 24
194.71.80.0/24 maxlen: 24
194.71.82.0/24 maxlen: 24
2a01:280:3a8::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a7:2b:f3:54:f0:aa:f0:53:9b:21:27:de:66:eb:61:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Mar 3 11:12:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b139efaa42c0c59c2b537dc1eee050c008674409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:bb:45:12:62:90:06:ac:10:e2:fa:92:5f:b7:
42:a6:2d:ba:b8:7f:c0:59:b0:8f:d0:f7:0a:d0:0f:
5c:f9:00:85:c7:29:cc:62:e5:4b:fb:15:2e:38:68:
5d:c7:43:1f:83:aa:be:ed:92:7c:ac:b9:e4:5b:9f:
4a:1b:bf:64:39:c2:55:21:3a:d3:11:2b:eb:c3:fe:
6d:95:2c:84:45:65:e9:7f:8b:37:2e:f7:ad:17:df:
8d:6e:57:5c:ab:f9:47:14:31:b8:00:fe:8a:5d:c6:
ef:b0:39:bf:7e:d7:13:bf:33:0c:5e:5d:57:74:46:
d2:71:72:f3:ec:dd:a6:f4:9c:fe:8e:66:39:cb:5b:
71:b1:80:ef:8d:73:d9:8f:70:12:fc:e3:a8:24:59:
0d:6a:dc:63:ef:a9:52:b4:0f:7a:85:3a:06:4e:66:
d6:d3:63:95:c9:c4:58:d8:bd:8a:7f:d9:61:cc:72:
a4:d6:e7:de:8b:a0:b3:d1:f1:e5:2f:b0:4c:15:2b:
a4:ca:97:93:f3:b3:69:ca:18:68:9a:c6:79:d0:30:
1c:92:ae:3d:a1:c3:be:42:67:2d:8e:f8:bb:02:9f:
8b:d1:2e:f3:cc:65:05:e6:39:be:a8:68:91:57:75:
4a:c1:27:a4:bc:1e:78:ce:0c:1a:71:74:27:59:86:
de:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:39:EF:AA:42:C0:C5:9C:2B:53:7D:C1:EE:E0:50:C0:08:67:44:09
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/sTnvqkLAxZwrU33B7uBQwAhnRAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.180.0/24
193.180.160.0/23
193.182.121.0/24
193.183.188.0/24
193.234.81.0/24
193.234.198.0/24
194.14.218.0/24
194.71.64.0-194.71.82.255
194.103.18.0/24
IPv6:
2a01:280:3a8::/48
Signature Algorithm: sha256WithRSAEncryption
4a:07:ef:da:19:2c:62:38:86:c1:42:df:f9:6c:28:39:46:84:
06:47:82:5b:49:87:41:c5:e9:e4:20:84:59:90:ed:fa:46:be:
fa:e4:1e:26:8d:35:93:1d:bd:3d:dd:88:ca:da:96:de:21:a7:
cf:e8:8b:ee:eb:f9:3a:80:07:e5:48:bb:7b:b1:77:8a:3b:44:
47:13:f6:78:1c:41:1b:d8:f6:0c:0a:16:e4:f6:cb:45:1a:e8:
f8:01:9d:eb:82:68:43:ab:af:24:5d:10:73:cf:9e:3c:f4:61:
c6:18:c4:09:8b:3e:e9:0b:63:84:5d:a8:97:8f:42:e0:20:c3:
d5:0d:36:3f:44:ca:1e:d5:e1:9b:b6:a9:35:3a:67:23:20:61:
e1:5f:0b:29:79:cb:a3:f3:28:ab:f6:c5:e0:ed:df:94:60:27:
f5:db:06:e1:f1:64:0b:bd:1f:5d:a6:59:d2:2d:f5:58:bc:af:
d5:ab:86:ce:ac:0a:f3:30:10:f4:8f:e7:de:6f:91:1f:a7:c0:
af:88:e2:ea:54:8d:f9:5d:86:85:ee:d5:a1:0e:66:d2:7e:51:
e2:de:9c:ce:55:e1:b7:e4:71:6e:4a:65:f4:33:72:25:55:23:
a6:e5:78:5a:ec:1b:69:2a:00:c9:2a:bf:cf:e6:d0:11:18:a1:
8d:c8:06:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:38 2023 by rpki-client on console-ams.rpki-client.org