Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/KAAnO4v76KYic5WmjuEQYlBZGj8.roa
File: KAAnO4v76KYic5WmjuEQYlBZGj8.roa (raw, json)
Hash identifier: T6E2j2I8n8K6J0p5m+ngLryl3sRRpm/divYnFYxMWzc=
Subject key identifier: 28:00:27:3B:8B:FB:E8:A6:22:73:95:A6:8E:E1:10:62:50:59:1A:3F
Certificate issuer: /CN=808c3a6c5cbff0739e438d05744405b16197b15b
Certificate serial: 01856F14D23BDBECED5F77702D9C1C14A314
Authority key identifier: 80:8C:3A:6C:5C:BF:F0:73:9E:43:8D:05:74:44:05:B1:61:97:B1:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/KAAnO4v76KYic5WmjuEQYlBZGj8.roa
Signing time: Sun 01 Jan 2023 20:45:13 +0000
ROA not before: Sun 01 Jan 2023 20:45:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41435
IP address blocks: 213.109.80.0/20 maxlen: 20
91.193.32.0/22 maxlen: 22
194.9.36.0/23 maxlen: 23
176.104.0.0/18 maxlen: 18
176.104.2.0/24 maxlen: 24
79.110.128.0/20 maxlen: 20
79.110.128.0/22 maxlen: 22
79.110.132.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:d2:3b:db:ec:ed:5f:77:70:2d:9c:1c:14:a3:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=808c3a6c5cbff0739e438d05744405b16197b15b
Validity
Not Before: Jan 1 20:45:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2800273b8bfbe8a6227395a68ee1106250591a3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8c:e0:51:94:03:95:aa:3c:c0:91:c9:b1:59:
f6:af:0b:e8:c1:42:c6:0c:45:13:ee:7b:6b:c8:f0:
01:45:0d:99:f6:aa:dd:7d:92:8e:88:9e:1d:d3:2f:
16:8d:e4:1b:2d:c9:a9:12:c6:37:b2:29:fd:97:00:
95:ae:1d:b3:14:75:96:39:3f:2b:19:0d:25:33:4e:
dd:ca:ba:ba:a3:11:6d:6e:0c:f1:68:ad:3f:d6:5a:
1e:5d:d3:13:c7:94:65:1a:bd:e3:05:e5:b8:33:28:
de:6b:8b:f3:23:4e:c3:0a:b2:f3:d0:d9:3c:18:a9:
a7:ae:43:d0:c3:96:8d:87:c4:4d:ac:bf:36:56:9c:
fd:6d:3a:66:bf:33:58:01:a7:18:d0:f0:00:cf:2e:
45:45:11:a9:43:1c:a2:09:eb:bd:c4:e0:3b:fc:11:
9b:29:f0:5c:00:dc:d7:00:56:00:4f:d4:04:54:af:
b8:c7:5a:74:e6:a0:59:e9:63:b0:c0:b6:c3:49:92:
80:86:22:4e:12:c9:96:09:94:cd:64:b0:60:b5:8d:
1b:b2:02:95:56:bf:d5:0b:d4:43:d3:0e:07:8e:e3:
bb:b0:de:49:25:e0:c3:a9:25:d8:66:e2:ba:e8:8f:
5d:7a:c0:bc:ff:9a:43:e7:9e:ba:e0:bf:98:44:e5:
e6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:00:27:3B:8B:FB:E8:A6:22:73:95:A6:8E:E1:10:62:50:59:1A:3F
X509v3 Authority Key Identifier:
keyid:80:8C:3A:6C:5C:BF:F0:73:9E:43:8D:05:74:44:05:B1:61:97:B1:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/KAAnO4v76KYic5WmjuEQYlBZGj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.128.0/20
91.193.32.0/22
176.104.0.0/18
194.9.36.0/23
213.109.80.0/20
Signature Algorithm: sha256WithRSAEncryption
2b:70:63:2e:ae:61:0c:47:30:6c:74:e9:0c:72:ae:23:05:30:
bc:8e:15:59:84:3b:09:1a:4e:68:d6:c0:b8:74:3f:d9:81:b6:
30:fb:96:0f:48:e2:fd:87:a6:c6:e8:d7:5f:5f:b8:ff:10:50:
ee:cb:f2:ce:c1:ec:31:da:da:50:b0:75:a5:ee:0f:20:90:b9:
e4:e6:0a:13:83:d7:fa:65:a0:65:7c:f2:c8:cc:50:84:cc:67:
e7:06:07:02:0e:f3:16:aa:e6:5c:d7:8c:c7:a4:af:05:39:ed:
c0:cd:b1:ef:e7:2c:04:f4:9c:4b:47:50:c4:37:f6:f0:1f:3c:
cc:81:d5:4f:1b:92:e4:60:b1:a4:55:9c:b2:b9:2a:68:a7:ae:
94:07:9e:54:81:6c:96:79:44:74:fa:aa:dd:a7:f6:cc:36:5b:
7f:dc:e3:de:b5:99:13:21:9a:e9:ab:2a:e0:60:c4:b6:d0:5e:
0e:76:35:23:d7:76:07:c9:41:15:33:97:1b:f3:9a:38:74:b3:
55:46:56:88:05:f6:93:37:c5:41:64:ec:26:3c:23:31:1b:3a:
a8:61:5c:1c:2c:43:d7:a8:7d:65:8c:b1:25:db:ba:56:b0:5a:
0d:af:3c:94:63:14:b2:51:af:c5:68:61:04:45:f9:ef:72:a6:
bf:66:47:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:02 2023 by rpki-client on console-fra.rpki-client.org