Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/pWVLUUZENCDXygxY1rGse86CcCs.roa
File: pWVLUUZENCDXygxY1rGse86CcCs.roa (raw, json)
Hash identifier: RJd7O+6ipTH8nCzPm7v5n/teh8AiEy+nj9TY+uDngyo=
Subject key identifier: A5:65:4B:51:46:44:34:20:D7:CA:0C:58:D6:B1:AC:7B:CE:82:70:2B
Certificate issuer: /CN=1ae1c7aa0b395e0612ec423fe07fb0389aaa4003
Certificate serial: 0189BB79F253DB8AC6F58876C5BBF102091A
Authority key identifier: 1A:E1:C7:AA:0B:39:5E:06:12:EC:42:3F:E0:7F:B0:38:9A:AA:40:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GuHHqgs5XgYS7EI_4H-wOJqqQAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/pWVLUUZENCDXygxY1rGse86CcCs.roa
Signing time: Thu 03 Aug 2023 12:57:58 +0000
ROA not before: Thu 03 Aug 2023 12:57:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39657
IP address blocks: 185.63.12.0/22 maxlen: 24
81.93.32.0/20 maxlen: 24
81.93.32.0/22 maxlen: 22
81.93.32.0/21 maxlen: 21
81.93.36.0/22 maxlen: 22
81.93.40.0/21 maxlen: 21
81.93.40.0/22 maxlen: 22
81.93.44.0/22 maxlen: 22
93.88.32.0/22 maxlen: 24
93.88.32.0/20 maxlen: 24
93.88.36.0/22 maxlen: 24
93.88.40.0/22 maxlen: 24
93.88.44.0/22 maxlen: 24
81.30.16.0/20 maxlen: 20
81.30.20.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:bb:79:f2:53:db:8a:c6:f5:88:76:c5:bb:f1:02:09:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ae1c7aa0b395e0612ec423fe07fb0389aaa4003
Validity
Not Before: Aug 3 12:57:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a5654b5146443420d7ca0c58d6b1ac7bce82702b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:58:9d:7a:e4:48:48:c1:78:52:48:b2:98:7d:
a7:13:7e:cd:3b:9c:9f:f0:9c:dd:6d:f8:91:fe:a9:
22:af:10:ed:96:e5:c3:ea:e9:59:2f:bc:8a:1b:46:
66:2a:bb:c7:d3:84:5d:b8:ac:c5:26:36:f8:62:89:
4d:c9:fc:54:ea:ff:27:2f:ef:6c:23:d3:78:ce:8a:
a5:83:a8:e4:96:cb:06:27:99:b3:01:a3:e3:a7:3b:
66:6e:0b:82:9f:e3:b6:03:2e:c7:b7:83:89:24:be:
ae:dd:e7:9c:91:eb:7d:b2:da:d0:27:e1:fc:25:3a:
37:ff:46:b2:0f:a5:78:42:d7:23:91:6a:de:a1:00:
34:76:1f:a5:10:5b:4c:9c:62:4e:47:a9:7d:a3:83:
1c:42:9f:f4:80:f7:24:f9:31:b6:e5:0a:fd:81:16:
48:b8:85:7e:20:e7:78:55:aa:c7:54:14:18:0c:81:
f6:c2:45:b8:24:8a:ec:f8:65:86:d9:fd:bb:fd:0e:
35:d3:eb:cc:fa:2b:61:6c:77:61:57:5e:a5:22:e1:
0b:03:3b:e7:32:44:cf:70:0f:ea:19:bf:3e:2e:04:
be:77:8a:bd:31:fb:3e:23:03:ef:4f:91:43:7b:9e:
68:19:c1:1c:59:c0:39:e2:d5:35:8c:db:cd:ea:ca:
21:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:65:4B:51:46:44:34:20:D7:CA:0C:58:D6:B1:AC:7B:CE:82:70:2B
X509v3 Authority Key Identifier:
keyid:1A:E1:C7:AA:0B:39:5E:06:12:EC:42:3F:E0:7F:B0:38:9A:AA:40:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GuHHqgs5XgYS7EI_4H-wOJqqQAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/pWVLUUZENCDXygxY1rGse86CcCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.30.16.0/20
81.93.32.0/20
93.88.32.0/20
185.63.12.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:78:66:57:41:3d:ef:1b:08:00:e3:81:53:00:c9:06:ac:ab:
f7:a5:5b:85:84:04:e0:a9:db:d3:ff:61:44:54:e0:7e:e6:ae:
8b:00:10:32:8f:b5:12:32:8f:e3:b5:53:09:b8:98:d6:57:27:
ad:51:aa:7c:a5:4e:bf:62:51:96:f0:1f:09:df:d1:b5:2f:7e:
bc:e9:fe:80:85:55:57:6f:a2:0a:a6:60:44:4f:6e:1b:18:b8:
98:ad:fb:9d:b0:9d:07:df:de:fe:5d:93:51:11:d9:9b:e7:03:
8c:53:3c:48:db:e7:72:17:9c:06:d3:a6:df:3c:87:f5:e0:fe:
2b:cf:cc:65:b2:36:cf:29:d8:65:05:38:a4:ac:ac:03:45:96:
d9:55:dc:01:d5:a1:e6:34:ef:3c:18:39:06:70:96:bb:8c:8a:
ae:18:a0:7e:55:cb:99:93:56:c4:40:f6:5c:ad:15:4b:a4:55:
ef:37:f4:1a:2c:c0:76:7b:5f:b1:dd:c5:dd:e2:e2:61:8a:c4:
1e:6f:c4:52:c0:3b:8d:bd:ed:7b:2c:05:8d:1e:44:c0:15:e8:
4e:16:87:f3:dd:6b:00:6f:5d:8b:a6:2e:89:97:61:dd:b9:19:
28:90:f7:0b:f0:ad:d0:2d:26:8d:7d:a1:2e:6f:4b:5c:d6:79:
ac:f7:8a:85
-----BEGIN CERTIFICATE-----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Generated at Wed Dec 6 11:16:44 2023 by rpki-client on console-ams.rpki-client.org