Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/991ad9-d953-43a8-8584-723b33cb0ef9/1/DESYcZZz4pJEg2ret51p78lrYYc.roa
File: DESYcZZz4pJEg2ret51p78lrYYc.roa (raw, json)
Hash identifier: 1QrqFxINTBGDUQ27iy0fZ/LFCA6nDK5+nT/svyYy0TA=
Subject key identifier: 0C:44:98:71:96:73:E2:92:44:83:6A:DE:B7:9D:69:EF:C9:6B:61:87
Certificate issuer: /CN=d7cc56a1f20d5a603296619635786fde26458d12
Certificate serial: 01856F94C884F1A5ADF80637B1DF4066DA9C
Authority key identifier: D7:CC:56:A1:F2:0D:5A:60:32:96:61:96:35:78:6F:DE:26:45:8D:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18xWofINWmAylmGWNXhv3iZFjRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/991ad9-d953-43a8-8584-723b33cb0ef9/1/DESYcZZz4pJEg2ret51p78lrYYc.roa
Signing time: Sun 01 Jan 2023 23:04:59 +0000
ROA not before: Sun 01 Jan 2023 23:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29037
IP address blocks: 217.17.16.0/20 maxlen: 20
77.236.112.0/21 maxlen: 21
79.171.176.0/21 maxlen: 21
192.54.68.0/22 maxlen: 22
192.54.67.0/24 maxlen: 24
178.248.216.0/21 maxlen: 21
77.236.104.0/21 maxlen: 21
185.5.168.0/22 maxlen: 22
2a01:5580::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:c8:84:f1:a5:ad:f8:06:37:b1:df:40:66:da:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7cc56a1f20d5a603296619635786fde26458d12
Validity
Not Before: Jan 1 23:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c4498719673e29244836adeb79d69efc96b6187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:be:21:3d:69:3a:02:c2:e2:75:91:b6:5d:48:
20:57:fa:43:42:42:36:39:57:3a:b4:e5:cd:e4:25:
e2:9d:62:8a:a7:55:0c:32:70:96:19:2d:17:4c:96:
c1:15:5b:72:05:b4:28:b9:0c:9c:b2:cb:51:a0:71:
e3:15:14:6e:e5:18:9d:a8:07:9d:3a:64:2a:32:9e:
23:30:76:1c:27:fc:21:83:fb:3c:1d:72:96:aa:ca:
5a:1f:4c:64:c6:39:10:81:89:b1:ef:95:65:82:ff:
0f:68:aa:88:bb:ef:75:66:93:19:9f:70:74:d2:51:
3e:27:81:5a:52:77:9c:46:f6:1f:57:de:3f:9b:f7:
55:ae:b5:ac:59:0d:88:ea:94:c4:b5:50:99:1a:24:
6e:3a:94:0b:68:01:93:52:95:4b:e9:c0:31:68:3c:
87:6f:cb:35:06:1c:d0:f8:72:28:fd:a6:2c:bb:ca:
28:80:ff:72:a9:e8:bf:6e:96:f0:fa:e5:d0:45:00:
cc:6b:d1:6c:d0:52:f7:e4:c6:7c:f9:96:86:00:30:
0e:46:84:8f:f2:4a:21:85:32:48:fd:e5:2c:5a:aa:
0b:05:c9:14:7a:50:4a:73:0e:36:23:04:9e:8a:16:
aa:34:07:bb:0b:0f:8f:5c:46:91:0a:2f:f6:6f:bb:
9d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:44:98:71:96:73:E2:92:44:83:6A:DE:B7:9D:69:EF:C9:6B:61:87
X509v3 Authority Key Identifier:
keyid:D7:CC:56:A1:F2:0D:5A:60:32:96:61:96:35:78:6F:DE:26:45:8D:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18xWofINWmAylmGWNXhv3iZFjRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/991ad9-d953-43a8-8584-723b33cb0ef9/1/DESYcZZz4pJEg2ret51p78lrYYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/991ad9-d953-43a8-8584-723b33cb0ef9/1/18xWofINWmAylmGWNXhv3iZFjRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.236.104.0-77.236.119.255
79.171.176.0/21
178.248.216.0/21
185.5.168.0/22
192.54.67.0-192.54.71.255
217.17.16.0/20
IPv6:
2a01:5580::/32
Signature Algorithm: sha256WithRSAEncryption
de:1b:88:34:48:3e:13:23:2a:94:fc:5f:70:13:06:5a:ae:a0:
85:80:5f:bc:4f:29:10:29:db:b1:13:5d:1e:a4:77:70:dd:b7:
e4:05:4d:d1:fa:9c:2e:55:9b:4c:c7:98:73:b5:cf:21:1d:a3:
44:3a:f6:33:92:d4:12:df:9a:83:bc:a2:41:ff:c1:7c:cf:57:
a7:38:92:c0:f5:9f:5d:dd:51:0d:13:9f:1f:c2:98:81:f5:8a:
c3:5b:d0:bb:ee:25:80:22:05:9d:a2:7a:cc:fa:8a:b3:84:63:
c4:f1:8b:c2:d2:8c:3f:a7:43:2b:5d:7a:c6:bd:6c:f6:44:1a:
ed:77:64:37:88:2d:eb:ea:11:e8:13:ee:f9:74:a7:94:b1:89:
a8:76:da:2b:8c:02:c7:67:f1:d2:17:7c:72:75:93:bd:de:37:
0d:e4:98:74:9c:30:6c:34:e6:63:cd:e2:f9:fa:18:52:17:9d:
fd:9d:a5:4a:43:26:d7:d6:a3:9b:78:af:29:0f:b0:43:62:84:
8d:ab:8e:7b:ac:47:98:1a:e8:d8:52:e8:92:18:2c:0b:41:6b:
39:20:28:6d:2d:76:d5:32:7a:43:f7:d5:f7:8d:62:39:95:9e:
3b:96:7c:35:4b:63:c1:af:85:15:bd:e1:b5:3f:6d:56:ad:f6:
ad:01:55:eb
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:49 2023 by rpki-client on console-fra.rpki-client.org