Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/zRMAynj_sUa5nDksZkl6JbYwi2o.roa
File: zRMAynj_sUa5nDksZkl6JbYwi2o.roa (raw, json)
Hash identifier: WVtPPOtl3l/T+GAA50Eaq4aLfAfpWJsk/sneaFhtlXc=
Subject key identifier: CD:13:00:CA:78:FF:B1:46:B9:9C:39:2C:66:49:7A:25:B6:30:8B:6A
Certificate issuer: /CN=e5a6794b91b81406412a137870bfde3b170de094
Certificate serial: 018B942FB340CF966FFF6B4FF22675D7097C
Authority key identifier: E5:A6:79:4B:91:B8:14:06:41:2A:13:78:70:BF:DE:3B:17:0D:E0:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/zRMAynj_sUa5nDksZkl6JbYwi2o.roa
Signing time: Fri 03 Nov 2023 07:57:15 +0000
ROA not before: Fri 03 Nov 2023 07:57:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199335
IP address blocks: 188.241.40.0/21 maxlen: 21
185.113.60.0/22 maxlen: 22
85.92.164.0/22 maxlen: 22
85.92.160.0/22 maxlen: 22
85.92.168.0/22 maxlen: 22
85.92.172.0/22 maxlen: 22
85.92.176.0/22 maxlen: 22
85.92.184.0/22 maxlen: 22
85.92.180.0/22 maxlen: 22
85.92.188.0/22 maxlen: 22
185.5.64.0/22 maxlen: 22
80.94.192.0/20 maxlen: 20
185.99.21.0/24 maxlen: 24
176.126.224.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:94:2f:b3:40:cf:96:6f:ff:6b:4f:f2:26:75:d7:09:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a6794b91b81406412a137870bfde3b170de094
Validity
Not Before: Nov 3 07:57:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cd1300ca78ffb146b99c392c66497a25b6308b6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:cc:0e:f4:1a:3c:38:c5:67:f6:69:71:cc:f4:
27:76:ab:5a:88:df:db:d9:34:83:e4:f8:e2:73:48:
c7:e5:7b:51:3b:e6:66:58:20:19:73:40:74:a1:97:
4d:05:7e:90:54:b7:5b:72:3c:ce:28:97:4e:1f:2b:
e7:af:d4:e3:53:e9:2c:af:6c:38:55:d5:54:84:02:
20:40:ec:ab:98:c3:d3:5f:86:51:cd:55:2c:3b:25:
29:76:41:42:56:f0:28:bb:ea:d7:7e:58:95:7f:3e:
bc:59:b9:04:3b:90:af:85:9e:aa:5f:96:b8:23:25:
d4:fb:84:1a:28:2b:f8:b7:6d:09:1a:e0:f0:49:e1:
47:f3:bc:4b:d4:2c:93:26:7c:cb:c0:99:af:28:3a:
51:df:17:7b:da:bf:ba:98:0a:dd:18:21:50:85:87:
7c:09:de:e7:46:d8:03:60:60:4b:67:10:d2:b3:55:
b9:2e:4f:a1:db:01:30:c2:58:86:a6:02:b7:85:85:
e4:0f:b8:6b:42:d2:03:57:8d:6c:18:ca:5f:23:e4:
ac:a6:16:74:d4:f0:b1:cf:6a:7c:bc:78:ab:22:4d:
e4:ec:11:7d:22:27:ff:53:f6:ce:46:82:62:10:1d:
9a:ff:a5:e7:af:8f:a6:83:35:96:32:88:c0:53:c3:
bd:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:13:00:CA:78:FF:B1:46:B9:9C:39:2C:66:49:7A:25:B6:30:8B:6A
X509v3 Authority Key Identifier:
keyid:E5:A6:79:4B:91:B8:14:06:41:2A:13:78:70:BF:DE:3B:17:0D:E0:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/zRMAynj_sUa5nDksZkl6JbYwi2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.94.192.0/20
85.92.160.0/19
176.126.224.0/21
185.5.64.0/22
185.99.21.0/24
185.113.60.0/22
188.241.40.0/21
Signature Algorithm: sha256WithRSAEncryption
7d:cb:24:30:fb:21:c6:dd:03:e6:71:11:17:c8:25:f9:50:12:
e2:a8:c9:0b:71:d1:f2:1e:73:a3:1c:39:1b:63:df:56:95:ee:
6e:87:b8:6d:f5:61:df:f2:46:f2:9f:ac:ea:89:4e:7f:2a:c6:
89:7f:9d:70:6c:6d:70:0d:26:79:82:58:fa:9e:d8:2e:e1:52:
16:07:a5:3a:61:65:e6:cf:34:3f:bc:23:4e:13:bf:93:ac:2e:
8b:bc:df:24:9f:9a:c6:f0:dd:fc:3d:dd:e3:ad:43:da:5b:5f:
b0:4a:20:cb:7c:04:52:9b:96:37:21:5a:63:d5:9a:3f:4b:1c:
2f:d5:05:40:1e:cc:3e:11:a8:c2:c3:51:52:e1:46:c6:06:23:
0c:c8:57:8a:e1:86:1a:4a:b8:c2:03:ac:55:6d:9e:ad:3c:01:
96:03:c9:2a:81:12:43:df:98:79:7a:49:19:28:a3:c2:2f:f6:
ad:f0:b8:3f:bf:0f:3f:37:d6:26:3f:de:b8:33:9a:d3:fb:3c:
f5:3c:8f:8c:31:1e:27:bf:17:bf:6a:bc:96:30:9f:5f:73:c7:
8d:8d:33:ce:d6:5f:4e:05:f9:a5:78:b2:f4:29:92:52:90:44:
2d:76:e3:04:98:cd:30:9c:b8:3f:20:d9:8d:8f:84:99:b3:05:
ca:21:62:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:37:51 2024 by rpki-client on console-fra.rpki-client.org