Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/1-cmHpdH65_FwnZO1KGfXrb_23BI.roa
File: 1-cmHpdH65_FwnZO1KGfXrb_23BI.roa (raw, json)
Hash identifier: 4NLCYQgaBoncC2HGWwam2HQfQ7OExah40eLDF3fjMw4=
Subject key identifier: F9:C9:87:A5:D1:FA:E7:F1:70:9D:93:B5:28:67:D7:AD:BF:F6:DC:12
Certificate issuer: /CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Certificate serial: 01856F2FE193C69C5E4EA14C920AA58232E4
Authority key identifier: 2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/1-cmHpdH65_FwnZO1KGfXrb_23BI.roa
Signing time: Sun 01 Jan 2023 21:14:47 +0000
ROA not before: Sun 01 Jan 2023 21:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8286
IP address blocks: 212.14.32.0/20 maxlen: 20
109.69.88.0/21 maxlen: 21
82.145.64.0/19 maxlen: 19
212.14.0.0/19 maxlen: 19
31.193.96.0/21 maxlen: 21
2001:4c58::/30 maxlen: 30
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:2f:e1:93:c6:9c:5e:4e:a1:4c:92:0a:a5:82:32:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Validity
Not Before: Jan 1 21:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f9c987a5d1fae7f1709d93b52867d7adbff6dc12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:35:16:b9:38:71:36:3c:8e:27:8e:62:9d:eb:
74:2c:af:bc:e5:e0:9c:62:78:dc:00:36:d8:02:cf:
db:43:23:03:2e:50:ce:fa:be:15:df:95:6f:49:f3:
1d:61:a0:7f:81:b9:dc:b4:29:70:f7:6a:1e:b7:26:
45:84:f6:76:a3:84:b5:a7:28:f4:08:d2:56:37:2c:
51:08:37:27:e9:5f:8e:3f:9b:ff:ab:c4:2a:89:17:
cb:d9:6a:62:2b:6d:06:b7:f0:d1:72:0d:7c:19:61:
fb:7b:b7:18:cc:96:17:f2:b7:0b:ff:00:27:b4:38:
d7:7d:cb:59:28:bd:14:06:9d:3d:e1:b1:e1:da:08:
91:18:fe:e8:75:6b:6e:c7:a2:ad:af:dd:e4:b8:c9:
46:c7:6f:3b:29:60:5a:0a:af:cf:de:9b:16:e7:5e:
2b:db:3e:fb:d0:02:62:98:e5:9d:ed:7c:65:ed:c0:
72:46:25:df:a0:c3:c4:b2:9d:3c:ff:2c:0f:b4:7a:
27:f9:40:a3:ab:1a:2f:78:e0:be:34:6f:c3:23:27:
53:7f:33:e9:c2:57:c0:de:1c:f2:a5:df:d0:52:b3:
fa:81:91:35:51:88:52:c6:10:7b:ee:94:54:d6:04:
0b:0c:f8:e0:14:37:0b:01:9d:70:09:cb:84:62:2c:
43:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:C9:87:A5:D1:FA:E7:F1:70:9D:93:B5:28:67:D7:AD:BF:F6:DC:12
X509v3 Authority Key Identifier:
keyid:2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/1-cmHpdH65_FwnZO1KGfXrb_23BI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.96.0/21
82.145.64.0/19
109.69.88.0/21
212.14.0.0-212.14.47.255
IPv6:
2001:4c58::/30
Signature Algorithm: sha256WithRSAEncryption
15:9f:fe:52:7f:a9:0c:0b:df:5b:8e:12:67:63:71:35:f2:24:
e0:df:ac:87:be:63:a2:52:06:57:9d:c8:06:94:98:ad:0f:f5:
91:2e:68:9a:17:ac:c9:68:4d:cc:a3:54:3d:99:b1:00:28:33:
88:40:ad:62:4d:f9:e3:12:d7:60:f5:96:f2:da:e6:7f:c1:be:
9a:e7:0e:77:af:d5:29:df:a5:4e:aa:35:78:b5:1b:3f:da:b4:
80:81:15:b5:d3:75:c0:e9:e1:63:a7:59:6b:23:14:b5:de:94:
4f:1a:96:af:cb:b1:07:3c:19:cd:0d:c4:55:7d:5b:6d:49:fb:
c4:5f:6a:3c:9b:e6:ba:a6:df:bc:e1:c1:35:fd:97:ff:f4:46:
64:6e:16:7e:30:ec:1c:0b:10:21:c5:b7:2b:1b:db:34:92:a3:
35:ab:be:11:24:ab:99:b4:dd:c0:a5:c0:e7:80:ef:bf:dc:e9:
73:3c:be:d5:9c:35:b1:3b:46:31:bf:cc:b9:f5:d0:81:61:88:
a9:c2:e0:a4:9b:73:c2:f6:b9:d2:ee:3f:7a:b7:5b:54:c5:ad:
f2:a0:b6:77:c8:07:77:d6:90:85:6f:19:7f:cc:ea:87:69:d0:
8e:7e:39:f2:14:67:8b:1d:e9:3c:17:57:5d:16:f1:7d:01:c8:
55:d1:ee:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:59 2024 by rpki-client on console-ams.rpki-client.org