Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/T8mM69MZuPCVLKhwNGN4cegX3c4.roa
File: T8mM69MZuPCVLKhwNGN4cegX3c4.roa (raw, json)
Hash identifier: uUy/9ks8L3AIrNFZ3gDgp9KZNk7iAcG8BmEcoMFXBb4=
Subject key identifier: 4F:C9:8C:EB:D3:19:B8:F0:95:2C:A8:70:34:63:78:71:E8:17:DD:CE
Certificate issuer: /CN=ec5ada0dc900a13c83b70ac3f587fb8c2e1df030
Certificate serial: 0188F7275691CBD659D74C6F638A0FFC7323
Authority key identifier: EC:5A:DA:0D:C9:00:A1:3C:83:B7:0A:C3:F5:87:FB:8C:2E:1D:F0:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7FraDckAoTyDtwrD9Yf7jC4d8DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/T8mM69MZuPCVLKhwNGN4cegX3c4.roa
Signing time: Mon 26 Jun 2023 10:02:10 +0000
ROA not before: Mon 26 Jun 2023 10:02:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51580
IP address blocks: 31.193.16.0/20 maxlen: 24
80.66.208.0/20 maxlen: 24
145.14.160.0/19 maxlen: 24
141.105.152.0/21 maxlen: 24
185.121.148.0/22 maxlen: 24
178.250.64.0/21 maxlen: 24
185.139.28.0/22 maxlen: 24
185.5.180.0/22 maxlen: 24
194.110.56.0/22 maxlen: 24
46.17.152.0/21 maxlen: 24
178.218.148.0/22 maxlen: 24
185.180.180.0/23 maxlen: 24
109.238.16.0/20 maxlen: 24
185.55.88.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:f7:27:56:91:cb:d6:59:d7:4c:6f:63:8a:0f:fc:73:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec5ada0dc900a13c83b70ac3f587fb8c2e1df030
Validity
Not Before: Jun 26 10:02:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4fc98cebd319b8f0952ca87034637871e817ddce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:fd:77:2c:47:74:54:3a:c7:71:65:32:3f:66:
4e:fd:e4:ff:72:04:ec:30:72:f6:a9:08:7d:40:97:
7a:5c:62:f2:a2:a2:1d:22:f9:b9:a1:a9:13:a9:99:
66:75:6f:ad:23:6f:a6:4d:6b:1b:f3:40:02:1d:65:
79:1b:ad:e5:4b:b8:c3:d9:be:0c:c5:9b:f1:98:17:
e8:11:4c:63:e8:72:ab:78:c1:2d:b1:e2:26:3e:2b:
5e:2e:a5:ce:b5:50:03:02:8e:29:58:8a:4a:80:d8:
71:96:72:48:1d:f2:92:a5:a6:65:f3:16:8c:e3:44:
7c:7f:ae:bd:01:99:28:fc:9f:25:8f:ba:df:4a:3a:
ce:42:ed:72:4c:7b:5e:87:01:c0:f3:ba:b3:3b:be:
d4:ed:57:ef:9f:ed:ce:74:b8:2f:a6:6c:02:0d:f5:
4a:bc:2e:14:11:f2:76:a0:f0:0a:5a:64:87:85:ca:
78:f9:61:31:d1:0f:62:30:08:76:35:54:55:88:43:
84:71:9e:86:24:d7:23:ad:9f:d0:bd:48:8a:7c:a8:
4a:8a:c4:55:ca:ac:a8:50:12:d7:d8:d3:80:fd:be:
7d:ce:d8:e5:19:3c:cf:43:f3:74:51:7f:31:5f:12:
5a:27:53:ed:ad:d0:65:c8:a0:65:32:d4:5a:54:0c:
d0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:C9:8C:EB:D3:19:B8:F0:95:2C:A8:70:34:63:78:71:E8:17:DD:CE
X509v3 Authority Key Identifier:
keyid:EC:5A:DA:0D:C9:00:A1:3C:83:B7:0A:C3:F5:87:FB:8C:2E:1D:F0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7FraDckAoTyDtwrD9Yf7jC4d8DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/T8mM69MZuPCVLKhwNGN4cegX3c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/7FraDckAoTyDtwrD9Yf7jC4d8DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.16.0/20
46.17.152.0/21
80.66.208.0/20
109.238.16.0/20
141.105.152.0/21
145.14.160.0/19
178.218.148.0/22
178.250.64.0/21
185.5.180.0/22
185.55.88.0/22
185.121.148.0/22
185.139.28.0/22
185.180.180.0/23
194.110.56.0/22
Signature Algorithm: sha256WithRSAEncryption
25:4c:83:7c:0d:69:d0:3c:13:9c:12:0a:06:1e:7d:57:d0:aa:
bd:59:49:78:ce:28:33:68:96:64:3f:5c:46:85:6f:a5:af:a2:
c4:ae:ee:97:25:91:43:6d:db:90:13:28:22:a1:2f:7c:e8:8d:
92:24:6e:b8:0b:85:36:e6:33:2e:4d:36:7a:ec:80:c4:ac:17:
86:e0:e0:30:3b:1f:d2:c3:36:e0:fa:04:6c:6f:aa:87:45:c2:
9c:06:5f:1e:8a:f5:0e:ad:43:8b:e4:6d:aa:7c:41:aa:7e:a0:
4b:42:42:4f:65:a9:cf:c6:b5:84:a9:81:d6:43:cc:bb:92:32:
47:9b:5d:4c:2d:23:38:fa:8e:99:ee:5c:89:7c:67:27:13:ec:
5e:bd:4d:91:fd:39:09:79:f0:f5:fa:a8:d7:99:58:4d:4b:d6:
e9:b4:1c:8d:c3:ce:71:93:f3:ae:05:62:57:9d:b4:31:7b:9b:
62:32:59:2c:c7:35:0c:bf:75:94:4d:cd:50:b2:94:e6:96:17:
c4:e4:95:99:92:07:a8:bf:16:e1:90:86:ca:4b:73:a7:2e:92:
2d:24:ef:1e:b6:fb:d5:e0:27:6c:25:28:e7:a3:39:ef:77:64:
e1:16:48:bf:b6:b5:53:c0:a0:c9:d3:f2:5d:9f:f6:c5:08:87:
7f:f2:e9:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 08:10:25 2024 by rpki-client on console-fra.rpki-client.org