Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/Ix0L7byL7JJ8FMFnWnnN4QNSeIY.roa
File: Ix0L7byL7JJ8FMFnWnnN4QNSeIY.roa (raw, json)
Hash identifier: th7OdXre30EHwXAv+iucz5HjPD/YOh4y5S2T2llS9fM=
Subject key identifier: 23:1D:0B:ED:BC:8B:EC:92:7C:14:C1:67:5A:79:CD:E1:03:52:78:86
Certificate issuer: /CN=929352a8d2dd70c91ffcec8e323fe69f1e9a4139
Certificate serial: 0185712795FB4D2EC32C8C2E85D54EEF7F5E
Authority key identifier: 92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/Ix0L7byL7JJ8FMFnWnnN4QNSeIY.roa
Signing time: Mon 02 Jan 2023 06:24:57 +0000
ROA not before: Mon 02 Jan 2023 06:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29208
IP address blocks: 213.191.96.0/19 maxlen: 19
62.4.112.0/20 maxlen: 20
212.80.64.0/19 maxlen: 19
88.208.64.0/18 maxlen: 18
88.146.0.0/17 maxlen: 17
195.250.128.0/19 maxlen: 19
89.235.0.0/18 maxlen: 18
212.24.128.0/19 maxlen: 19
62.4.96.0/21 maxlen: 21
62.4.104.0/22 maxlen: 22
195.122.192.0/19 maxlen: 19
83.148.0.0/18 maxlen: 18
109.235.176.0/22 maxlen: 22
95.80.192.0/18 maxlen: 18
213.175.32.0/19 maxlen: 19
194.213.224.0/19 maxlen: 19
213.151.64.0/19 maxlen: 19
185.24.236.0/22 maxlen: 22
195.250.154.0/24 maxlen: 24
62.44.0.0/19 maxlen: 19
82.113.32.0/19 maxlen: 19
82.119.240.0/20 maxlen: 20
212.20.96.0/19 maxlen: 19
82.100.0.0/18 maxlen: 18
195.128.192.0/19 maxlen: 19
212.27.192.0/19 maxlen: 19
62.177.64.0/18 maxlen: 18
2001:4de8::/32 maxlen: 48
2001:1508::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:27:95:fb:4d:2e:c3:2c:8c:2e:85:d5:4e:ef:7f:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=929352a8d2dd70c91ffcec8e323fe69f1e9a4139
Validity
Not Before: Jan 2 06:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=231d0bedbc8bec927c14c1675a79cde103527886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:75:27:95:0f:39:dd:08:36:7f:f7:d5:13:a3:
ff:3c:1d:29:d2:5f:01:76:23:dc:78:66:28:72:a2:
28:2a:e6:a3:fe:ef:a4:78:61:0b:f9:44:2b:58:4b:
1f:02:49:c5:30:ff:1c:6c:e9:e1:f6:3b:b6:51:35:
d7:e1:1f:0e:20:4d:f5:a5:97:e0:11:db:3f:52:65:
9b:47:13:cc:76:26:7c:f7:d5:44:9b:f5:f9:76:ed:
f5:cd:f8:c9:37:f1:d2:e8:64:fe:92:2b:85:f6:68:
00:e2:b2:9f:0d:05:7a:11:d1:0a:3c:6d:5f:12:05:
03:e0:b2:e5:00:aa:b2:9c:a7:70:80:91:65:55:84:
04:c7:29:a0:43:77:d1:b6:9f:19:c3:5b:89:e3:a4:
81:39:55:f0:af:c2:25:94:18:ee:db:8a:c0:b1:a1:
b1:6d:4e:3c:6b:9d:94:56:33:1b:3b:9d:1a:d1:dc:
6b:d1:df:36:f1:27:a1:a7:56:cc:8d:0a:c7:6a:57:
df:a6:8f:b9:97:46:3d:ce:1a:91:3a:3e:11:c2:8c:
0d:ff:c1:72:28:3e:fa:37:9c:f2:67:97:48:61:c5:
3d:a6:cc:1a:6f:83:ed:e9:c5:ba:17:4f:be:4c:31:
94:57:3d:81:07:9d:f2:a3:05:02:04:96:de:7c:bd:
6b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:1D:0B:ED:BC:8B:EC:92:7C:14:C1:67:5A:79:CD:E1:03:52:78:86
X509v3 Authority Key Identifier:
keyid:92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/Ix0L7byL7JJ8FMFnWnnN4QNSeIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.4.96.0-62.4.107.255
62.4.112.0/20
62.44.0.0/19
62.177.64.0/18
82.100.0.0/18
82.113.32.0/19
82.119.240.0/20
83.148.0.0/18
88.146.0.0/17
88.208.64.0/18
89.235.0.0/18
95.80.192.0/18
109.235.176.0/22
185.24.236.0/22
194.213.224.0/19
195.122.192.0/19
195.128.192.0/19
195.250.128.0/19
212.20.96.0/19
212.24.128.0/19
212.27.192.0/19
212.80.64.0/19
213.151.64.0/19
213.175.32.0/19
213.191.96.0/19
IPv6:
2001:1508::/32
2001:4de8::/32
Signature Algorithm: sha256WithRSAEncryption
d4:d5:9e:54:56:ad:d9:3b:8f:f2:74:37:6b:58:b3:0a:7c:19:
ab:9c:f3:4c:09:ae:7b:5f:2c:1a:89:18:1b:35:f3:5e:07:fc:
ad:8e:b1:4e:55:98:a3:d0:3b:08:5d:b3:d1:ad:b6:3d:c2:9c:
ae:40:91:88:8e:f0:19:70:71:50:c1:72:92:a5:d7:f6:52:50:
8c:fb:ab:e2:8a:fc:07:69:d3:5c:ef:5e:65:5e:4a:6d:6f:45:
c2:a2:5b:1e:98:f1:d1:86:20:a7:2c:3b:ea:6e:cc:ba:e8:8f:
e0:61:62:b5:04:94:58:22:19:d9:3f:4d:e6:e7:11:76:69:7e:
a9:81:99:b6:3e:bc:7c:b6:60:61:35:72:57:61:52:3b:f3:a4:
ee:96:fa:b4:39:62:69:c8:71:a4:e7:53:29:5b:20:c0:2f:0a:
d0:9d:a9:6d:f0:63:02:5e:c1:d6:4e:f1:b6:79:b4:d2:e6:ce:
9a:2f:35:4e:a2:a0:44:ad:a1:e7:70:1b:53:61:04:92:74:9e:
28:d8:63:06:21:89:21:7f:8d:5e:45:2d:b1:35:4c:0e:21:89:
a8:cc:aa:db:ed:e4:62:08:48:94:bb:6b:25:ae:a2:db:3f:f9:
04:48:29:4e:2d:c5:81:ec:b0:56:82:5b:d5:bc:bc:4c:a4:14:
9d:90:47:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:47 2023 by rpki-client on console-ams.rpki-client.org