Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/4HHY1HyDwxLhg_fFZneltvlTBTk.roa
File: 4HHY1HyDwxLhg_fFZneltvlTBTk.roa (raw, json)
Hash identifier: btki8I5+wG4BZjcgqhb569Gsv7wdkZ5sOJu6l0dNpxM=
Subject key identifier: E0:71:D8:D4:7C:83:C3:12:E1:83:F7:C5:66:77:A5:B6:F9:53:05:39
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 01879D5192D89E87FD812D7E704415022755
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/4HHY1HyDwxLhg_fFZneltvlTBTk.roa
Signing time: Thu 20 Apr 2023 06:19:41 +0000
ROA not before: Thu 20 Apr 2023 06:19:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 393427
IP address blocks: 94.190.248.0/22 maxlen: 24
84.234.16.0/20 maxlen: 24
194.88.96.0/21 maxlen: 24
5.35.192.0/21 maxlen: 24
85.204.160.0/22 maxlen: 24
62.112.0.0/21 maxlen: 24
89.37.128.0/24 maxlen: 24
194.88.112.0/20 maxlen: 24
93.113.184.0/21 maxlen: 24
185.77.250.0/23 maxlen: 24
91.232.136.0/22 maxlen: 24
188.240.40.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9d:51:92:d8:9e:87:fd:81:2d:7e:70:44:15:02:27:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Apr 20 06:19:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e071d8d47c83c312e183f7c56677a5b6f9530539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:21:e1:f7:55:f1:c3:75:bf:a5:7c:e3:0d:33:
3b:d0:58:03:a2:55:5f:cc:9c:33:1b:9b:e3:7b:c6:
85:3b:4a:61:01:a8:9f:93:09:d8:0e:ed:14:61:b8:
44:8c:14:71:3b:fd:8c:2d:dd:1d:2c:d3:47:c0:8f:
2c:aa:9a:ed:7e:55:21:ef:2e:3b:09:61:a8:6d:39:
11:18:38:1b:fb:80:36:c3:d1:fb:f9:c6:8f:0a:63:
a1:20:6a:ce:52:ea:31:bf:51:e3:40:41:00:ea:db:
a2:d0:98:32:53:b3:17:f2:9c:65:b7:81:ba:dc:a0:
09:d3:4d:0f:4d:c8:37:35:4f:82:55:99:7a:44:b8:
83:d6:77:17:8d:ee:da:70:d7:41:da:8a:ff:fd:2d:
45:6c:33:28:06:79:dd:7a:e1:81:4f:8a:ac:cb:ac:
e8:03:03:2d:ec:10:ab:14:2d:1a:64:71:5f:2c:9c:
47:9c:81:bb:9c:32:11:89:e6:b2:a6:9e:d5:da:1e:
0a:32:52:9b:bb:91:7f:8e:52:30:17:47:2e:a6:99:
21:81:b2:e8:42:c4:17:fd:9a:87:0a:74:6b:28:87:
87:4e:a0:b9:08:e3:96:39:e2:38:f6:89:56:46:01:
45:04:e3:7d:ac:3f:20:d6:cf:25:69:6e:d3:64:39:
b3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:71:D8:D4:7C:83:C3:12:E1:83:F7:C5:66:77:A5:B6:F9:53:05:39
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/4HHY1HyDwxLhg_fFZneltvlTBTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.192.0/21
62.112.0.0/21
84.234.16.0/20
85.204.160.0/22
89.37.128.0/24
91.232.136.0/22
93.113.184.0/21
94.190.248.0/22
185.77.250.0/23
188.240.40.0/23
194.88.96.0/21
194.88.112.0/20
Signature Algorithm: sha256WithRSAEncryption
77:fb:63:57:6e:9b:eb:8d:a7:05:5f:91:07:7e:e3:d8:cc:6b:
d9:ff:b1:68:61:0f:de:d8:87:7e:c2:8c:33:20:6f:3e:0b:a9:
6c:e7:4f:64:db:ea:33:54:ae:75:dd:f1:0b:05:6e:5b:09:ae:
35:b2:c0:79:cd:b3:e2:de:70:e3:15:15:1d:a9:74:7b:dd:61:
f0:2b:f5:ff:ec:b9:48:49:90:c3:7b:64:6e:63:e4:e8:95:f9:
d7:97:ae:72:12:84:1f:4e:5b:ec:f7:75:f6:5a:e3:d1:c1:8a:
7a:04:ee:42:97:65:e3:bb:2d:c5:cc:c1:a5:79:f3:9b:74:1c:
ac:06:3f:a2:91:ac:8c:cc:bc:95:10:05:7d:10:81:b6:77:05:
f1:47:62:7e:ed:c2:81:04:fe:7b:ce:3a:72:c3:85:19:e8:b4:
5f:38:cb:83:06:c1:e9:48:6e:ba:23:81:61:fa:ac:4d:09:a1:
ba:fd:4d:cc:01:d6:3f:02:00:2a:9c:2c:fc:0c:41:1d:16:dc:
d3:13:59:a2:ba:0b:7a:1c:3e:6b:19:75:91:87:0e:b5:ae:0e:
c3:29:7d:73:d2:4a:dc:9f:7e:2b:25:d9:53:0c:fe:fd:85:cd:
d7:8f:57:c7:84:fd:1d:d0:f4:1d:62:c5:2e:26:f3:9c:c9:68:
06:51:63:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:55 2023 by rpki-client on console-ams.rpki-client.org