Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/KXjRv6TocHd3pVkEVNd7EgoxTrc.roa
File: KXjRv6TocHd3pVkEVNd7EgoxTrc.roa (raw, json)
Hash identifier: YruGHKDCpNxt8UQQDd3dyVIpc/3MSevZGUmzo39pqrw=
Subject key identifier: 29:78:D1:BF:A4:E8:70:77:77:A5:59:04:54:D7:7B:12:0A:31:4E:B7
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 0187DE902B39B717BD2E62F82F1A56034AB6
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/KXjRv6TocHd3pVkEVNd7EgoxTrc.roa
Signing time: Tue 02 May 2023 22:23:22 +0000
ROA not before: Tue 02 May 2023 22:23:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 393427
IP address blocks: 193.124.20.0/23 maxlen: 23
85.204.160.0/22 maxlen: 24
89.37.228.0/22 maxlen: 22
62.112.0.0/21 maxlen: 24
194.88.112.0/20 maxlen: 24
89.37.236.0/22 maxlen: 22
93.113.184.0/21 maxlen: 24
62.112.12.0/23 maxlen: 23
89.39.172.0/23 maxlen: 23
194.58.64.0/23 maxlen: 23
188.240.40.0/23 maxlen: 24
89.36.236.0/22 maxlen: 22
84.234.16.0/20 maxlen: 24
86.107.108.0/23 maxlen: 23
188.211.250.0/23 maxlen: 23
89.40.176.0/22 maxlen: 22
5.35.192.0/21 maxlen: 24
194.135.26.0/23 maxlen: 23
91.232.136.0/22 maxlen: 24
94.190.248.0/22 maxlen: 24
89.37.188.0/22 maxlen: 22
213.159.10.0/23 maxlen: 23
195.133.202.0/23 maxlen: 23
213.159.12.0/23 maxlen: 23
194.135.132.0/23 maxlen: 23
195.133.208.0/23 maxlen: 23
89.37.216.0/23 maxlen: 23
194.88.96.0/21 maxlen: 24
89.34.124.0/23 maxlen: 23
185.77.250.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:de:90:2b:39:b7:17:bd:2e:62:f8:2f:1a:56:03:4a:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: May 2 22:23:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2978d1bfa4e8707777a5590454d77b120a314eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e9:fb:5b:c5:c5:39:f9:7b:f2:84:6d:fd:6a:
54:0b:4d:98:5a:64:af:9a:42:63:c2:7b:d2:44:cb:
30:4b:3d:1a:b3:fa:84:aa:7e:86:f8:f4:b6:59:94:
d3:5a:9d:7d:15:70:83:10:00:c4:08:6e:60:71:47:
80:3a:22:26:b4:6c:86:7e:ad:44:07:e2:2d:80:a7:
c4:24:26:13:cf:53:03:4a:44:aa:19:3b:7e:d2:89:
0b:47:fa:b5:4a:78:64:a3:19:3f:d1:d9:4b:f9:03:
70:e0:8c:07:d7:4b:8f:ca:48:f6:69:a7:7c:79:7d:
17:66:33:47:35:72:d2:2c:16:f8:be:ce:93:2e:31:
d2:21:18:6d:56:d9:c5:00:65:70:89:e6:cf:00:7b:
e5:43:8e:a4:9f:b9:1e:71:1e:03:19:bf:74:5d:bb:
aa:22:97:68:3a:74:69:a3:30:b0:56:00:56:c5:d5:
ed:14:3b:e5:9c:59:92:35:e1:d4:24:46:fb:22:52:
5c:ec:23:09:a1:d8:ba:fa:ab:f4:7b:63:20:8d:76:
74:dd:37:84:38:8e:be:9b:4e:0b:aa:9b:74:4f:1e:
75:af:e9:a0:a8:a4:65:43:13:80:69:0b:83:68:dc:
10:a3:bf:58:93:63:7f:7b:ee:ed:4d:e0:c4:be:0b:
17:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:78:D1:BF:A4:E8:70:77:77:A5:59:04:54:D7:7B:12:0A:31:4E:B7
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/KXjRv6TocHd3pVkEVNd7EgoxTrc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.192.0/21
62.112.0.0/21
62.112.12.0/23
84.234.16.0/20
85.204.160.0/22
86.107.108.0/23
89.34.124.0/23
89.36.236.0/22
89.37.188.0/22
89.37.216.0/23
89.37.228.0/22
89.37.236.0/22
89.39.172.0/23
89.40.176.0/22
91.232.136.0/22
93.113.184.0/21
94.190.248.0/22
185.77.250.0/23
188.211.250.0/23
188.240.40.0/23
193.124.20.0/23
194.58.64.0/23
194.88.96.0/21
194.88.112.0/20
194.135.26.0/23
194.135.132.0/23
195.133.202.0/23
195.133.208.0/23
213.159.10.0-213.159.13.255
Signature Algorithm: sha256WithRSAEncryption
8e:01:81:f6:28:07:0d:6c:b6:a2:17:52:8c:76:03:10:0d:67:
4b:ca:a1:f1:f3:08:d7:bc:e6:ff:05:01:81:e4:ef:a2:88:25:
dd:91:a5:04:60:04:4a:e3:23:bc:ae:7a:2b:64:1a:e1:41:e3:
36:ff:c6:d6:fa:a3:a5:ae:c7:02:fd:6f:30:85:75:f4:c6:22:
59:0a:29:78:f1:36:61:e9:c9:88:dc:94:63:4b:8f:2c:8d:fc:
f8:a0:4f:76:2f:c5:5b:7d:f2:65:c7:c0:f7:15:a9:75:54:d1:
0c:af:a2:95:0c:3e:f6:40:fd:74:dc:48:ae:9e:66:bb:1d:96:
7c:8c:19:b8:b2:ce:66:97:d2:5c:5d:65:0b:fd:bf:a3:79:73:
73:f2:3b:d1:57:79:5c:d1:16:e7:79:b8:85:f9:73:69:82:d6:
af:34:3a:85:27:c0:96:44:7a:9b:69:f7:4a:8f:4a:9f:b0:8b:
39:22:f2:bf:17:52:3c:78:85:31:29:74:c0:4d:fd:a1:5b:a5:
65:84:c2:7e:06:78:59:88:d6:f3:2e:4b:0a:b8:a8:f6:45:21:
3a:d4:80:01:2f:eb:d5:ee:ce:6d:23:a4:25:82:40:32:0d:21:
23:dc:90:35:10:fe:17:9f:45:a6:b9:9c:80:7c:40:a1:e7:80:
d6:96:71:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:55 2023 by rpki-client on console-ams.rpki-client.org