Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/cskQJHQ46MSoVl11oB11p51cYDY.roa
File: cskQJHQ46MSoVl11oB11p51cYDY.roa (raw, json)
Hash identifier: ydfQnWAdsUjVwrrUQAWl3fB4REa9trta/EFytcFzmrI=
Subject key identifier: 72:C9:10:24:74:38:E8:C4:A8:56:5D:75:A0:1D:75:A7:9D:5C:60:36
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 018803BEB41F56AF32F6F7B4E90E6E341841
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/cskQJHQ46MSoVl11oB11p51cYDY.roa
Signing time: Wed 10 May 2023 03:40:09 +0000
ROA not before: Wed 10 May 2023 03:40:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 393427
IP address blocks: 94.190.248.0/22 maxlen: 24
84.234.16.0/20 maxlen: 24
194.88.96.0/21 maxlen: 24
5.35.192.0/21 maxlen: 24
85.204.160.0/22 maxlen: 24
62.112.0.0/21 maxlen: 24
194.88.112.0/20 maxlen: 24
93.113.184.0/21 maxlen: 24
185.77.250.0/23 maxlen: 24
91.232.136.0/22 maxlen: 24
188.240.40.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:03:be:b4:1f:56:af:32:f6:f7:b4:e9:0e:6e:34:18:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: May 10 03:40:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=72c910247438e8c4a8565d75a01d75a79d5c6036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a3:24:62:dd:83:bc:f2:03:7a:54:5b:d8:86:
07:e1:b9:78:94:15:34:a1:97:18:d3:a4:14:d9:d9:
57:9a:ac:f3:ee:76:4e:88:a8:7c:d9:91:27:ec:78:
ff:7c:5a:46:b6:c3:20:6d:df:4e:98:a0:7f:7a:88:
a1:d1:45:d4:ab:c6:6e:70:a4:74:62:e7:7b:26:14:
3f:84:2e:76:f5:f6:c6:46:47:e1:5a:88:25:1e:eb:
82:77:47:88:bf:e9:2f:6e:16:f6:ee:56:5c:a6:93:
2c:30:ab:5a:56:1a:ad:8d:32:77:88:2d:ce:18:93:
88:ed:1b:ec:a8:c9:57:89:82:c3:59:64:e4:d3:06:
13:b1:d2:ae:e7:f0:ac:a1:af:f9:f8:59:f2:a2:64:
90:9a:2e:d8:e6:0c:21:f5:32:34:ae:f2:1e:83:6b:
85:a7:76:0c:c5:fe:98:4a:65:d8:e4:20:6b:dd:83:
33:e8:33:75:57:a1:e1:0d:09:b3:f8:30:1e:38:78:
a3:76:17:15:0c:b4:47:a8:5a:58:58:57:d1:ea:4c:
06:40:a1:ad:61:93:b9:e0:ba:63:e8:24:b2:4b:df:
d4:f0:40:42:de:56:e5:5a:d7:4c:ed:90:96:b9:9e:
87:20:29:11:8a:86:f9:26:6b:ca:8c:00:55:92:e1:
51:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:C9:10:24:74:38:E8:C4:A8:56:5D:75:A0:1D:75:A7:9D:5C:60:36
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/cskQJHQ46MSoVl11oB11p51cYDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.192.0/21
62.112.0.0/21
84.234.16.0/20
85.204.160.0/22
91.232.136.0/22
93.113.184.0/21
94.190.248.0/22
185.77.250.0/23
188.240.40.0/23
194.88.96.0/21
194.88.112.0/20
Signature Algorithm: sha256WithRSAEncryption
4d:96:2d:6b:b7:50:1b:da:07:9d:06:6c:6f:97:ac:e2:dc:69:
07:44:bc:83:3b:7d:a8:35:38:f3:6c:7b:a5:2c:a8:89:02:5c:
e4:89:88:92:10:58:87:21:72:b5:24:0d:13:45:9b:44:15:d7:
e1:cd:c4:e2:9e:a4:3a:5b:de:de:c6:d6:0f:1a:95:e6:f3:26:
be:bb:6c:8e:50:65:04:9b:df:af:0e:c9:81:8a:b9:4a:70:9e:
f5:9b:10:9b:33:84:46:32:6f:11:aa:a4:e3:1b:71:aa:4e:3b:
42:20:98:76:bc:6d:21:12:25:28:13:73:91:53:24:2f:6c:24:
1b:3e:4f:49:cc:1e:10:c4:89:ca:6a:66:a0:6b:8e:5e:57:32:
6e:13:4b:cf:16:88:45:92:56:e5:fa:5e:ff:27:1c:a4:db:24:
73:b4:b4:85:ea:2d:70:3e:8a:f4:56:26:07:5e:21:9f:dc:37:
1b:16:66:4f:5b:15:12:2d:6b:dd:ca:2d:66:21:b8:89:c8:06:
75:2c:a1:40:90:8a:75:94:33:03:5c:7c:23:18:f0:be:60:14:
3f:90:0c:67:62:e4:52:98:37:98:ca:49:45:7e:a5:aa:b8:14:
d9:8d:b7:b2:87:08:77:3d:d7:73:b0:67:c4:e5:20:18:a2:d2:
c9:88:c7:46
-----BEGIN CERTIFICATE-----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 at Sat Jul 22 07:39:25 2023 by rpki-client on console-fra.rpki-client.org