Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/IPDq3G2fPIJe8w0WyCIKskYooe4.roa
File: IPDq3G2fPIJe8w0WyCIKskYooe4.roa (raw, json)
Hash identifier: AMJrRb4LJLbwB/3c+4bXKmZaB1Xr+IRrkEYRO3t0elE=
Subject key identifier: 20:F0:EA:DC:6D:9F:3C:82:5E:F3:0D:16:C8:22:0A:B2:46:28:A1:EE
Certificate issuer: /CN=1d01f4dffd6fba66cdf8c374c9b0f047552705dd
Certificate serial: 018C5E334EB9B71A88734558934ED3574AB1
Authority key identifier: 1D:01:F4:DF:FD:6F:BA:66:CD:F8:C3:74:C9:B0:F0:47:55:27:05:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/IPDq3G2fPIJe8w0WyCIKskYooe4.roa
Signing time: Tue 12 Dec 2023 13:24:29 +0000
ROA not before: Tue 12 Dec 2023 13:24:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206509
IP address blocks: 194.164.114.0/24 maxlen: 24
217.29.192.0/20 maxlen: 22
62.164.128.0/17 maxlen: 21
213.254.160.0/19 maxlen: 19
62.164.144.0/21 maxlen: 21
212.32.0.0/17 maxlen: 17
193.108.168.0/23 maxlen: 23
86.54.0.0/16 maxlen: 16
194.164.97.0/24 maxlen: 24
194.62.44.0/22 maxlen: 22
217.154.0.0/16 maxlen: 16
195.26.224.0/19 maxlen: 19
195.200.0.0/19 maxlen: 19
194.164.181.0/24 maxlen: 24
2001:15e0::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5e:33:4e:b9:b7:1a:88:73:45:58:93:4e:d3:57:4a:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d01f4dffd6fba66cdf8c374c9b0f047552705dd
Validity
Not Before: Dec 12 13:24:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=20f0eadc6d9f3c825ef30d16c8220ab24628a1ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ea:99:65:84:a1:6f:61:76:fd:4b:68:a7:38:
30:b3:fd:3e:ea:5e:1f:66:5e:f1:20:70:c8:66:1b:
97:5a:a5:f0:21:eb:66:83:87:4c:6d:20:f6:b5:58:
08:39:d5:0c:04:fa:0a:1b:b8:54:b1:d4:84:f3:e9:
da:af:4f:3c:03:08:ad:98:22:13:03:0a:86:ea:e1:
d7:31:13:9b:a1:34:83:6e:f7:9f:43:83:a7:d5:9f:
6b:c0:0c:66:61:cc:6c:e8:f1:74:13:91:cc:67:4d:
4a:b4:4d:ce:bd:70:98:86:23:b6:61:38:48:43:0e:
31:2b:cd:7e:bd:28:3e:66:e0:62:97:06:c7:dd:d9:
e6:b7:ca:56:bd:60:12:bd:e4:75:89:7c:81:0d:5b:
7b:73:e9:4b:7b:25:8e:e0:0c:29:90:e3:81:57:64:
7a:9a:82:6a:2e:15:0e:79:49:4a:73:da:27:37:76:
4c:4f:0c:84:c3:a3:61:d8:fc:4d:cc:00:d2:7b:5e:
8e:6a:42:8c:b1:0b:96:f1:ed:0a:b6:2e:40:a2:36:
0c:15:e0:41:a9:e9:70:3e:42:5e:90:02:01:d5:f3:
1e:8d:86:39:fa:fb:a0:27:e9:cf:19:ee:64:3c:5e:
12:b7:4d:02:c2:e5:e9:10:4a:d7:dc:5c:6c:b7:5f:
28:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F0:EA:DC:6D:9F:3C:82:5E:F3:0D:16:C8:22:0A:B2:46:28:A1:EE
X509v3 Authority Key Identifier:
keyid:1D:01:F4:DF:FD:6F:BA:66:CD:F8:C3:74:C9:B0:F0:47:55:27:05:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/IPDq3G2fPIJe8w0WyCIKskYooe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.164.128.0/17
86.54.0.0/16
193.108.168.0/23
194.62.44.0/22
194.164.97.0/24
194.164.114.0/24
194.164.181.0/24
195.26.224.0/19
195.200.0.0/19
212.32.0.0/17
213.254.160.0/19
217.29.192.0/20
217.154.0.0/16
IPv6:
2001:15e0::/32
Signature Algorithm: sha256WithRSAEncryption
0c:15:7e:51:d8:65:84:4c:48:23:da:09:a5:a8:bc:e2:fc:4c:
30:a2:e7:eb:36:ec:01:e6:7b:c0:aa:4c:9c:24:d3:7c:ba:23:
31:a6:0c:3f:9a:89:e5:d0:05:79:d0:29:34:d7:7d:a2:52:7b:
3f:1b:fc:db:fb:72:df:6d:62:c2:9d:e0:cd:c0:be:b6:0b:26:
63:00:bc:2b:4b:a6:c3:9e:06:c4:ed:0a:42:66:51:ba:cd:62:
58:42:7c:ba:b2:95:1c:e7:d2:56:7c:63:93:88:08:99:c8:75:
01:92:e4:12:62:87:a2:6e:8c:c3:7f:09:68:45:2c:80:f0:c6:
2b:04:b5:a6:5f:c6:12:7f:d7:07:50:52:a4:b3:03:0e:b6:fb:
21:bc:a9:9e:8c:9c:44:6f:40:ca:6d:86:d0:50:55:24:35:07:
27:7b:dd:2e:71:92:e3:ec:5c:db:b7:ce:f4:03:41:66:32:27:
50:90:55:ee:13:c7:be:e5:26:fc:af:47:81:7f:bb:2b:ec:ed:
5f:78:af:9b:5f:67:e2:98:46:d3:bb:10:27:68:b5:53:1e:e5:
d3:e3:23:da:3d:5f:c8:cb:11:12:48:21:2d:8f:8f:3d:9b:08:
59:ce:fa:73:a3:7c:5e:1c:6f:f9:24:e2:a1:27:38:fa:99:86:
6b:a1:34:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:03:37 2024 by rpki-client on console-ams.rpki-client.org