Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/o9tknJp85CmLKH9KJYdkIkrfvZk.roa
File: o9tknJp85CmLKH9KJYdkIkrfvZk.roa (raw, json)
Hash identifier: OqTesqAGzD7LQiJQoRdoAZ/UT+eVx/DKTXnmvIyveSA=
Subject key identifier: A3:DB:64:9C:9A:7C:E4:29:8B:28:7F:4A:25:87:64:22:4A:DF:BD:99
Certificate issuer: /CN=1d01f4dffd6fba66cdf8c374c9b0f047552705dd
Certificate serial: 018C3FA04ACE458B372D5A5C1D6C78A2EE0E
Authority key identifier: 1D:01:F4:DF:FD:6F:BA:66:CD:F8:C3:74:C9:B0:F0:47:55:27:05:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/o9tknJp85CmLKH9KJYdkIkrfvZk.roa
Signing time: Wed 06 Dec 2023 14:55:18 +0000
ROA not before: Wed 06 Dec 2023 14:55:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8851
IP address blocks: 62.169.128.0/20 maxlen: 20
217.29.192.0/22 maxlen: 22
62.169.144.0/22 maxlen: 22
62.164.128.0/17 maxlen: 17
62.169.148.0/23 maxlen: 23
62.169.150.0/24 maxlen: 24
62.169.152.0/22 maxlen: 22
62.164.144.0/21 maxlen: 21
62.169.156.0/24 maxlen: 24
62.169.158.0/23 maxlen: 23
193.108.168.0/23 maxlen: 23
194.62.44.0/22 maxlen: 22
195.26.224.0/19 maxlen: 19
195.200.0.0/19 maxlen: 19
195.184.224.0/19 maxlen: 19
212.32.56.0/21 maxlen: 21
212.32.54.0/23 maxlen: 23
212.32.64.0/18 maxlen: 18
213.254.160.0/19 maxlen: 19
212.32.0.0/17 maxlen: 17
212.32.0.0/20 maxlen: 20
212.32.16.0/21 maxlen: 21
212.32.24.0/22 maxlen: 22
212.32.28.0/23 maxlen: 23
212.32.32.0/21 maxlen: 21
86.54.0.0/16 maxlen: 16
212.32.42.0/23 maxlen: 23
212.32.44.0/23 maxlen: 23
212.32.48.0/22 maxlen: 22
212.56.56.0/23 maxlen: 23
212.56.60.0/22 maxlen: 22
217.154.0.0/16 maxlen: 16
212.56.48.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3f:a0:4a:ce:45:8b:37:2d:5a:5c:1d:6c:78:a2:ee:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d01f4dffd6fba66cdf8c374c9b0f047552705dd
Validity
Not Before: Dec 6 14:55:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a3db649c9a7ce4298b287f4a258764224adfbd99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:20:3c:06:a8:94:83:6d:c7:9e:97:30:c4:b3:
9e:32:3a:bc:2c:bb:80:07:c0:f6:84:db:d1:f8:72:
14:d5:eb:16:00:d7:bf:98:57:17:05:e2:cc:8b:06:
9c:77:07:d9:60:54:7c:7a:1e:32:0e:08:01:81:9d:
05:a8:94:2c:20:6d:8e:da:f3:07:65:d6:2f:40:b6:
88:83:90:05:79:83:11:7f:9f:df:86:32:5f:ca:0b:
b2:2d:63:7f:4f:9d:89:ce:08:76:4f:aa:2a:0f:57:
6d:99:48:d0:c2:72:93:3b:2d:f4:3f:33:1f:5e:ec:
e0:89:8d:25:3f:26:4a:7d:15:ce:87:99:bd:2f:ee:
c1:72:ff:cf:9f:d7:03:ea:87:f2:ad:64:17:b4:cb:
70:86:83:a9:6d:75:83:1f:15:5d:e2:3b:fa:23:b5:
53:ae:17:06:a1:65:15:3d:ea:f9:3b:cd:4f:25:8c:
47:5f:86:d0:9e:0a:0d:b7:bd:a3:44:bc:2f:44:7c:
3c:34:e8:1d:cd:29:1b:42:4d:1c:ca:03:96:e8:2e:
9e:cf:fe:3a:1d:de:14:ef:dd:69:e6:d8:bf:36:3a:
4f:57:34:45:1c:a2:70:c2:12:49:c8:57:f7:52:de:
de:c7:ad:c6:f9:8a:45:e8:fd:70:3b:49:e4:3e:c2:
f2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:DB:64:9C:9A:7C:E4:29:8B:28:7F:4A:25:87:64:22:4A:DF:BD:99
X509v3 Authority Key Identifier:
keyid:1D:01:F4:DF:FD:6F:BA:66:CD:F8:C3:74:C9:B0:F0:47:55:27:05:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/o9tknJp85CmLKH9KJYdkIkrfvZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.164.128.0/17
62.169.128.0-62.169.150.255
62.169.152.0-62.169.156.255
62.169.158.0/23
86.54.0.0/16
193.108.168.0/23
194.62.44.0/22
195.26.224.0/19
195.184.224.0/19
195.200.0.0/19
212.32.0.0/17
212.56.48.0-212.56.57.255
212.56.60.0/22
213.254.160.0/19
217.29.192.0/22
217.154.0.0/16
Signature Algorithm: sha256WithRSAEncryption
09:ef:32:d1:38:8e:97:19:72:8e:9e:27:8a:2d:3e:99:6c:31:
bd:71:fc:33:d1:ba:fc:e9:db:93:e6:04:21:40:a7:ed:46:71:
8c:c9:17:29:e2:9e:f1:9a:d3:39:b9:6e:10:92:dd:30:85:2a:
77:81:58:b4:5d:6f:4e:37:4b:f6:51:e7:57:e1:ec:28:44:08:
c7:3a:05:b5:82:f4:c7:20:a7:7b:8a:ed:a8:09:d2:bc:3c:b9:
e2:2c:b8:ae:94:7c:2e:96:62:86:75:7f:a8:cf:c5:5c:f6:c9:
8a:79:fb:58:71:28:1f:86:be:fc:ed:c5:a3:c9:41:16:95:06:
74:d6:4e:fe:1c:1d:77:4a:2e:85:66:1f:f1:76:bb:0d:87:c6:
c7:4a:1c:ab:26:11:50:bb:92:9b:39:36:a7:d2:db:fe:2e:a0:
15:c8:02:7a:c6:49:b5:e4:7f:8c:4b:62:19:c3:df:02:fc:1c:
af:8f:f8:49:8d:68:da:cf:18:44:bb:cc:6f:dd:59:f9:d9:6c:
13:58:8f:d2:d3:4a:2f:71:2e:cd:f8:2a:51:d7:e0:bc:33:6f:
35:b4:a2:c0:21:a2:59:c3:9d:af:73:8f:03:75:a1:e4:fc:eb:
12:27:aa:a5:bd:33:dc:2f:0b:74:81:ee:2e:34:31:3c:8f:2d:
fe:54:9a:67
-----BEGIN CERTIFICATE-----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Generated at Mon Dec 11 17:08:50 2023 by rpki-client on console-ams.rpki-client.org