Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/PZVz0Wr7IgJPUJGUVvAkeH-xESA.roa
File: PZVz0Wr7IgJPUJGUVvAkeH-xESA.roa (raw, json)
Hash identifier: rCHotCXkXx+go8zz/J4VxEitN9gaCAmDqDg5Tic1EU4=
Subject key identifier: 3D:95:73:D1:6A:FB:22:02:4F:50:91:94:56:F0:24:78:7F:B1:11:20
Certificate issuer: /CN=e43baafc64b33e43db78dc7aed605ef70406d9af
Certificate serial: 018BAE56AA1568A1750B626AFB98DC13B27D
Authority key identifier: E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/PZVz0Wr7IgJPUJGUVvAkeH-xESA.roa
Signing time: Wed 08 Nov 2023 09:49:57 +0000
ROA not before: Wed 08 Nov 2023 09:49:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3209
IP address blocks: 83.169.128.0/18 maxlen: 18
185.19.196.0/22 maxlen: 22
90.187.0.0/16 maxlen: 16
188.192.0.0/14 maxlen: 14
91.64.0.0/14 maxlen: 14
31.16.0.0/14 maxlen: 14
88.134.0.0/16 maxlen: 16
24.134.0.0/16 maxlen: 16
146.52.0.0/16 maxlen: 16
109.84.0.0/15 maxlen: 15
37.4.0.0/15 maxlen: 15
109.47.0.0/16 maxlen: 16
77.20.0.0/14 maxlen: 14
77.24.0.0/16 maxlen: 16
178.24.0.0/14 maxlen: 14
95.88.0.0/14 maxlen: 14
77.25.0.0/17 maxlen: 17
2a02:8100::/27 maxlen: 27
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ae:56:aa:15:68:a1:75:0b:62:6a:fb:98:dc:13:b2:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43baafc64b33e43db78dc7aed605ef70406d9af
Validity
Not Before: Nov 8 09:49:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d9573d16afb22024f50919456f024787fb11120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:26:a2:e1:22:51:71:9b:cf:1a:9b:1f:bc:c9:
87:27:69:26:8b:a1:dd:fd:30:e3:22:e9:4c:d3:82:
c6:be:a0:f1:72:15:b1:17:c8:e6:cf:6c:8e:df:f7:
a7:03:87:a0:84:3f:96:48:37:70:e5:a8:f9:30:b0:
d6:77:27:ea:2d:89:c4:4f:27:be:71:b4:a5:dc:c9:
c7:1f:7f:9c:1a:0f:fb:be:81:52:dd:63:f3:3b:1a:
d7:70:f0:4d:50:bb:c7:aa:20:a9:48:9f:68:e9:e4:
81:cf:4c:29:52:86:6f:a8:bb:af:55:b2:66:0d:e5:
6b:c4:e7:6f:be:e5:f0:d1:f0:3f:86:48:92:c2:27:
1a:02:a0:72:3c:94:6d:65:9a:b2:1d:49:c9:c0:d5:
07:42:a9:90:d2:2f:fc:97:e2:11:a0:ff:59:97:17:
4f:e9:e1:2b:2f:c5:5e:d2:a5:59:fe:9c:10:9a:9e:
6d:7e:da:b3:06:7a:a5:0d:42:7a:e2:e1:c6:16:76:
1d:19:bf:3d:65:2c:69:6d:0b:89:c1:32:97:ac:6e:
56:74:47:d4:5e:95:0a:51:7a:1a:9b:76:39:4e:e9:
74:cb:6a:75:15:69:f7:6d:4f:e6:f8:41:24:fe:a7:
48:b7:9c:cf:c7:3c:29:37:39:9c:34:4c:bd:ef:c1:
de:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:95:73:D1:6A:FB:22:02:4F:50:91:94:56:F0:24:78:7F:B1:11:20
X509v3 Authority Key Identifier:
keyid:E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/PZVz0Wr7IgJPUJGUVvAkeH-xESA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.134.0.0/16
31.16.0.0/14
37.4.0.0/15
77.20.0.0-77.25.127.255
83.169.128.0/18
88.134.0.0/16
90.187.0.0/16
91.64.0.0/14
95.88.0.0/14
109.47.0.0/16
109.84.0.0/15
146.52.0.0/16
178.24.0.0/14
185.19.196.0/22
188.192.0.0/14
IPv6:
2a02:8100::/27
Signature Algorithm: sha256WithRSAEncryption
3c:0a:5a:12:fa:95:33:3e:5a:f9:d8:cf:6e:d1:77:ad:1d:91:
27:9d:18:76:6a:39:ef:06:d1:aa:f0:82:da:98:7e:47:20:12:
13:41:76:91:0c:35:98:3c:b6:ca:41:52:d9:c7:d3:ac:dd:02:
90:bc:13:78:88:53:ea:19:59:be:c6:a2:6d:f2:e2:e5:bd:73:
bc:00:7a:f1:3b:17:54:7e:32:96:80:fb:ac:5c:01:cc:ce:6e:
b4:a6:3b:e3:2c:97:58:73:81:f0:70:ac:86:4f:12:a0:69:5a:
fd:72:94:28:30:f3:2c:02:2a:1b:83:d2:ad:5d:85:1f:82:70:
28:61:87:da:3d:50:24:3d:f4:95:23:c1:5e:11:1f:84:d3:8c:
10:48:63:b6:de:f4:f6:90:c4:5c:a5:36:47:0f:0b:12:bb:75:
3d:77:23:a2:26:b0:95:77:c2:78:30:8e:68:46:bd:d6:5f:7d:
75:0f:49:90:64:94:1f:af:3a:2a:80:78:7e:8e:e5:d4:4c:c3:
9a:3c:89:17:ca:82:59:66:b6:d7:db:9c:b9:91:8a:d4:2a:b3:
72:ce:a3:ba:3e:bf:f4:69:f7:f0:f2:46:9f:21:0e:80:e9:87:
0d:36:a1:50:2e:16:02:2a:25:36:e8:31:fb:e0:9a:4e:96:d1:
c3:59:64:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:52 2023 by rpki-client on console.sobornost.net