Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/ci9OeEzwNKzFrjX21xQHoU2lkfg.roa
File: ci9OeEzwNKzFrjX21xQHoU2lkfg.roa (raw, json)
Hash identifier: Cc2a2t+yylZrUEGTLOUhABkg6jbq7fCmrELknJ3/pKY=
Subject key identifier: 72:2F:4E:78:4C:F0:34:AC:C5:AE:35:F6:D7:14:07:A1:4D:A5:91:F8
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 01857079C1F67D0139A82CE4B5771698BEE3
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/ci9OeEzwNKzFrjX21xQHoU2lkfg.roa
Signing time: Mon 02 Jan 2023 03:15:05 +0000
ROA not before: Mon 02 Jan 2023 03:15:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205647
IP address blocks: 151.240.80.0/21 maxlen: 21
31.56.116.0/24 maxlen: 24
94.182.206.0/24 maxlen: 24
94.182.204.0/24 maxlen: 24
94.182.204.0/22 maxlen: 22
94.182.205.0/24 maxlen: 24
94.182.207.0/24 maxlen: 24
94.182.217.0/24 maxlen: 24
94.182.226.0/24 maxlen: 24
94.182.228.0/22 maxlen: 22
151.241.224.0/21 maxlen: 21
151.240.168.0/22 maxlen: 22
151.240.192.0/21 maxlen: 21
151.247.216.0/21 maxlen: 21
94.182.41.0/24 maxlen: 24
151.247.214.0/23 maxlen: 23
151.247.224.0/22 maxlen: 22
94.182.72.0/21 maxlen: 21
151.247.248.0/22 maxlen: 22
85.15.49.0/24 maxlen: 24
85.15.48.0/24 maxlen: 24
94.182.97.192/28 maxlen: 28
151.240.240.0/21 maxlen: 21
31.59.12.0/22 maxlen: 22
94.182.8.0/23 maxlen: 23
94.182.12.0/23 maxlen: 23
31.56.64.0/19 maxlen: 19
31.56.96.0/20 maxlen: 20
31.56.0.0/18 maxlen: 18
94.182.116.0/22 maxlen: 22
94.182.114.0/23 maxlen: 23
94.182.120.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:c1:f6:7d:01:39:a8:2c:e4:b5:77:16:98:be:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Jan 2 03:15:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=722f4e784cf034acc5ae35f6d71407a14da591f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:20:af:8b:73:27:5e:77:e0:2e:26:5d:8b:b6:
32:51:79:6e:8f:43:96:82:22:d9:7f:fc:a3:f5:3e:
8e:10:6c:08:95:a9:95:e4:47:d2:09:75:b4:59:33:
07:df:e2:a0:ef:bd:23:b0:cf:95:0a:26:7c:f1:64:
a9:c2:f2:51:6e:7b:b9:d7:17:1d:c1:c0:d6:4f:2b:
bb:db:e1:df:ab:09:23:b1:74:2f:1c:c8:83:3b:dd:
3d:67:1a:9b:44:8e:60:56:93:15:5c:cd:a2:14:4f:
e2:94:10:fe:d5:46:9a:3a:cd:50:1e:d3:88:98:b6:
2d:74:43:92:79:89:66:51:2a:54:fe:a4:2c:52:85:
2e:4f:bc:2f:9d:19:50:dd:c3:cc:9b:6f:c1:d3:92:
d9:e9:4f:b9:77:03:f6:ed:98:b5:f2:38:2c:90:81:
72:c1:33:60:40:7f:8c:43:61:a4:e6:8a:bd:1d:52:
04:a4:a7:c6:05:58:6f:a4:39:8f:3b:cb:46:8f:77:
9c:6e:0c:cf:c2:07:cc:e1:03:7a:d1:ef:ad:a5:c5:
39:20:c5:b0:4c:ae:b4:68:2b:37:05:41:d4:e3:81:
97:81:c2:87:3f:ad:ea:1b:b7:60:55:c9:8d:d7:8a:
0e:1f:14:38:85:a8:d9:cc:9d:d9:30:13:2e:62:a5:
be:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:2F:4E:78:4C:F0:34:AC:C5:AE:35:F6:D7:14:07:A1:4D:A5:91:F8
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/ci9OeEzwNKzFrjX21xQHoU2lkfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.0.0-31.56.111.255
31.56.116.0/24
31.59.12.0/22
85.15.48.0/23
94.182.8.0/23
94.182.12.0/23
94.182.41.0/24
94.182.72.0/21
94.182.97.192/28
94.182.114.0-94.182.127.255
94.182.204.0/22
94.182.217.0/24
94.182.226.0/24
94.182.228.0/22
151.240.80.0/21
151.240.168.0/22
151.240.192.0/21
151.240.240.0/21
151.241.224.0/21
151.247.214.0-151.247.227.255
151.247.248.0/22
Signature Algorithm: sha256WithRSAEncryption
08:89:d8:88:bd:82:89:64:e5:52:10:1d:9e:7b:95:87:42:76:
3d:74:28:b1:00:e4:62:12:b4:61:34:37:30:c6:b2:2c:2a:59:
ee:90:19:80:42:e4:21:1a:d5:7d:23:4b:f6:14:1f:fa:3f:31:
35:20:40:a8:6b:0a:0c:53:03:cc:a5:07:76:9c:ff:ed:15:a8:
9f:8a:ff:5f:96:d3:30:52:32:ca:ec:83:e1:4d:2a:51:61:5d:
0e:8d:2e:54:03:fd:13:90:a3:5e:82:9e:64:ac:38:d6:d2:57:
88:59:6c:05:ce:92:e7:fa:e3:82:43:09:a4:f1:d2:db:0c:6f:
42:88:91:3a:03:dd:c1:0a:de:e6:da:ff:82:78:0f:d3:7f:b0:
07:87:65:71:fe:64:07:59:42:ec:eb:f5:90:a0:3e:1b:e0:84:
d3:b8:62:9f:84:f7:70:ca:d0:18:9d:20:82:98:bf:d6:f4:01:
a3:90:d5:c1:52:09:a0:29:86:51:a1:8f:d7:7d:2d:a8:37:68:
27:a9:cc:93:0e:69:7c:f8:e9:cf:0c:68:6f:62:9c:3a:e0:14:
aa:03:06:37:16:ac:f1:4f:cf:42:b5:1a:21:2f:91:03:5e:09:
77:c8:a7:63:74:bb:d4:08:6c:26:1d:4f:b4:c0:32:2b:b3:cf:
ff:66:00:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:36 2023 by rpki-client on console.sobornost.net