Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/9VkY48hBRGnNbMsBwwOJOlsqSoE.roa
File: 9VkY48hBRGnNbMsBwwOJOlsqSoE.roa (raw, json)
Hash identifier: EuW+h64dtfrN1Vj+OhaRosR/OEX2zXHsty62NILr3k4=
Subject key identifier: F5:59:18:E3:C8:41:44:69:CD:6C:CB:01:C3:03:89:3A:5B:2A:4A:81
Certificate issuer: /CN=adac830ccaa74783dd961fab241a228d7cc6f808
Certificate serial: 0185707059C0C620241106CE53B392C7865D
Authority key identifier: AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/9VkY48hBRGnNbMsBwwOJOlsqSoE.roa
Signing time: Mon 02 Jan 2023 03:04:49 +0000
ROA not before: Mon 02 Jan 2023 03:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20485
IP address blocks: 80.76.240.0/20 maxlen: 24
145.255.136.0/21 maxlen: 21
80.237.0.0/17 maxlen: 17
188.43.0.0/16 maxlen: 16
62.33.0.0/16 maxlen: 16
213.137.230.0/23 maxlen: 23
213.137.232.0/23 maxlen: 24
213.137.236.0/22 maxlen: 24
213.137.240.0/21 maxlen: 24
213.137.248.0/21 maxlen: 24
83.234.0.0/16 maxlen: 16
89.237.32.0/22 maxlen: 24
89.237.37.0/24 maxlen: 24
89.237.44.0/24 maxlen: 24
89.237.41.0/24 maxlen: 24
89.237.43.0/24 maxlen: 24
89.237.46.0/24 maxlen: 24
89.237.45.0/24 maxlen: 24
62.33.111.0/24 maxlen: 24
89.237.55.0/24 maxlen: 24
217.150.32.0/19 maxlen: 19
185.50.216.0/22 maxlen: 24
80.82.160.0/19 maxlen: 19
185.13.160.0/22 maxlen: 22
213.141.240.0/22 maxlen: 22
151.237.240.0/21 maxlen: 24
213.141.247.0/24 maxlen: 24
195.246.122.0/23 maxlen: 24
217.148.208.0/20 maxlen: 24
2a00:1e48::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:59:c0:c6:20:24:11:06:ce:53:b3:92:c7:86:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adac830ccaa74783dd961fab241a228d7cc6f808
Validity
Not Before: Jan 2 03:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f55918e3c8414469cd6ccb01c303893a5b2a4a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:53:a7:17:67:d7:5d:df:b5:d6:26:49:b5:db:
be:1d:36:2b:19:ec:d1:c7:4f:6d:d9:70:fc:26:12:
07:80:fa:5e:78:07:7e:0e:e8:a4:39:7f:0b:f8:ce:
ac:51:ce:ba:62:90:f3:99:a8:f7:91:ef:fa:e6:89:
cd:f9:54:87:21:a7:91:ca:51:73:17:f4:62:c4:00:
cf:a4:ab:bb:5f:b4:0f:b5:fa:81:03:ad:24:aa:12:
2f:ac:5b:b3:d4:81:1d:e1:e0:ba:9b:0a:62:db:3d:
bd:43:31:5a:09:24:48:8c:5a:f7:24:72:6a:0c:e5:
ba:a2:59:45:46:b4:f2:45:48:be:6a:ff:d4:5c:ab:
5a:de:90:ba:3a:37:6e:e4:e5:5f:15:76:65:0b:d1:
f6:b4:3b:ee:bf:0f:85:9e:d0:18:99:23:42:62:53:
71:be:b5:8c:8a:92:37:c8:f6:04:99:0e:76:37:ea:
08:2d:94:bc:51:b9:69:6f:41:8f:57:d6:1e:aa:a2:
70:2b:db:6e:02:a7:63:90:ae:be:6b:ab:82:96:b2:
52:16:99:59:e5:16:56:f1:4a:30:ea:4b:41:86:c6:
ab:8f:87:26:97:de:93:e4:d1:74:99:8d:11:ce:a1:
46:eb:39:3d:32:7d:ff:ff:30:6e:f8:77:ea:ad:e1:
f4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:59:18:E3:C8:41:44:69:CD:6C:CB:01:C3:03:89:3A:5B:2A:4A:81
X509v3 Authority Key Identifier:
keyid:AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/9VkY48hBRGnNbMsBwwOJOlsqSoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.33.0.0/16
80.76.240.0/20
80.82.160.0/19
80.237.0.0/17
83.234.0.0/16
89.237.32.0/22
89.237.37.0/24
89.237.41.0/24
89.237.43.0-89.237.46.255
89.237.55.0/24
145.255.136.0/21
151.237.240.0/21
185.13.160.0/22
185.50.216.0/22
188.43.0.0/16
195.246.122.0/23
213.137.230.0-213.137.233.255
213.137.236.0-213.137.255.255
213.141.240.0/22
213.141.247.0/24
217.148.208.0/20
217.150.32.0/19
IPv6:
2a00:1e48::/32
Signature Algorithm: sha256WithRSAEncryption
5d:cd:ed:a2:85:2e:07:57:a9:96:7a:2b:c1:68:b8:5a:4d:73:
21:15:2d:70:9a:87:b2:2b:1d:40:91:f9:77:01:73:9d:b1:81:
16:de:c0:48:1a:da:a9:a4:b5:3c:8a:fd:5c:0c:d0:46:89:69:
ba:87:b4:cf:72:e6:a9:44:f4:ef:be:67:eb:bd:c6:23:6b:11:
c7:ec:6e:4f:18:98:e5:53:a7:30:9a:bf:53:24:04:ff:1b:8c:
0b:42:0a:62:4b:e7:09:6a:8f:38:80:c6:c9:b9:ff:82:76:58:
14:42:45:73:ea:18:3f:03:70:cc:7b:03:39:e4:53:e5:17:ef:
37:53:a9:92:aa:08:c7:25:0c:bf:cf:15:f1:4f:53:60:fd:1b:
68:15:98:17:45:6f:1b:c0:c4:80:46:fb:e8:b7:07:a9:32:6d:
a7:0e:84:ff:7c:00:8a:26:a4:e9:23:f7:7f:bf:9f:4e:65:0b:
c1:8f:32:c9:2d:c2:f5:d4:62:dc:85:b1:f2:a0:5f:3e:e2:de:
db:78:17:c7:c0:d0:75:83:76:02:a8:3d:ef:91:40:cf:24:af:
93:d8:91:e7:f9:31:59:a1:d7:ac:96:4b:ce:fb:5c:67:89:f9:
df:72:5b:1b:d7:b3:e4:d2:6a:66:d7:34:f1:6a:b6:11:3c:1b:
47:82:de:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:18:12 2024 by rpki-client on console.sobornost.net