Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/2uvYhtQZYXkLvOfBlmsZI5FVXYI.roa
File: 2uvYhtQZYXkLvOfBlmsZI5FVXYI.roa (raw, json)
Hash identifier: BFKRwK/zrA4yAcP43+YSyLIxMaVpkiGuV9fKZ7jN8YU=
Subject key identifier: DA:EB:D8:86:D4:19:61:79:0B:BC:E7:C1:96:6B:19:23:91:55:5D:82
Certificate issuer: /CN=7e2eda6952b03e8ba45997be615d7abee1784f83
Certificate serial: 018570CBE01D139A0D04793C339888DD5DAB
Authority key identifier: 7E:2E:DA:69:52:B0:3E:8B:A4:59:97:BE:61:5D:7A:BE:E1:78:4F:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fi7aaVKwPoukWZe-YV16vuF4T4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/2uvYhtQZYXkLvOfBlmsZI5FVXYI.roa
Signing time: Mon 02 Jan 2023 04:44:47 +0000
ROA not before: Mon 02 Jan 2023 04:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41960
IP address blocks: 87.239.96.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:cb:e0:1d:13:9a:0d:04:79:3c:33:98:88:dd:5d:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e2eda6952b03e8ba45997be615d7abee1784f83
Validity
Not Before: Jan 2 04:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=daebd886d41961790bbce7c1966b192391555d82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e4:2a:2b:f9:ba:93:1b:71:6c:a2:0e:05:d2:
59:30:ae:06:02:0e:f8:96:4b:20:15:2c:11:48:57:
aa:bd:9e:19:9a:1a:11:34:be:52:24:57:25:7d:e5:
1a:11:34:c9:78:2a:15:32:c0:d4:7d:72:28:b9:30:
7f:fa:7c:58:c7:f8:86:ee:94:0c:f2:bb:00:14:db:
d2:aa:33:52:18:db:44:f4:fb:6f:c9:b9:f7:8f:15:
0a:bb:65:e0:a4:1c:fc:1a:08:ce:28:14:0b:e9:f7:
d4:5c:ba:7c:40:80:5d:d0:d8:0b:4b:7e:f3:82:6c:
19:cb:99:33:bc:3e:ed:23:f5:e1:b3:4d:a0:c9:f6:
8a:cc:52:4d:b2:a7:c3:2f:f2:ca:df:1b:b6:9b:f7:
70:82:32:9b:49:d9:d0:f9:66:9c:ef:b7:2e:41:9a:
84:6f:e9:54:a9:59:a2:f0:34:76:57:bb:07:69:13:
33:1e:27:1a:44:b9:fa:3e:e9:bf:4d:5b:1e:14:39:
8c:11:e7:30:8d:10:53:7a:00:69:ec:21:3d:cf:8e:
8f:b6:0f:10:de:d1:c4:89:c8:4f:84:e0:70:48:e6:
13:03:e8:4d:9a:da:dd:6f:ec:da:43:93:95:11:38:
72:0a:42:b7:b2:2e:c4:bc:e9:25:12:73:bf:83:b2:
d0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:EB:D8:86:D4:19:61:79:0B:BC:E7:C1:96:6B:19:23:91:55:5D:82
X509v3 Authority Key Identifier:
keyid:7E:2E:DA:69:52:B0:3E:8B:A4:59:97:BE:61:5D:7A:BE:E1:78:4F:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fi7aaVKwPoukWZe-YV16vuF4T4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/2uvYhtQZYXkLvOfBlmsZI5FVXYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.239.96.0/22
Signature Algorithm: sha256WithRSAEncryption
57:2b:eb:6a:8f:e6:9e:68:ac:d6:46:f6:cd:4f:67:12:d8:05:
99:5f:64:f6:0e:c2:1a:b5:02:d9:02:e9:3f:e2:db:11:77:89:
6a:b4:11:0a:95:30:a9:c5:34:9c:f6:1f:d9:9e:8e:26:2d:e1:
5b:50:c7:65:17:5c:0f:40:58:e4:e3:db:d8:f4:f4:37:6a:b4:
22:c1:b1:15:db:3e:3d:b7:51:25:bd:af:20:43:e2:29:bf:e7:
79:8a:0c:38:2a:4b:fb:32:17:cb:91:c5:61:2e:d6:87:ea:f8:
8d:f8:70:46:f2:1d:8a:6c:25:1b:c3:4d:9a:80:54:a2:0c:ae:
96:c8:e9:1c:bc:2d:15:52:1f:05:81:24:49:d3:38:40:97:5d:
e0:71:45:c8:db:36:ef:50:9a:f1:67:fd:42:ed:47:b5:80:f6:
18:ea:1a:27:6e:a4:0f:b1:7e:23:2c:73:7b:f3:30:86:a7:95:
12:49:f0:39:e8:51:b2:ab:89:35:19:fa:0a:dd:19:67:63:ab:
dc:21:8d:8e:e9:3d:13:5a:d8:f8:f3:3b:b4:cc:dd:60:79:88:
cf:f9:a5:7d:8c:07:35:26:48:ba:0e:e1:29:2c:a6:3e:83:05:
ab:a6:98:e3:86:3a:0b:51:34:a9:a2:b0:cd:a5:73:04:c5:48:
d4:6d:32:87
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwy+AdE5oNBHk8M5iI3V2rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMmVkYTY5NTJiMDNlOGJhNDU5OTdiZTYxNWQ3YWJlZTE3
ODRmODMwHhcNMjMwMTAyMDQ0NDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYWViZDg4NmQ0MTk2MTc5MGJiY2U3YzE5NjZiMTkyMzkxNTU1ZDgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluQqK/m6kxtxbKIOBdJZMK4GAg74
lksgFSwRSFeqvZ4ZmhoRNL5SJFclfeUaETTJeCoVMsDUfXIouTB/+nxYx/iG7pQM
8rsAFNvSqjNSGNtE9Ptvybn3jxUKu2XgpBz8GgjOKBQL6ffUXLp8QIBd0NgLS37z
gmwZy5kzvD7tI/Xhs02gyfaKzFJNsqfDL/LK3xu2m/dwgjKbSdnQ+Wac77cuQZqE
b+lUqVmi8DR2V7sHaRMzHicaRLn6Pum/TVseFDmMEecwjRBTegBp7CE9z46Ptg8Q
3tHEichPhOBwSOYTA+hNmtrdb+zaQ5OVEThyCkK3si7EvOklEnO/g7LQ/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNrr2IbUGWF5C7znwZZrGSORVV2CMB8GA1UdIwQY
MBaAFH4u2mlSsD6LpFmXvmFder7heE+DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmk3YWFWS3dQb3VrV1plLVlWMTZ2dUY0VDRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8zODA0MDAtZGMyZS00OTRhLTg5MWEt
MmYyMzAwYjZlM2Q5LzEvMnV2WWh0UVpZWGtMdk9mQmxtc1pJNUZWWFlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8zODA0MDAtZGMyZS00OTRhLTg5MWEtMmYyMzAwYjZlM2Q5
LzEvZmk3YWFWS3dQb3VrV1plLVlWMTZ2dUY0VDRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCV+9gMA0G
CSqGSIb3DQEBCwUAA4IBAQBXK+tqj+aeaKzWRvbNT2cS2AWZX2T2DsIatQLZAuk/
4tsRd4lqtBEKlTCpxTSc9h/Zno4mLeFbUMdlF1wPQFjk49vY9PQ3arQiwbEV2z49
t1Elva8gQ+Ipv+d5igw4Kkv7MhfLkcVhLtaH6viN+HBG8h2KbCUbw02agFSiDK6W
yOkcvC0VUh8FgSRJ0zhAl13gcUXI2zbvUJrxZ/1C7Ue1gPYY6honbqQPsX4jLHN7
8zCGp5USSfA56FGyq4k1GfoK3RlnY6vcIY2O6T0TWtj48zu0zN1geYjP+aV9jAc1
Jki6DuEpLKY+gwWrppjjhjoLUTSporDNpXMExUjUbTKH
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:54 2023 by rpki-client on console-fra.rpki-client.org