Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/FWRwlLsLZuDe3Vw6EZW1mZ865X0.roa
File: FWRwlLsLZuDe3Vw6EZW1mZ865X0.roa (raw, json)
Hash identifier: L70OK0Ma2h2uBGn2DKrpUtqcXXnVYtJf9vV0nWG3jEY=
Subject key identifier: 15:64:70:94:BB:0B:66:E0:DE:DD:5C:3A:11:95:B5:99:9F:3A:E5:7D
Certificate issuer: /CN=706d3abbb478b74ef2adef9bb7c4336e34111d51
Certificate serial: 018AEF1F4A37E51757FFEB7527052535E38B
Authority key identifier: 70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/FWRwlLsLZuDe3Vw6EZW1mZ865X0.roa
Signing time: Mon 02 Oct 2023 06:41:59 +0000
ROA not before: Mon 02 Oct 2023 06:41:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7393
IP address blocks: 185.230.246.0/24 maxlen: 24
188.244.125.0/24 maxlen: 24
193.243.186.0/24 maxlen: 24
194.150.79.0/24 maxlen: 24
213.173.38.0/24 maxlen: 24
77.75.229.0/24 maxlen: 24
79.110.224.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ef:1f:4a:37:e5:17:57:ff:eb:75:27:05:25:35:e3:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706d3abbb478b74ef2adef9bb7c4336e34111d51
Validity
Not Before: Oct 2 06:41:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=15647094bb0b66e0dedd5c3a1195b5999f3ae57d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:55:9d:da:ca:aa:69:6d:b0:f7:ce:8a:60:1e:
74:6d:b1:f8:67:9a:67:49:06:d6:06:fb:f7:fa:d9:
5f:15:8b:b2:5f:71:a4:1f:d3:2d:79:03:1c:b2:b4:
f8:b7:e7:d6:26:66:87:11:10:af:78:71:14:36:be:
9c:f1:09:bd:80:f2:d4:96:c7:1f:cc:2d:51:5a:44:
8b:28:ea:13:cd:76:1a:8a:13:9f:f3:45:8d:d7:ce:
bd:aa:79:51:a6:a4:4b:8b:22:7d:1a:2b:88:40:c9:
56:4a:e4:c1:10:3e:6a:85:1a:4f:62:99:53:17:11:
a3:07:76:1a:b1:5e:8a:0c:e4:d4:27:58:17:76:07:
40:12:c9:e4:e8:6d:b3:fa:25:b6:46:3b:1f:ee:20:
19:62:0e:2e:05:3f:f3:46:4a:c2:98:1a:a0:37:ae:
68:10:2a:8e:65:b9:85:cf:09:0f:2c:d5:55:ce:e7:
92:0f:b4:f0:de:7f:37:a4:99:86:61:8e:8c:7a:be:
b8:31:a9:53:d0:d6:75:a4:f8:a6:19:90:88:7c:1d:
5e:00:7b:36:81:94:b0:15:73:3e:19:4e:87:b9:b7:
0e:1a:67:ca:f1:8d:2c:86:93:87:11:7e:95:0e:15:
6a:31:1e:f8:16:2d:bd:fe:7c:b1:c7:b4:c0:95:3f:
5a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:64:70:94:BB:0B:66:E0:DE:DD:5C:3A:11:95:B5:99:9F:3A:E5:7D
X509v3 Authority Key Identifier:
keyid:70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/FWRwlLsLZuDe3Vw6EZW1mZ865X0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.75.229.0/24
79.110.224.0/24
185.230.246.0/24
188.244.125.0/24
193.243.186.0/24
194.150.79.0/24
213.173.38.0/24
Signature Algorithm: sha256WithRSAEncryption
08:5c:de:e3:79:cb:0f:1f:71:6a:57:27:51:98:f3:df:27:3b:
58:81:f1:57:e3:16:b5:13:e7:d5:66:f6:22:9c:b7:44:0f:30:
40:06:82:b8:91:d2:d5:c1:4d:34:e1:40:51:24:ed:6d:91:22:
2b:01:aa:f1:80:c7:bd:bc:90:15:8d:3d:a4:ac:b1:df:a3:4f:
3a:b5:c2:0c:0a:ff:b5:e9:22:c3:7d:40:1c:cc:25:89:10:a1:
ca:7c:32:f7:72:dc:cc:d1:0b:a4:4c:84:d1:60:6e:1d:9b:e4:
f1:0b:8d:55:e2:cb:ee:8c:fe:b2:0d:17:67:50:e3:bf:b0:3e:
03:ec:a0:da:be:87:d8:f5:cb:fd:cc:a8:aa:4f:61:e2:50:bd:
c0:b8:06:92:7a:90:6f:27:ff:2e:39:f0:4d:0a:e2:6a:71:8a:
16:6a:b2:c6:9f:a0:98:ea:7d:81:d4:50:42:fc:c2:b9:f3:e5:
75:48:e7:0b:09:bb:1b:50:fc:43:2c:a6:a5:10:ca:fb:be:c6:
b2:64:77:77:02:15:5a:dc:34:f6:37:93:59:48:6e:a0:03:78:
6e:2c:d8:15:44:9e:e2:5b:f4:e5:58:ca:88:8e:2f:4a:00:76:
7a:a6:31:61:5c:67:0c:a5:c8:f9:75:f2:93:99:31:18:cd:c1:
81:ba:41:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 30 19:16:01 2023 by rpki-client on console-ams.rpki-client.org