Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/9xLp2qRKeDcKt4bQWK6LwpU0blA.roa
File: 9xLp2qRKeDcKt4bQWK6LwpU0blA.roa (raw, json)
Hash identifier: TvIi7bXkKfrKr1NEyEySMVFpAPnSQKclMGSHixs5XEI=
Subject key identifier: F7:12:E9:DA:A4:4A:78:37:0A:B7:86:D0:58:AE:8B:C2:95:34:6E:50
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 01889EFCDEEBCAFAA434D3DCB90EFBED6413
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/9xLp2qRKeDcKt4bQWK6LwpU0blA.roa
Signing time: Fri 09 Jun 2023 07:09:12 +0000
ROA not before: Fri 09 Jun 2023 07:09:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13194
IP address blocks: 85.254.71.0/24 maxlen: 24
85.254.75.0/24 maxlen: 24
85.254.76.0/24 maxlen: 24
85.254.73.0/24 maxlen: 24
85.254.74.0/24 maxlen: 24
85.254.76.0/22 maxlen: 22
85.254.74.0/23 maxlen: 23
85.254.141.0/24 maxlen: 24
85.254.151.0/24 maxlen: 24
85.254.149.0/24 maxlen: 24
85.254.152.0/22 maxlen: 22
85.254.170.0/24 maxlen: 24
85.254.176.0/23 maxlen: 23
80.81.61.0/24 maxlen: 24
85.254.84.0/23 maxlen: 23
85.254.80.0/22 maxlen: 22
85.254.94.0/24 maxlen: 24
85.254.98.0/23 maxlen: 23
85.254.96.0/22 maxlen: 22
85.254.96.0/23 maxlen: 23
85.254.92.0/22 maxlen: 22
85.254.92.0/23 maxlen: 23
85.254.95.0/24 maxlen: 24
85.254.92.0/24 maxlen: 24
85.254.93.0/24 maxlen: 24
85.254.104.0/21 maxlen: 21
159.148.73.0/24 maxlen: 24
85.254.101.0/24 maxlen: 24
85.254.102.0/24 maxlen: 24
85.254.100.0/24 maxlen: 24
85.254.112.0/21 maxlen: 21
85.254.124.0/23 maxlen: 23
159.148.249.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9e:fc:de:eb:ca:fa:a4:34:d3:dc:b9:0e:fb:ed:64:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jun 9 07:09:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f712e9daa44a78370ab786d058ae8bc295346e50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:97:a9:f7:e6:ee:5e:6b:75:96:55:5d:b3:1f:
b9:26:6a:3a:42:82:78:8b:ef:aa:02:41:82:1f:0b:
6d:00:b1:16:c5:6e:73:15:ba:df:da:ab:08:cf:c0:
8a:3f:6e:74:8b:72:06:0c:bd:9d:10:27:09:44:05:
b4:05:d9:29:e2:e9:75:12:39:e5:28:7f:5a:aa:1c:
45:d9:52:aa:b9:9a:1f:8d:fa:15:ac:b7:bc:f5:fe:
aa:64:9b:04:7d:31:ce:ae:7b:46:3f:ea:22:99:7e:
d9:9b:76:ad:89:c3:a6:87:b4:56:8d:91:00:78:36:
a9:27:cb:3c:ff:f7:f2:f6:46:fa:c3:62:27:ee:94:
66:79:dc:07:94:01:d4:b9:ae:85:d6:54:09:4e:ee:
ec:7e:d8:1b:a2:62:38:ad:61:1a:f2:17:de:b6:f3:
8e:a0:71:ac:cf:d0:eb:53:c4:27:e9:fc:78:43:0f:
8e:00:ac:d8:41:77:ea:8b:c2:6e:c8:3b:45:b0:ac:
7b:9a:37:34:04:68:f6:fb:c8:ca:fd:7e:05:0e:32:
9d:c7:9e:92:9b:bf:1f:6e:83:37:f7:45:fc:dc:9f:
97:46:4a:2e:d6:dc:98:bf:d9:ce:1e:1c:60:77:22:
0c:e8:72:5f:a5:9f:14:09:a5:e3:03:24:7c:b3:26:
a8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:12:E9:DA:A4:4A:78:37:0A:B7:86:D0:58:AE:8B:C2:95:34:6E:50
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/9xLp2qRKeDcKt4bQWK6LwpU0blA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.81.61.0/24
85.254.71.0/24
85.254.73.0-85.254.85.255
85.254.92.0-85.254.102.255
85.254.104.0-85.254.119.255
85.254.124.0/23
85.254.141.0/24
85.254.149.0/24
85.254.151.0-85.254.155.255
85.254.170.0/24
85.254.176.0/23
159.148.73.0/24
159.148.249.0/24
Signature Algorithm: sha256WithRSAEncryption
64:52:54:51:d4:a7:8e:f2:8a:4e:de:91:7b:0c:c9:ac:39:5a:
45:b7:17:16:e7:1e:26:5f:b4:e3:b2:75:d1:e8:a0:db:fe:4d:
a8:d9:f3:2b:42:c0:c2:23:3d:43:9a:16:7f:7a:55:00:79:a7:
89:b1:6e:ae:88:17:e3:50:b8:98:7d:f0:48:5f:1a:ec:07:b3:
6d:9a:86:7c:27:a8:d8:ff:fd:e1:4f:83:50:6a:55:72:90:0c:
7b:f8:0e:b3:62:05:82:38:13:7b:86:f2:41:8d:45:f2:95:08:
8d:98:ce:d4:b3:fc:53:dc:82:f8:19:3c:9e:cc:74:4b:c9:77:
7a:30:cd:73:4e:c4:d8:25:56:0d:ad:f1:64:d5:9a:f7:74:05:
b4:31:c9:a5:bc:56:1c:bb:14:17:d1:c4:7c:29:63:7f:78:37:
21:dc:35:b2:29:17:11:9f:7c:f6:72:5b:88:05:04:72:5e:c1:
b6:e2:a2:f6:cc:a7:37:3d:f3:d6:a0:1d:ec:e8:cc:96:37:c9:
21:2c:c2:fc:5e:88:0a:5f:f1:0d:e7:ce:ca:2b:ba:3d:c9:6b:
01:60:58:08:fa:d4:bd:93:17:20:76:38:bc:a6:e1:6f:b9:ae:
95:ee:9a:0b:97:52:30:af:ff:2f:f2:29:4c:57:85:0f:4d:2c:
d6:6a:28:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 24 12:09:36 2023 by rpki-client on console-fra.rpki-client.org