Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/fc80f0-5c27-4898-84ac-28e416cf11cf/1/FfeXvjA0q1KLnKfiAkn0V1Sxv8s.roa
File: FfeXvjA0q1KLnKfiAkn0V1Sxv8s.roa (raw, json)
Hash identifier: bLJe6+4182pDUAEORJ5ulp92J4xV3MBMvanGxU3CecQ=
Subject key identifier: 15:F7:97:BE:30:34:AB:52:8B:9C:A7:E2:02:49:F4:57:54:B1:BF:CB
Certificate issuer: /CN=be8c0a74f47312df298a46095e47525d515854a1
Certificate serial: 01875564AF84E1AC020C6D512733AC9357DB
Authority key identifier: BE:8C:0A:74:F4:73:12:DF:29:8A:46:09:5E:47:52:5D:51:58:54:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vowKdPRzEt8pikYJXkdSXVFYVKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/fc80f0-5c27-4898-84ac-28e416cf11cf/1/FfeXvjA0q1KLnKfiAkn0V1Sxv8s.roa
Signing time: Thu 06 Apr 2023 07:07:54 +0000
ROA not before: Thu 06 Apr 2023 07:07:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12963
IP address blocks: 94.232.211.0/24 maxlen: 24
94.232.212.0/24 maxlen: 24
94.232.213.0/24 maxlen: 24
94.232.208.0/24 maxlen: 24
94.232.209.0/24 maxlen: 24
94.232.210.0/24 maxlen: 24
94.232.208.0/21 maxlen: 21
176.97.3.0/24 maxlen: 24
176.97.4.0/22 maxlen: 22
176.97.0.0/23 maxlen: 23
176.97.2.0/24 maxlen: 24
91.218.72.0/24 maxlen: 24
91.218.73.0/24 maxlen: 24
91.218.74.0/24 maxlen: 24
91.218.75.0/24 maxlen: 24
94.232.214.0/24 maxlen: 24
94.232.215.0/24 maxlen: 24
91.197.168.0/24 maxlen: 24
91.197.169.0/24 maxlen: 24
91.197.170.0/24 maxlen: 24
91.197.171.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:55:64:af:84:e1:ac:02:0c:6d:51:27:33:ac:93:57:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be8c0a74f47312df298a46095e47525d515854a1
Validity
Not Before: Apr 6 07:07:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=15f797be3034ab528b9ca7e20249f45754b1bfcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e6:0e:14:c6:01:2e:65:72:20:0e:cf:2d:e0:
ca:72:b5:ea:92:6e:61:cc:1c:ad:d5:3d:ef:6e:a9:
82:e4:dc:8f:48:72:1e:ed:6d:84:68:27:f3:47:8a:
07:a5:9d:fe:94:49:ab:fa:cb:33:43:b7:f4:ab:ee:
28:27:e0:ef:21:1f:21:ad:ab:f3:8b:fd:04:4a:3a:
5d:04:13:8e:5a:f4:28:fc:7a:2b:5f:cb:df:c5:8d:
ac:dc:ed:31:12:ad:80:a1:6d:c7:8a:0f:a3:7f:1a:
b4:db:b0:25:b1:06:dc:a9:12:b2:64:a9:e5:f5:fc:
7a:b6:65:5c:42:1f:e6:1c:52:04:d5:f3:de:bb:05:
94:26:31:f7:2a:03:08:43:34:e0:1d:62:7b:d7:eb:
ac:a4:ee:44:15:c3:4f:c4:d2:1d:f2:2f:f2:41:d1:
91:bd:70:4f:81:1c:9d:f0:57:be:52:60:27:da:38:
34:22:e2:d0:4e:43:ad:a6:3a:ee:04:5a:25:41:47:
8e:f1:63:47:9b:1a:f6:21:64:4e:31:0b:4e:89:82:
b6:ce:be:68:4d:2e:46:2a:fb:69:5d:92:e1:cb:25:
5f:7c:dc:06:2f:7e:b6:60:df:40:68:11:9d:80:36:
c8:4d:ca:4a:78:b4:40:2f:36:b3:b1:bc:41:d4:03:
27:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F7:97:BE:30:34:AB:52:8B:9C:A7:E2:02:49:F4:57:54:B1:BF:CB
X509v3 Authority Key Identifier:
keyid:BE:8C:0A:74:F4:73:12:DF:29:8A:46:09:5E:47:52:5D:51:58:54:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vowKdPRzEt8pikYJXkdSXVFYVKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fc80f0-5c27-4898-84ac-28e416cf11cf/1/FfeXvjA0q1KLnKfiAkn0V1Sxv8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fc80f0-5c27-4898-84ac-28e416cf11cf/1/vowKdPRzEt8pikYJXkdSXVFYVKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.168.0/22
91.218.72.0/22
94.232.208.0/21
176.97.0.0/21
Signature Algorithm: sha256WithRSAEncryption
74:d3:89:ff:60:78:50:9b:44:58:05:74:ef:ab:16:b7:8f:71:
59:80:f1:54:6f:47:cb:81:10:63:86:b5:d2:f5:bd:f6:9a:4f:
05:01:6a:5b:10:75:ce:df:9f:d4:ba:50:a3:3a:a8:22:16:de:
81:9a:42:c7:be:d2:2a:22:ae:a3:09:83:ba:cc:18:c4:40:75:
52:b0:77:29:5c:be:89:8d:c6:56:31:22:0e:99:b3:e7:b1:05:
5e:21:8b:85:ff:f8:c0:5f:a9:9c:fb:04:bf:38:b8:63:02:2a:
ff:04:18:37:26:df:9b:3e:bd:9d:c5:5f:83:29:e7:1c:07:b2:
11:c3:b7:48:f7:87:94:e1:7d:af:45:40:06:1e:c5:a9:ea:79:
29:6c:16:d3:2f:be:00:8c:a7:88:d7:fc:d7:52:80:ba:f4:dc:
bc:00:49:6f:85:35:2b:6d:ea:a8:67:bf:10:8c:47:91:2b:c6:
be:4a:17:78:e7:13:5a:a1:27:79:34:75:58:05:03:f7:f4:14:
34:8f:8d:0c:09:7d:cd:fa:6b:bf:a6:eb:f4:4f:f4:32:74:bd:
c4:8b:b9:a6:91:4b:39:bc:e6:97:9a:c1:95:19:45:bf:4a:65:
9e:17:25:f3:0c:90:33:24:76:c3:1c:91:08:30:30:b1:a1:6f:
c8:f7:5d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 18:21:33 2024 by rpki-client on console-ams.rpki-client.org