Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/faATyo0m-J_KZAYueGbDs2FwqXY.roa
File: faATyo0m-J_KZAYueGbDs2FwqXY.roa (raw, json)
Hash identifier: akKlm4AOwEm7IDue+6gi6Lmj0w9DrB2b2m8gDLaVDSw=
Subject key identifier: 7D:A0:13:CA:8D:26:F8:9F:CA:64:06:2E:78:66:C3:B3:61:70:A9:76
Certificate issuer: /CN=01127566a5ac41e66b4c7537a60fdcbbfab39a17
Certificate serial: 01864C3F1F9A6AE46F208A2AFC83663353F3
Authority key identifier: 01:12:75:66:A5:AC:41:E6:6B:4C:75:37:A6:0F:DC:BB:FA:B3:9A:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/faATyo0m-J_KZAYueGbDs2FwqXY.roa
Signing time: Mon 13 Feb 2023 19:27:30 +0000
ROA not before: Mon 13 Feb 2023 19:27:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209277
IP address blocks: 185.38.192.0/24 maxlen: 24
185.38.193.0/24 maxlen: 24
185.38.195.0/24 maxlen: 24
185.38.194.0/24 maxlen: 24
88.214.16.0/24 maxlen: 24
88.214.17.0/24 maxlen: 24
88.214.19.0/24 maxlen: 24
88.214.18.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4c:3f:1f:9a:6a:e4:6f:20:8a:2a:fc:83:66:33:53:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01127566a5ac41e66b4c7537a60fdcbbfab39a17
Validity
Not Before: Feb 13 19:27:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7da013ca8d26f89fca64062e7866c3b36170a976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:73:10:bc:1b:68:24:f6:80:63:b2:5f:32:79:
dd:dd:86:e6:72:4e:de:7d:b0:3d:ee:10:0a:f0:e7:
ac:5c:b8:ac:bc:c2:7f:5d:bc:58:6b:89:e0:60:f3:
10:37:ba:42:9d:5e:d4:05:21:4e:ef:73:38:66:f0:
99:21:53:ec:92:ce:d8:b0:67:fc:13:5e:a9:79:8f:
8c:15:95:57:d4:bf:52:78:41:c5:71:85:f4:1c:49:
00:3a:74:7a:f7:e8:ee:40:c8:13:ef:f9:fc:30:99:
da:3a:a0:c0:d9:11:47:f2:71:30:1e:ef:ab:06:06:
87:81:54:eb:8b:fc:d5:8e:a6:d4:56:27:0f:8b:41:
3b:33:f5:74:1f:c0:c5:54:42:d4:c7:aa:33:a2:1f:
12:0b:96:ca:e2:51:f2:5b:21:ab:eb:d0:3e:12:56:
31:3d:02:92:c1:2d:0d:54:7a:0a:b2:e9:98:c3:1d:
fc:57:01:05:02:36:6f:94:6f:73:17:be:94:bf:ae:
3f:cd:ef:16:a6:4b:32:05:97:bf:ed:53:98:4e:45:
09:14:84:f6:6e:f0:dc:d6:f5:91:2e:2f:08:3d:e5:
fb:41:59:10:10:d3:fa:d0:90:72:60:d3:f0:8e:c6:
1c:8a:6d:78:19:99:41:97:3a:6a:f7:c7:63:91:9c:
2b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A0:13:CA:8D:26:F8:9F:CA:64:06:2E:78:66:C3:B3:61:70:A9:76
X509v3 Authority Key Identifier:
keyid:01:12:75:66:A5:AC:41:E6:6B:4C:75:37:A6:0F:DC:BB:FA:B3:9A:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/faATyo0m-J_KZAYueGbDs2FwqXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.214.16.0/22
185.38.192.0/22
Signature Algorithm: sha256WithRSAEncryption
51:0c:67:09:0c:1b:7e:0c:86:ca:4c:a4:9a:2a:8f:c8:7d:df:
d8:55:2f:28:06:f7:32:4f:86:63:97:2e:ea:24:79:ef:26:d4:
83:86:3f:2a:15:cf:76:49:03:82:55:3c:22:e2:9e:bb:4b:5f:
88:f9:fb:e1:5a:05:9f:b6:3c:dd:b7:95:e9:f5:d5:e5:1e:b6:
a7:58:c6:5b:79:c7:c9:6c:b8:f4:01:9c:a6:4d:18:31:5b:ff:
c6:88:99:83:f6:6a:30:f5:5b:74:81:2f:59:67:05:60:79:51:
20:27:88:db:d8:f9:4f:aa:f3:57:28:00:95:69:dd:84:45:32:
98:cf:d1:b2:7b:5a:50:d9:93:b0:dd:ab:93:5c:a8:c5:ff:a2:
80:08:50:f2:46:19:44:fd:86:30:ce:73:37:17:6c:ec:4b:14:
dc:75:2c:c6:6f:64:7a:d2:e8:0b:0b:08:b7:55:28:45:34:65:
48:73:17:32:60:32:ba:e7:04:df:b6:20:15:f0:0b:1e:da:aa:
21:a6:38:ca:fb:e0:ec:72:47:7a:4a:b1:47:18:34:d1:f3:bc:
9d:3d:b1:8a:02:48:e1:22:c1:5c:0c:83:aa:5f:8e:55:94:8a:
55:ce:69:5d:5f:6d:8f:c8:95:88:65:27:2b:00:d0:3b:cb:00:
6a:ac:a2:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:34:39 2024 by rpki-client on console-ams.rpki-client.org