Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/fCA9uBvy0wrrSg_X-Fd79BbSjrk.roa
File: fCA9uBvy0wrrSg_X-Fd79BbSjrk.roa (raw, json)
Hash identifier: sfFK96W0aFC5P8WDAolfsMGP4Gq3S0yAC8sUr2JXCr8=
Subject key identifier: 7C:20:3D:B8:1B:F2:D3:0A:EB:4A:0F:D7:F8:57:7B:F4:16:D2:8E:B9
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 01894E1EDA2CE769A81F0478F506519609F4
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/fCA9uBvy0wrrSg_X-Fd79BbSjrk.roa
Signing time: Thu 13 Jul 2023 07:19:51 +0000
ROA not before: Thu 13 Jul 2023 07:19:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34450
IP address blocks: 89.43.42.0/24 maxlen: 24
89.43.44.0/24 maxlen: 24
89.43.40.0/24 maxlen: 24
93.114.187.0/24 maxlen: 24
86.106.80.0/24 maxlen: 24
89.43.46.0/24 maxlen: 24
89.34.8.0/21 maxlen: 21
89.43.73.0/24 maxlen: 24
89.39.252.0/24 maxlen: 24
188.213.18.0/24 maxlen: 24
188.240.14.0/24 maxlen: 24
85.204.127.0/24 maxlen: 24
93.113.158.0/24 maxlen: 24
89.33.163.0/24 maxlen: 24
89.37.136.0/24 maxlen: 24
93.114.55.0/24 maxlen: 24
188.215.72.0/23 maxlen: 24
188.215.72.0/24 maxlen: 24
188.215.73.0/24 maxlen: 24
2a05:b680:1::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4e:1e:da:2c:e7:69:a8:1f:04:78:f5:06:51:96:09:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Jul 13 07:19:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c203db81bf2d30aeb4a0fd7f8577bf416d28eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2a:9a:d3:07:4a:b2:e4:d5:6b:ab:60:02:6c:
a3:46:81:79:f1:25:2b:04:2c:e3:1d:20:6f:16:83:
12:c9:d2:79:56:1f:b4:91:84:09:92:74:2b:5f:3b:
b8:b8:9e:f5:68:6b:13:7c:83:b5:25:63:86:1f:52:
62:db:87:46:92:4f:1d:ed:bc:86:f0:50:f8:6b:78:
17:ea:09:25:09:06:25:8a:fc:e9:75:a8:58:11:55:
44:84:bd:c6:66:09:c6:f6:92:b7:04:04:d0:44:49:
ef:2f:01:b2:31:5b:68:8e:86:eb:62:fb:3c:98:f0:
79:89:2a:c2:18:11:e3:1c:52:17:bc:d9:54:e4:41:
2d:fa:56:e8:20:fc:17:30:a5:0f:f3:ab:6f:68:1e:
0b:d3:44:cc:d1:1a:19:0a:91:48:90:13:17:56:5d:
f7:65:81:6b:5f:46:64:88:70:ef:29:be:45:82:84:
5a:c8:ae:ae:66:7d:cb:60:bb:95:dc:48:c3:dc:b4:
48:09:54:2d:c9:f3:ff:de:7c:7b:d3:6b:63:72:b2:
f0:4c:41:8a:d2:f4:65:7f:d0:cf:78:77:3a:b9:a7:
05:bb:fc:60:8e:6b:01:0a:23:90:12:3b:06:59:14:
67:f2:02:bc:4b:37:91:e7:ff:8b:f6:75:62:57:ec:
db:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:20:3D:B8:1B:F2:D3:0A:EB:4A:0F:D7:F8:57:7B:F4:16:D2:8E:B9
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/fCA9uBvy0wrrSg_X-Fd79BbSjrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.127.0/24
86.106.80.0/24
89.33.163.0/24
89.34.8.0/21
89.37.136.0/24
89.39.252.0/24
89.43.40.0/24
89.43.42.0/24
89.43.44.0/24
89.43.46.0/24
89.43.73.0/24
93.113.158.0/24
93.114.55.0/24
93.114.187.0/24
188.213.18.0/24
188.215.72.0/23
188.240.14.0/24
IPv6:
2a05:b680:1::/48
Signature Algorithm: sha256WithRSAEncryption
10:e8:02:d7:6d:c3:fc:d2:9e:15:9c:5a:48:2a:06:a9:6b:d1:
d9:2a:90:4a:0c:44:8c:6d:0d:73:5e:03:f4:4a:87:85:25:d2:
d1:c9:cb:4b:24:b1:bc:59:56:7b:17:f5:59:b2:75:4e:f4:da:
8f:df:0a:c4:5a:93:24:23:0c:ec:0e:e7:ab:e2:1b:9b:f4:9d:
40:a0:db:8b:8f:0f:4c:5b:58:b2:32:04:ae:f4:71:ba:8d:08:
16:31:b2:6d:58:ad:14:c8:93:fb:28:24:0a:0d:22:5a:01:95:
fc:13:3a:3b:64:7e:0f:75:e7:dd:be:f1:ce:90:66:5e:99:f6:
78:be:ef:c1:e2:32:5f:45:ed:8b:49:0a:2a:0b:d0:d4:ab:e7:
0c:46:cc:c7:6e:2d:b4:5f:f2:e3:80:ef:13:c0:1d:ee:08:65:
29:bc:bc:4d:30:d6:38:c7:a0:41:06:cc:9d:0c:3b:7b:da:c5:
ea:5d:5f:d8:83:45:3c:47:50:58:5c:cd:0b:93:b4:85:b9:ce:
cb:01:b1:35:16:c2:0f:e2:06:22:24:f7:d2:6e:1f:4c:fb:8f:
ce:b9:fe:c3:4d:41:97:73:8e:8f:f4:34:81:b1:7c:30:24:17:
85:60:37:c8:d4:01:3f:b8:34:33:e7:68:0a:95:fc:af:16:29:
40:83:12:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 14:08:01 2023 by rpki-client on console-fra.rpki-client.org