Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/E-cafj6JbaqND4JhsP05LMqBwpc.roa
File: E-cafj6JbaqND4JhsP05LMqBwpc.roa (raw, json)
Hash identifier: E2hTMvtvo//+XrEcs/ip8m+FHVb7lBjphuYIxUECdIw=
Subject key identifier: 13:E7:1A:7E:3E:89:6D:AA:8D:0F:82:61:B0:FD:39:2C:CA:81:C2:97
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018A1A09CE42B9D38B62794A15B3297E49C4
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/E-cafj6JbaqND4JhsP05LMqBwpc.roa
Signing time: Mon 21 Aug 2023 21:39:24 +0000
ROA not before: Mon 21 Aug 2023 21:39:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 188.255.206.0/24 maxlen: 24
109.121.35.0/24 maxlen: 24
109.121.34.0/24 maxlen: 24
109.121.43.0/24 maxlen: 24
212.69.0.0/24 maxlen: 24
188.255.141.0/24 maxlen: 24
77.105.8.0/24 maxlen: 24
185.47.91.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1a:09:ce:42:b9:d3:8b:62:79:4a:15:b3:29:7e:49:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Aug 21 21:39:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=13e71a7e3e896daa8d0f8261b0fd392cca81c297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ae:1a:aa:87:ae:64:39:2c:d8:dc:28:14:4d:
57:54:25:52:69:0c:7a:91:86:b4:49:9e:39:e2:f5:
0f:0e:ee:0e:eb:6b:7f:26:78:2e:03:80:87:4f:d8:
e7:fa:2d:c7:f5:b0:dc:12:0f:d3:70:1c:37:0b:94:
86:b9:39:0b:10:7e:47:b8:16:76:7d:10:d5:ac:57:
5e:03:6c:c7:fe:28:07:c1:ed:cc:6b:8d:82:38:28:
59:82:77:31:c1:04:da:49:0b:23:83:3d:c5:17:e2:
05:04:55:08:30:8a:6a:7f:a1:f1:b8:08:e8:f7:3f:
ce:f1:11:1f:7f:01:e2:e0:50:59:46:2a:ab:32:8e:
60:a3:74:6e:94:3d:12:ed:f8:f4:5e:91:0b:63:03:
1b:04:2b:31:fb:fa:11:7b:2b:46:04:ed:d7:df:59:
ab:33:61:aa:18:f8:ce:b8:fb:99:ae:16:3f:9e:b3:
d9:d2:8d:8c:aa:bc:25:9d:87:11:82:43:20:fd:b5:
0d:4f:ff:e7:51:2f:c3:fd:52:ff:a4:66:57:ce:25:
d1:ae:85:05:d0:9f:55:7a:aa:a9:46:80:9f:50:13:
4f:34:2e:2c:6e:7a:b1:5f:75:08:a3:6c:cd:de:01:
89:f5:8a:20:75:45:03:34:e3:11:27:e2:76:95:52:
e7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:E7:1A:7E:3E:89:6D:AA:8D:0F:82:61:B0:FD:39:2C:CA:81:C2:97
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/E-cafj6JbaqND4JhsP05LMqBwpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.8.0/24
109.121.34.0/23
109.121.43.0/24
185.47.91.0/24
188.255.141.0/24
188.255.206.0/24
212.69.0.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:fb:58:0f:a5:a3:86:ec:eb:ac:65:ee:7f:4b:d2:4f:1e:75:
5d:0d:77:55:1a:39:dc:c0:7e:51:8d:a3:3c:67:73:ba:ee:9e:
b5:c6:c7:83:ea:ca:aa:ae:c4:d0:c8:36:f8:c1:fc:30:b9:13:
4f:4c:fe:6d:17:1e:58:f7:b1:56:57:3c:21:25:f7:af:59:ad:
94:12:40:67:a8:57:37:35:9b:8d:bc:cc:3f:da:40:bf:6f:90:
37:13:7f:99:d6:85:45:1f:95:35:2b:99:63:39:a1:44:de:a9:
19:98:62:19:18:06:a4:32:dc:b3:86:41:cf:4e:59:1d:d2:70:
86:b5:6d:3a:8a:1e:be:c9:5a:6d:ea:4d:b7:7f:f7:4f:76:82:
21:aa:cd:e3:36:ae:11:2b:06:24:15:fb:f7:69:74:da:e7:dd:
bc:22:4b:e5:fd:89:c5:44:6a:41:a6:d0:82:9f:f2:8c:0f:c6:
26:0c:5f:91:c9:3a:af:ff:a6:3f:76:7d:54:cb:03:9c:2d:ed:
b5:02:45:a2:cf:94:5f:33:e9:87:9f:7d:e7:fb:59:53:39:12:
e8:1a:b6:9b:51:ec:a8:18:58:ba:83:93:13:40:f8:f3:9c:3a:
a3:ea:aa:e0:fe:75:97:66:c6:bd:fa:a6:5e:24:e4:d2:db:12:
5f:61:53:d4
-----BEGIN CERTIFICATE-----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Generated at Mon Aug 28 18:18:56 2023 by rpki-client on console-ams.rpki-client.org