Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/euVIEl7NyJsKT6r-eUvoLzjJp7g.roa
File: euVIEl7NyJsKT6r-eUvoLzjJp7g.roa (raw, json)
Hash identifier: rcOY7kO/6CUpE9O/N6WYyROiz3hz67sLoihKedwkpAY=
Subject key identifier: 7A:E5:48:12:5E:CD:C8:9B:0A:4F:AA:FE:79:4B:E8:2F:38:C9:A7:B8
Certificate issuer: /CN=14a6b0862b2b303b302c3c2349a5ac8d0f906b06
Certificate serial: 0186C0AF5293D4D1C2CA6A75776192FC8FDA
Authority key identifier: 14:A6:B0:86:2B:2B:30:3B:30:2C:3C:23:49:A5:AC:8D:0F:90:6B:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FKawhisrMDswLDwjSaWsjQ-QawY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/euVIEl7NyJsKT6r-eUvoLzjJp7g.roa
Signing time: Wed 08 Mar 2023 10:06:00 +0000
ROA not before: Wed 08 Mar 2023 10:06:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209318
IP address blocks: 77.95.115.0/24 maxlen: 24
85.209.208.0/22 maxlen: 24
2a09:9fc0::/29 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c0:af:52:93:d4:d1:c2:ca:6a:75:77:61:92:fc:8f:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14a6b0862b2b303b302c3c2349a5ac8d0f906b06
Validity
Not Before: Mar 8 10:06:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ae548125ecdc89b0a4faafe794be82f38c9a7b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e8:fe:50:d8:3c:31:a7:32:c0:9b:56:e8:a7:
81:fc:5c:3c:18:8d:18:f0:5c:6b:a7:76:2b:59:ec:
3a:a0:53:88:6d:dd:91:8a:f3:16:dd:13:2d:7c:db:
f3:20:28:54:f2:17:2d:15:3a:5c:d1:c1:0c:4c:8e:
b6:c0:08:14:47:83:a9:26:7b:47:87:ca:96:c0:76:
b5:98:c9:c1:80:9a:d2:04:dc:6f:c2:88:a1:99:46:
f6:ac:bd:d0:95:b3:fe:c6:d9:6e:9c:43:7e:7b:3e:
d3:85:5c:f6:61:1a:d5:90:55:41:88:4e:83:11:19:
af:b9:ad:77:6a:62:83:37:ce:df:63:fd:70:bd:6a:
2e:0e:9d:60:3c:05:11:51:d1:16:ff:3d:e3:80:e2:
3d:1b:84:8b:c6:58:18:6a:a7:ea:5d:12:94:2a:bb:
1a:45:e1:6b:7a:63:cc:a7:86:11:5d:91:ac:4c:5e:
cb:c8:ee:5b:cc:70:8c:c6:d8:0b:b0:8f:fd:d6:ac:
df:65:08:99:9c:4c:3b:ea:fd:4b:5d:f8:5e:b0:c4:
0f:b7:a7:19:ed:66:56:88:a3:bc:e1:96:39:a2:74:
75:90:22:d6:f7:57:5c:06:94:60:18:54:d5:06:a0:
9d:33:82:e2:29:bb:78:f2:9b:7e:d8:78:d9:89:b0:
c8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E5:48:12:5E:CD:C8:9B:0A:4F:AA:FE:79:4B:E8:2F:38:C9:A7:B8
X509v3 Authority Key Identifier:
keyid:14:A6:B0:86:2B:2B:30:3B:30:2C:3C:23:49:A5:AC:8D:0F:90:6B:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKawhisrMDswLDwjSaWsjQ-QawY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/euVIEl7NyJsKT6r-eUvoLzjJp7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.95.115.0/24
85.209.208.0/22
IPv6:
2a09:9fc0::/29
Signature Algorithm: sha256WithRSAEncryption
8a:4c:3a:5d:1d:44:8c:61:a1:8e:02:28:b1:99:5d:a9:ee:78:
36:75:d3:7b:c3:0b:47:d7:eb:9d:39:50:ca:3c:88:cc:50:03:
70:b7:f5:b8:5b:2e:ba:57:32:28:3f:0d:d6:3a:15:af:cb:d4:
59:9b:83:49:b8:cc:40:aa:74:4a:cd:8e:a9:fa:a6:87:f3:72:
ac:35:19:20:7e:6a:f5:7a:e0:07:30:db:20:11:6c:6c:d7:af:
67:08:ab:0a:21:d8:37:9c:9f:19:45:31:4f:8d:6a:60:5c:30:
ac:8e:79:b8:71:8e:6d:cb:f1:cc:eb:72:07:bb:ba:a8:03:1f:
f2:91:24:e7:5e:8e:d3:3c:76:83:ba:b7:cd:ff:d1:b8:59:4c:
f3:a7:12:b3:ae:cb:95:80:43:2c:12:cb:7c:c0:47:0e:62:d3:
40:de:21:3d:95:14:f3:87:82:b1:89:81:6b:2d:00:c1:02:23:
43:90:49:16:7f:f4:9c:1b:3f:bc:a8:98:59:a5:95:a9:26:d6:
5d:04:27:5a:59:91:d0:d0:7b:e9:b4:39:2d:4e:7b:a0:88:9b:
77:e6:c2:11:c3:ec:1b:6a:8c:ea:85:29:82:86:d6:94:b7:ee:
32:23:c7:5f:0a:30:9e:6e:e6:6c:80:40:75:49:19:5a:6e:32:
4a:f6:73:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:10:59 2024 by rpki-client on console-ams.rpki-client.org