Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/_OIxbdce--O-bbORStDUaXsx3Zg.roa
File: _OIxbdce--O-bbORStDUaXsx3Zg.roa (raw, json)
Hash identifier: N5M44zrZDpaJaoHISpC3nBij2pQ3jOIho9fUP3JJiYs=
Subject key identifier: FC:E2:31:6D:D7:1E:FB:E3:BE:6D:B3:91:4A:D0:D4:69:7B:31:DD:98
Certificate issuer: /CN=fad7100e77ed9119d66e2321bb6711d7e760982b
Certificate serial: 0186D5931AFA8EEB250ECD0565FE0FCABEDE
Authority key identifier: FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/_OIxbdce--O-bbORStDUaXsx3Zg.roa
Signing time: Sun 12 Mar 2023 11:27:13 +0000
ROA not before: Sun 12 Mar 2023 11:27:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 80.144.0.0/13 maxlen: 13
80.156.0.0/16 maxlen: 16
62.156.0.0/14 maxlen: 14
217.224.0.0/11 maxlen: 11
80.128.0.0/11 maxlen: 11
46.80.0.0/12 maxlen: 12
217.80.0.0/12 maxlen: 12
193.158.0.0/15 maxlen: 15
194.25.0.0/16 maxlen: 16
62.153.0.0/16 maxlen: 16
217.0.0.0/13 maxlen: 13
80.157.0.0/16 maxlen: 16
80.157.8.0/21 maxlen: 21
91.0.0.0/10 maxlen: 10
79.192.0.0/10 maxlen: 10
87.128.0.0/10 maxlen: 10
84.128.0.0/10 maxlen: 10
93.192.0.0/10 maxlen: 10
62.224.0.0/14 maxlen: 14
195.145.0.0/16 maxlen: 16
62.154.0.0/15 maxlen: 15
80.128.0.0/12 maxlen: 12
80.157.16.0/20 maxlen: 20
212.184.0.0/15 maxlen: 15
195.243.0.0/16 maxlen: 16
80.152.0.0/14 maxlen: 14
2003:3c0::/28 maxlen: 28
2003:8:f40a::/48 maxlen: 48
2003:8:f405::/48 maxlen: 48
2003:8:f408::/48 maxlen: 48
2003:8:f403::/48 maxlen: 48
2003:3e0::/28 maxlen: 28
2003::/23 maxlen: 23
2003:8:f40d::/48 maxlen: 48
2003:8:f40b::/48 maxlen: 48
2003:8:f406::/48 maxlen: 48
2003:8:f401::/48 maxlen: 48
2003:8:f404::/48 maxlen: 48
2003::/19 maxlen: 19
2003:8:f40e::/48 maxlen: 48
2003:8:f409::/48 maxlen: 48
2003:8:f40c::/48 maxlen: 48
2003:8:f407::/48 maxlen: 48
2003:8:f402::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:d5:93:1a:fa:8e:eb:25:0e:cd:05:65:fe:0f:ca:be:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fad7100e77ed9119d66e2321bb6711d7e760982b
Validity
Not Before: Mar 12 11:27:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fce2316dd71efbe3be6db3914ad0d4697b31dd98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:41:93:d5:59:bd:ed:5c:dd:27:f9:ce:68:6b:
d7:c7:15:47:16:f8:f5:49:36:30:31:94:08:0d:e0:
4c:9b:f0:a3:3f:8a:d6:7d:51:67:4d:cc:ee:9d:09:
b1:0e:db:ed:15:14:d1:c5:0a:c5:13:07:ba:b6:d5:
31:b6:90:6d:1a:64:c8:9e:de:20:09:3c:38:64:c3:
78:45:8d:84:20:03:1b:d4:02:3f:5f:f3:c3:c6:9a:
ca:fc:ac:ac:3b:24:ad:ad:d4:4c:7a:de:4e:8b:8c:
f0:3d:62:af:56:b8:1e:69:df:bd:b6:1b:f8:33:3c:
69:20:91:13:b0:9f:d2:1f:c5:23:c4:fe:9c:66:02:
ed:82:76:a7:ed:27:cd:8e:54:96:a9:50:9d:8a:bf:
73:c5:83:d5:8a:93:56:55:37:b0:e2:4b:d0:d6:c3:
c0:36:18:43:bc:b7:90:40:55:3b:eb:3b:c7:76:19:
6a:a4:5f:77:25:e3:ef:cd:4a:9f:ad:2e:fd:cb:68:
f8:50:46:11:25:8c:46:7b:dc:91:1f:29:12:63:4d:
34:d2:1b:67:c8:e9:fe:8e:91:04:0d:1c:cd:6d:58:
7d:82:bb:6b:ec:2c:4b:76:02:6e:eb:55:17:13:0a:
54:3b:1d:5a:ee:da:4b:9d:36:b1:54:55:9f:ac:df:
3d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:E2:31:6D:D7:1E:FB:E3:BE:6D:B3:91:4A:D0:D4:69:7B:31:DD:98
X509v3 Authority Key Identifier:
keyid:FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/_OIxbdce--O-bbORStDUaXsx3Zg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.80.0.0/12
62.153.0.0-62.159.255.255
62.224.0.0/14
79.192.0.0/10
80.128.0.0/11
84.128.0.0/10
87.128.0.0/10
91.0.0.0/10
93.192.0.0/10
193.158.0.0/15
194.25.0.0/16
195.145.0.0/16
195.243.0.0/16
212.184.0.0/15
217.0.0.0/13
217.80.0.0/12
217.224.0.0/11
IPv6:
2003::/19
Signature Algorithm: sha256WithRSAEncryption
1e:74:9a:70:7f:bc:8a:1b:59:67:1d:e0:96:e2:62:15:ed:ea:
68:bc:67:ad:e8:7e:ea:8c:12:96:4c:5d:9c:1a:7b:ff:89:d1:
3b:29:59:2e:e7:71:28:e6:11:08:b8:da:4a:dd:9a:17:4d:8e:
40:d5:ce:84:db:09:a8:db:21:82:f9:f6:82:bb:3e:94:9e:a2:
5c:78:aa:34:7b:c0:cd:1e:2a:fb:25:bd:37:b6:e0:eb:0a:69:
db:fb:c8:8a:97:31:d7:ed:1a:df:68:f2:5f:c9:7c:aa:f1:cf:
a4:61:c1:28:06:a9:49:7a:c3:80:bb:f2:c0:88:62:76:6b:8c:
bc:c4:a7:d8:19:83:c9:5c:ac:db:65:b6:b3:e2:9b:87:da:6a:
03:76:d2:33:5b:e4:2a:81:ff:42:6d:2c:d1:63:67:7a:6c:fe:
ea:99:bd:1d:28:e3:c7:55:d2:1e:22:80:0d:e4:ce:9d:a9:d2:
9d:d7:e3:2c:31:0e:a9:00:4a:60:75:42:1e:d5:33:d2:f9:57:
85:63:23:af:a9:c7:9e:9e:88:6e:d3:0a:f0:26:de:a4:d0:56:
ba:5b:eb:5f:13:ba:6c:9a:98:59:a7:fd:cb:27:d0:60:39:6a:
d6:93:20:26:74:4a:d1:5e:5b:2a:ac:dd:7b:43:ef:b9:34:84:
09:40:4f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:34:12 2024 by rpki-client on console-fra.rpki-client.org