Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/fwNqpqtOYxKkXnonV0sAr3uW2Nc.roa
File: fwNqpqtOYxKkXnonV0sAr3uW2Nc.roa (raw, json)
Hash identifier: iSAIvW08/dTbmV6VcGjGLK9/HRKsen3tnaTIozj1P/E=
Subject key identifier: 7F:03:6A:A6:AB:4E:63:12:A4:5E:7A:27:57:4B:00:AF:7B:96:D8:D7
Certificate issuer: /CN=8b69fc6128be591401acf82bc2461af636ebe8e6
Certificate serial: 0185BA13406DBE62D781E4AFA03E05B4B4AD
Authority key identifier: 8B:69:FC:61:28:BE:59:14:01:AC:F8:2B:C2:46:1A:F6:36:EB:E8:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/fwNqpqtOYxKkXnonV0sAr3uW2Nc.roa
Signing time: Mon 16 Jan 2023 10:15:01 +0000
ROA not before: Mon 16 Jan 2023 10:15:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51531
IP address blocks: 185.176.192.0/22 maxlen: 24
46.31.120.0/21 maxlen: 24
45.129.80.0/22 maxlen: 24
81.89.88.0/21 maxlen: 24
185.70.20.0/22 maxlen: 24
2a02:c50::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ba:13:40:6d:be:62:d7:81:e4:af:a0:3e:05:b4:b4:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b69fc6128be591401acf82bc2461af636ebe8e6
Validity
Not Before: Jan 16 10:15:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f036aa6ab4e6312a45e7a27574b00af7b96d8d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e1:2a:77:02:fc:f5:a4:31:aa:74:60:a5:0f:
ca:9c:dc:42:ad:4d:7f:2a:db:b2:2d:8c:cb:c3:5b:
4e:75:6a:b9:3e:e9:61:d2:d3:b8:c4:c8:98:ce:51:
6f:31:36:41:b5:c2:a0:6c:68:96:b3:95:07:ea:65:
1c:b8:6a:4d:0e:47:dc:ea:de:b7:a8:f3:ba:ef:b4:
04:d6:83:bb:df:8c:b8:19:8e:6b:20:ae:ef:e2:2e:
16:5b:e4:38:a9:bd:0d:b9:d3:fc:ad:3c:9e:a4:b2:
61:d0:bd:77:b8:54:8e:2b:a6:2b:d2:a1:25:6c:3d:
12:ec:5d:24:cb:9b:18:d0:e2:76:8f:37:aa:75:f0:
a4:7d:79:e3:7f:37:18:9f:04:60:fb:6e:8e:df:a5:
46:41:14:16:c2:f9:61:e4:3e:2f:c0:9d:e4:1c:29:
90:89:a7:a8:75:c6:6a:a2:4e:48:29:6f:97:f3:fc:
ee:4f:97:07:09:73:e5:32:d9:4c:8c:a1:08:c4:5e:
31:bc:9f:4f:c0:14:74:a1:14:c5:0d:d4:c5:b1:d4:
b9:f6:16:66:61:cc:61:14:f5:ff:36:19:ba:17:e4:
51:a7:b6:d9:9b:8a:cc:33:aa:8d:39:7d:d5:6f:9b:
3a:23:83:8f:64:4a:a9:66:6e:94:76:aa:04:ce:15:
9b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:03:6A:A6:AB:4E:63:12:A4:5E:7A:27:57:4B:00:AF:7B:96:D8:D7
X509v3 Authority Key Identifier:
keyid:8B:69:FC:61:28:BE:59:14:01:AC:F8:2B:C2:46:1A:F6:36:EB:E8:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/fwNqpqtOYxKkXnonV0sAr3uW2Nc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.80.0/22
46.31.120.0/21
81.89.88.0/21
185.70.20.0/22
185.176.192.0/22
IPv6:
2a02:c50::/32
Signature Algorithm: sha256WithRSAEncryption
be:80:c5:8b:72:2b:86:0c:68:ce:bc:d8:ba:af:be:c4:f3:91:
98:9e:a6:38:53:c8:da:10:28:cb:4f:9f:e2:4e:4c:e8:7a:33:
0e:ac:1c:94:9e:9a:9e:e1:c5:40:b8:09:a0:d6:c7:70:4b:22:
5c:a4:37:3c:54:d9:fc:c3:44:77:07:d2:20:53:f2:24:71:67:
3c:ef:b7:01:52:a5:f0:62:c2:28:c3:7c:c1:a2:e1:25:1c:73:
57:e0:63:88:4d:6d:25:c9:b6:e1:65:36:83:00:5b:cc:e7:cf:
cd:32:eb:e5:fa:a4:8d:6d:90:17:cb:62:b4:ff:f7:73:da:6b:
be:72:c7:93:f7:fc:b4:a9:3c:ad:47:36:22:7f:47:dc:f2:83:
09:24:27:81:3f:eb:c0:db:c6:f7:c9:ea:b5:27:38:39:22:a0:
f3:1e:46:a3:f5:aa:ef:c1:6a:05:9c:d9:42:25:45:f7:66:7f:
f8:be:1c:69:48:f0:55:eb:1e:5b:e0:a8:80:9e:c3:4a:0c:16:
87:b2:80:4f:91:ec:d8:e4:79:12:88:56:16:78:62:4e:1e:c5:
ba:fd:ea:75:da:c3:49:b4:f8:73:6a:e9:6a:00:4c:a1:dc:1a:
0f:b4:e3:52:7b:1c:9f:05:e6:80:82:57:79:5f:23:18:f8:9f:
35:cf:c1:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:20:31 2024 by rpki-client on console-ams.rpki-client.org