Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/FQj0dzx75wpxLhFILdhA20L25qs.roa
File: FQj0dzx75wpxLhFILdhA20L25qs.roa (raw, json)
Hash identifier: gDbhKPcaWi7OfJyu+t7ofzlO09KAFhxzL15UmJ/6Lk8=
Subject key identifier: 15:08:F4:77:3C:7B:E7:0A:71:2E:11:48:2D:D8:40:DB:42:F6:E6:AB
Certificate issuer: /CN=91381bc969de6adc3d1ddc0eb89bdeeace9805cd
Certificate serial: 01893F7C814878A0F780582765491A4BB363
Authority key identifier: 91:38:1B:C9:69:DE:6A:DC:3D:1D:DC:0E:B8:9B:DE:EA:CE:98:05:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/FQj0dzx75wpxLhFILdhA20L25qs.roa
Signing time: Mon 10 Jul 2023 11:07:51 +0000
ROA not before: Mon 10 Jul 2023 11:07:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3561
IP address blocks: 82.112.171.0/24 maxlen: 24
82.112.172.0/24 maxlen: 24
82.112.169.0/24 maxlen: 24
82.112.170.0/24 maxlen: 24
82.112.168.0/24 maxlen: 24
82.112.174.0/24 maxlen: 24
82.112.175.0/24 maxlen: 24
185.143.78.0/24 maxlen: 24
185.143.76.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:3f:7c:81:48:78:a0:f7:80:58:27:65:49:1a:4b:b3:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91381bc969de6adc3d1ddc0eb89bdeeace9805cd
Validity
Not Before: Jul 10 11:07:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1508f4773c7be70a712e11482dd840db42f6e6ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c7:8d:63:84:a4:8d:b9:2c:9c:b0:34:96:09:
76:81:36:60:be:aa:ac:ef:77:e7:10:af:8b:d4:d5:
aa:bf:fc:53:2e:8d:0d:cf:29:c4:83:72:a3:0d:55:
8a:66:5e:21:8c:01:dc:a8:61:11:c7:ae:db:a6:54:
7a:87:d8:35:56:24:28:59:a8:d7:d7:3c:5b:af:40:
5f:04:c5:b4:5b:bb:f4:ee:d7:fd:e7:10:74:ec:e2:
6d:6c:27:2d:c3:a1:a3:82:7c:b3:92:b3:47:2e:58:
25:ca:21:7b:f6:01:2f:d7:fd:a7:b4:22:a1:bf:34:
29:97:14:7c:1e:4e:c9:d6:20:ee:fc:a8:a2:55:e3:
f6:4f:0e:5a:94:41:89:77:4d:39:45:a3:7b:4e:f5:
4a:61:30:75:1b:8e:4a:eb:f9:7f:84:0a:70:6b:91:
01:7a:10:4c:68:50:ba:c3:d1:a4:58:0e:bf:e7:08:
64:b8:b5:87:95:51:21:33:ff:fb:1e:f0:10:66:1a:
27:97:0d:d6:53:3b:55:c6:0b:bb:71:bd:b2:2d:28:
ce:ec:4a:b5:94:b4:2b:6b:ad:ea:15:c2:3f:bd:8e:
3d:52:5a:95:50:48:d6:4b:b4:bb:2c:a5:9d:32:70:
e5:12:3e:d4:ee:34:d2:08:26:93:c5:e6:6b:8a:47:
42:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:08:F4:77:3C:7B:E7:0A:71:2E:11:48:2D:D8:40:DB:42:F6:E6:AB
X509v3 Authority Key Identifier:
keyid:91:38:1B:C9:69:DE:6A:DC:3D:1D:DC:0E:B8:9B:DE:EA:CE:98:05:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/FQj0dzx75wpxLhFILdhA20L25qs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.112.168.0-82.112.172.255
82.112.174.0/23
185.143.76.0/24
185.143.78.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:6a:a6:9e:e5:ec:24:82:79:ca:bc:4d:a4:74:6f:1a:98:bb:
7c:51:eb:9a:61:70:8f:6f:94:40:07:43:e2:e2:86:0e:fa:43:
ce:53:d2:64:8f:b1:4c:57:95:16:0a:b0:9d:5e:71:27:f6:b4:
57:7f:04:1a:c3:a8:93:a0:49:64:15:03:0a:37:55:8c:23:bc:
64:7a:fa:a9:f9:c0:cc:44:e9:3a:9c:75:e4:d9:1a:34:fa:74:
cb:7c:d2:0d:7b:d8:89:c2:fd:32:0c:c6:42:9e:a7:ac:fc:8a:
ef:68:72:ce:a9:32:33:21:82:4e:fa:2d:f9:d4:24:91:e6:d3:
ea:5d:85:08:37:9d:6f:0a:bb:07:93:e7:02:42:86:5d:88:af:
6b:ba:82:45:c9:5b:a3:6e:fc:af:f2:79:01:10:d5:88:76:21:
c8:52:f0:4b:be:3f:18:cd:86:f0:82:d6:90:83:3c:ba:0d:f4:
21:09:a3:de:a4:80:c9:65:de:19:51:db:90:53:9b:f9:d8:7c:
29:91:ef:d5:7f:47:20:e4:94:99:0a:43:0a:27:2f:a3:ab:63:
5b:88:63:17:16:41:f8:69:a0:ce:6f:46:3b:1c:3a:10:8f:db:
34:4e:81:c5:7c:de:5d:62:a3:e0:6f:88:eb:0f:81:35:3e:ef:
be:c8:08:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:05 2023 by rpki-client on console-fra.rpki-client.org