Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/jfOE8JPsc8OZByrvV1nB0q8pbys.roa
File: jfOE8JPsc8OZByrvV1nB0q8pbys.roa (raw, json)
Hash identifier: w79latlYrBHsHL8OcNzis/ruYrQTK9Etbe+3s3gIAJc=
Subject key identifier: 8D:F3:84:F0:93:EC:73:C3:99:07:2A:EF:57:59:C1:D2:AF:29:6F:2B
Certificate issuer: /CN=e92c415d1775ae9993e900a7536b46ab144a9aa2
Certificate serial: 0185710BEDB674C3E3C10C53206EA126CCFB
Authority key identifier: E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/jfOE8JPsc8OZByrvV1nB0q8pbys.roa
Signing time: Mon 02 Jan 2023 05:54:45 +0000
ROA not before: Mon 02 Jan 2023 05:54:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3339
IP address blocks: 213.181.68.0/23 maxlen: 23
213.181.66.0/23 maxlen: 23
89.29.186.0/23 maxlen: 23
213.181.82.0/23 maxlen: 23
89.29.188.0/23 maxlen: 23
213.181.95.0/24 maxlen: 24
89.29.212.0/22 maxlen: 22
89.29.208.0/22 maxlen: 22
89.29.216.0/22 maxlen: 22
89.29.220.0/22 maxlen: 22
185.64.241.0/24 maxlen: 24
176.57.102.0/23 maxlen: 23
176.57.100.0/23 maxlen: 23
213.181.64.0/24 maxlen: 24
89.29.230.0/24 maxlen: 24
89.29.240.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0b:ed:b6:74:c3:e3:c1:0c:53:20:6e:a1:26:cc:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e92c415d1775ae9993e900a7536b46ab144a9aa2
Validity
Not Before: Jan 2 05:54:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8df384f093ec73c399072aef5759c1d2af296f2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:26:4a:03:49:1d:2c:9a:23:55:7b:a5:2c:57:
34:c6:23:f3:19:d6:ed:1d:53:4b:f3:bc:09:67:a0:
c6:ab:3d:27:17:64:7d:c2:f0:84:c5:97:ee:79:16:
d0:44:b4:78:a5:99:f7:53:2d:52:b6:2b:c8:84:6f:
d3:1d:24:5d:3b:40:88:e3:92:e5:62:88:ae:b1:f6:
d7:dd:18:1b:07:c4:4e:64:6d:01:6b:b4:65:a6:19:
e3:ac:1f:52:3c:7f:b7:3f:53:25:81:f0:3b:58:d2:
c0:9f:b9:20:43:a9:37:5c:9f:a2:a0:cb:bb:11:3e:
51:d4:7b:2e:62:91:b7:c6:a8:9e:ce:46:c3:5f:c2:
48:8d:15:82:37:39:9d:35:73:81:f8:b0:b5:49:fd:
f7:07:8c:ca:65:ad:c0:0b:77:72:b4:d2:e1:35:74:
0e:91:f8:fb:63:e1:32:32:ca:2d:7b:4a:75:ab:06:
f5:b3:f1:96:d6:94:e3:81:73:22:31:75:11:4d:d8:
f5:9c:12:02:d0:5a:6c:e7:1d:d8:97:3a:13:20:80:
41:17:97:86:8e:82:d4:fc:7c:60:b7:82:9f:03:a0:
2a:5c:c9:88:29:a0:66:fd:ca:3c:01:87:3a:5f:d1:
14:c6:25:0c:08:7a:ff:5d:ba:23:8a:b3:7d:a6:e4:
60:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F3:84:F0:93:EC:73:C3:99:07:2A:EF:57:59:C1:D2:AF:29:6F:2B
X509v3 Authority Key Identifier:
keyid:E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/jfOE8JPsc8OZByrvV1nB0q8pbys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.29.186.0-89.29.189.255
89.29.208.0/20
89.29.230.0/24
89.29.240.0/22
176.57.100.0/22
185.64.241.0/24
213.181.64.0/24
213.181.66.0-213.181.69.255
213.181.82.0/23
213.181.95.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:4d:d2:2c:61:c3:35:64:01:58:9f:ab:1c:a0:e6:7f:aa:7f:
34:ac:e3:5f:64:80:75:17:15:5f:6d:ec:78:ea:d2:a4:58:6e:
39:2e:8c:db:59:61:2a:d1:47:d8:18:11:f6:b4:92:2f:5e:68:
7c:56:bb:81:b4:80:da:57:de:59:a4:fe:66:20:79:3d:fa:37:
4f:e8:c6:de:c6:85:e3:38:bf:be:03:0f:06:31:05:fb:5b:0f:
33:8e:80:76:c6:92:a3:e1:f3:7c:f6:93:77:9c:15:71:59:61:
58:47:8d:9c:96:73:fe:9a:b9:57:d8:27:51:f3:4d:59:a2:d5:
cd:5d:cf:7c:d5:dc:eb:9a:b0:b4:d8:7b:c4:b4:f2:31:8c:4d:
24:01:38:ed:e2:2e:c8:fe:3c:a4:40:9b:f6:88:7a:9c:9d:2e:
1f:93:05:56:8e:2d:34:ec:53:ab:b2:45:58:f1:04:8f:d5:c3:
c8:07:92:74:1b:64:93:21:83:5e:2a:ce:74:3b:86:ef:79:d5:
f0:81:c8:b8:2c:a1:e6:d2:11:af:fa:95:f3:fc:1d:df:eb:15:
ee:ba:2a:80:e6:e3:ac:bc:b7:3a:d9:eb:19:e7:19:64:23:79:
40:4f:f3:f0:3f:b2:4f:8f:d4:4b:4c:c2:77:ee:89:62:e6:2d:
c7:3c:d6:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:14:05 2024 by rpki-client on console-ams.rpki-client.org