Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/fwPJx5_sv_6T7Zbtr9BM1ZQa3Ks.roa
File: fwPJx5_sv_6T7Zbtr9BM1ZQa3Ks.roa (raw, json)
Hash identifier: wfhNKwjdGVVJr21Nk+Ow4LJwf+AYeBlVoNbOMw4WWuQ=
Subject key identifier: 7F:03:C9:C7:9F:EC:BF:FE:93:ED:96:ED:AF:D0:4C:D5:94:1A:DC:AB
Certificate issuer: /CN=b6d14118dbd227298daa80c7acab11eea6d63e21
Certificate serial: 01881AC309943468D59166B3981770831085
Authority key identifier: B6:D1:41:18:DB:D2:27:29:8D:AA:80:C7:AC:AB:11:EE:A6:D6:3E:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ttFBGNvSJymNqoDHrKsR7qbWPiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/fwPJx5_sv_6T7Zbtr9BM1ZQa3Ks.roa
Signing time: Sun 14 May 2023 14:56:09 +0000
ROA not before: Sun 14 May 2023 14:56:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57391
IP address blocks: 185.233.13.0/24 maxlen: 24
88.135.44.0/24 maxlen: 24
88.135.43.0/24 maxlen: 24
88.135.41.0/24 maxlen: 24
185.67.101.0/24 maxlen: 24
88.135.47.0/24 maxlen: 24
185.132.82.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:1a:c3:09:94:34:68:d5:91:66:b3:98:17:70:83:10:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6d14118dbd227298daa80c7acab11eea6d63e21
Validity
Not Before: May 14 14:56:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f03c9c79fecbffe93ed96edafd04cd5941adcab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7d:89:82:5a:d2:42:13:d8:77:f2:96:a9:a9:
28:38:b2:e0:09:d0:05:30:f5:17:00:7b:e5:85:88:
bd:83:f0:f7:33:01:d3:0c:1d:b5:95:e5:c5:35:8a:
21:ba:f5:40:72:a2:14:f7:c6:94:d5:8e:5c:9c:90:
23:03:5b:30:0b:65:2e:e3:31:8b:68:fe:dc:20:50:
8c:29:1f:95:a8:b8:d3:13:98:a2:7e:d6:41:4c:f7:
28:46:ba:26:6a:82:80:86:54:04:49:73:4b:41:49:
c3:fe:6d:9d:d5:22:8a:37:c9:29:6e:87:b5:f6:60:
1c:4a:f2:61:fd:24:dd:c1:35:6a:e4:cd:1a:6e:87:
89:85:d5:09:af:b4:e4:eb:8f:d0:6f:29:2e:f8:bb:
07:01:ef:84:9b:85:af:62:31:d8:12:a6:9b:e2:9a:
a6:c9:1b:8c:b2:b7:7a:86:09:f7:96:80:e4:d0:82:
20:3f:27:bc:c8:e6:07:81:e1:ce:fc:7e:9a:0f:29:
1a:59:1b:7c:c3:4e:eb:36:25:32:bf:c9:dd:92:2b:
bc:f5:8b:dc:50:68:0a:49:de:37:0c:42:7b:83:ba:
b6:c9:ce:37:e8:81:50:f5:5f:82:e6:e5:69:09:d1:
89:08:de:71:0c:f0:34:c4:f7:fb:fc:b1:ab:00:7b:
b2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:03:C9:C7:9F:EC:BF:FE:93:ED:96:ED:AF:D0:4C:D5:94:1A:DC:AB
X509v3 Authority Key Identifier:
keyid:B6:D1:41:18:DB:D2:27:29:8D:AA:80:C7:AC:AB:11:EE:A6:D6:3E:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ttFBGNvSJymNqoDHrKsR7qbWPiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/fwPJx5_sv_6T7Zbtr9BM1ZQa3Ks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/ttFBGNvSJymNqoDHrKsR7qbWPiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.135.41.0/24
88.135.43.0-88.135.44.255
88.135.47.0/24
185.67.101.0/24
185.132.82.0/24
185.233.13.0/24
Signature Algorithm: sha256WithRSAEncryption
35:38:d2:64:69:d5:7b:d6:15:ea:d5:54:2f:96:18:e1:ae:a9:
77:d5:55:b8:bf:66:d9:85:f9:62:73:18:21:16:5e:e0:00:75:
6f:9f:d2:6e:37:1a:7d:ec:91:94:56:f1:16:4c:8c:6b:f8:25:
b4:ac:bf:ff:42:ec:23:da:56:10:aa:01:99:bc:ff:ab:d4:6f:
c0:7e:d6:0f:a5:7f:b5:5b:c7:5a:b3:a5:7f:7f:2f:cc:00:bb:
b4:59:29:db:ff:6e:cf:38:26:e7:ef:75:be:47:4a:fe:5b:58:
50:27:19:86:d3:2f:65:99:97:13:a8:69:ff:e6:84:43:a8:6c:
f0:92:db:1f:8a:c7:81:02:3b:ca:2b:41:b0:55:95:22:55:12:
40:2e:03:90:a4:d1:85:f2:b6:03:1e:13:34:fe:0b:75:ca:02:
9b:ff:0a:af:93:3f:6c:9f:e7:7d:79:f0:a8:21:67:a7:f3:c1:
d3:6c:82:84:52:9c:1d:5b:14:56:4f:0d:66:9c:8a:fc:36:68:
9e:e8:6e:33:03:fd:3e:ec:76:bc:b2:8b:2d:ef:d7:05:15:a7:
f1:1a:dd:00:cb:b3:88:fa:bf:19:e5:7d:0d:5d:80:cb:ef:71:
7c:2d:14:c9:77:ba:29:a2:46:a8:29:d0:40:58:95:9d:4a:db:
e3:08:2c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:38 2023 by rpki-client on console-fra.rpki-client.org