Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/ry8grWUW3phbm3sAT0rk5IMyv40.roa
File: ry8grWUW3phbm3sAT0rk5IMyv40.roa (raw, json)
Hash identifier: FqysTmYdUxp6bPsXxR6NovOKMVRMcJP7FvXgWSD3600=
Subject key identifier: AF:2F:20:AD:65:16:DE:98:5B:9B:7B:00:4F:4A:E4:E4:83:32:BF:8D
Certificate issuer: /CN=16241dd83d8ac080b66504bf937459ffcec4ccc4
Certificate serial: 0187E82501930540CBCB4AB13999FDF0937A
Authority key identifier: 16:24:1D:D8:3D:8A:C0:80:B6:65:04:BF:93:74:59:FF:CE:C4:CC:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/ry8grWUW3phbm3sAT0rk5IMyv40.roa
Signing time: Thu 04 May 2023 19:02:32 +0000
ROA not before: Thu 04 May 2023 19:02:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16154
IP address blocks: 88.213.194.0/23 maxlen: 24
88.213.200.0/21 maxlen: 24
80.95.24.0/21 maxlen: 24
217.79.64.0/19 maxlen: 24
2a02:7900::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e8:25:01:93:05:40:cb:cb:4a:b1:39:99:fd:f0:93:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16241dd83d8ac080b66504bf937459ffcec4ccc4
Validity
Not Before: May 4 19:02:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=af2f20ad6516de985b9b7b004f4ae4e48332bf8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:90:5b:a2:ba:6c:7b:6d:2f:f4:4a:e9:a1:42:
2b:5c:f3:fb:55:6d:27:ec:a9:f9:c8:45:67:32:40:
25:fb:57:f2:75:e8:f9:42:d2:7c:df:56:10:72:24:
14:76:fe:e4:97:55:e9:a3:92:ee:f6:50:06:67:0a:
6b:b0:14:f9:d3:07:79:65:dd:bf:02:2e:60:49:98:
e8:e7:53:11:f7:e0:ec:4f:45:28:94:34:4d:c6:0c:
50:bd:31:ae:eb:54:41:ca:54:25:49:c0:8e:b3:2d:
2e:81:58:0e:30:ff:f5:47:e1:b8:9c:65:dd:a8:a7:
04:8b:4d:59:7a:e4:22:1e:b6:e6:88:3f:e7:fe:2e:
6f:db:27:cd:01:58:2c:b3:8f:d7:14:54:03:a5:14:
54:d5:ed:2e:ab:64:b7:f4:81:78:59:77:03:39:56:
c1:8f:b5:20:98:6f:2d:74:b2:f5:c6:65:89:d4:51:
cc:ed:d3:e9:63:00:ac:4d:a3:c6:ef:2d:45:61:fc:
13:4f:2f:0b:26:f8:c0:52:16:30:5b:d8:3d:d5:20:
7d:b5:46:29:04:04:6c:f6:cc:dc:fb:45:a2:9e:58:
b6:04:f0:85:11:e4:59:65:0d:84:93:2f:00:73:7a:
da:80:52:9d:44:02:0a:35:4c:0a:8b:95:60:37:b5:
9c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:2F:20:AD:65:16:DE:98:5B:9B:7B:00:4F:4A:E4:E4:83:32:BF:8D
X509v3 Authority Key Identifier:
keyid:16:24:1D:D8:3D:8A:C0:80:B6:65:04:BF:93:74:59:FF:CE:C4:CC:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/ry8grWUW3phbm3sAT0rk5IMyv40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.95.24.0/21
88.213.194.0/23
88.213.200.0/21
217.79.64.0/19
IPv6:
2a02:7900::/32
Signature Algorithm: sha256WithRSAEncryption
77:e5:a8:d5:ce:80:31:2c:34:d8:e6:3e:bd:79:35:06:27:fe:
ca:45:cd:c6:4b:e3:38:85:b6:2e:55:b4:e8:46:9c:a3:75:36:
44:c9:61:b9:07:84:77:7b:02:64:51:e4:93:c6:22:3a:28:08:
e7:84:de:64:c4:ce:0e:c2:db:f7:0b:6f:f6:02:82:54:1c:07:
f2:d2:0b:92:35:12:cf:2d:da:66:8c:ae:f4:19:c6:82:fd:8e:
ef:59:92:33:8e:02:27:3e:c9:01:14:89:ba:d9:2a:1e:0f:df:
5d:63:15:f4:b8:ed:d8:c6:28:21:47:33:2a:43:df:39:d5:db:
ee:70:4e:bc:74:31:53:3b:39:8a:77:b8:db:0a:a5:d5:91:e6:
4e:08:62:7b:c3:1e:d8:05:4c:c3:0d:69:11:48:19:cf:d7:9d:
01:90:73:00:cc:6a:ee:a5:4c:c2:19:90:d8:9f:00:53:18:3a:
41:f0:ff:fa:42:97:a7:02:e3:ae:4a:e2:bf:03:d8:c0:ba:ff:
55:59:49:d4:ab:cc:c7:17:4c:55:19:6f:37:07:97:37:7c:37:
6d:a7:80:5a:da:52:11:68:46:bc:5f:df:70:c3:5d:bc:9a:fc:
97:53:8a:a2:45:fe:79:7b:2d:f2:67:42:63:88:ff:e8:5b:38:
87:43:e4:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:38 2024 by rpki-client on console-fra.rpki-client.org