Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/f4VvDuiryLvIPLVlj9gXn1NLWPs.roa
File: f4VvDuiryLvIPLVlj9gXn1NLWPs.roa (raw, json)
Hash identifier: 689g44NcrGch6VhElnJxHGIpjto+sUM1NKB/lBUdeBM=
Subject key identifier: 7F:85:6F:0E:E8:AB:C8:BB:C8:3C:B5:65:8F:D8:17:9F:53:4B:58:FB
Certificate issuer: /CN=4e15df688c3aeae3f685ed44b396c2198395861d
Certificate serial: 01856C7810FEB62771EBA14DE19D301AFD1F
Authority key identifier: 4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/f4VvDuiryLvIPLVlj9gXn1NLWPs.roa
Signing time: Sun 01 Jan 2023 08:34:46 +0000
ROA not before: Sun 01 Jan 2023 08:34:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16340
IP address blocks: 95.174.32.0/19 maxlen: 19
82.115.64.0/19 maxlen: 19
217.144.192.0/19 maxlen: 19
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:78:10:fe:b6:27:71:eb:a1:4d:e1:9d:30:1a:fd:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e15df688c3aeae3f685ed44b396c2198395861d
Validity
Not Before: Jan 1 08:34:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f856f0ee8abc8bbc83cb5658fd8179f534b58fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:87:fe:7d:f1:b1:57:87:81:6b:67:a4:06:a1:
13:67:0e:67:bd:5d:93:dd:ee:a3:d2:32:f5:50:7f:
ff:d0:a8:09:77:bb:3a:d3:6c:98:8c:22:1c:67:88:
df:c2:12:28:e9:7f:ba:23:a9:fc:8a:3e:52:ff:aa:
46:11:1c:78:f8:27:1c:ec:83:e7:60:e8:92:2d:fa:
95:ad:4b:68:a2:b1:5e:ea:82:0f:0b:a8:e5:d2:b3:
c8:86:70:16:13:6f:90:d3:e7:40:e6:db:94:ca:45:
e4:fe:b3:c6:e1:7c:ed:a1:b5:72:50:50:24:c8:29:
d5:31:e4:03:27:04:02:b9:fd:ba:c8:aa:ee:ca:46:
92:d3:73:60:31:99:8b:4c:48:38:66:78:3a:75:d4:
7c:fa:24:20:24:9b:f0:df:02:87:a1:6c:e9:72:8e:
e4:06:2a:1a:16:7c:35:5c:97:0b:34:31:00:09:42:
06:01:c9:05:fb:64:7f:38:6d:ba:ff:bd:10:4b:5b:
8e:23:8a:7a:d1:fb:e5:a9:01:42:ee:e7:19:6f:bf:
42:f0:cb:0a:32:a2:2a:2e:a6:e3:5c:78:ce:c7:e7:
f3:8d:9f:3c:b8:ac:ce:f8:88:90:0b:3e:0c:b8:2f:
1d:b9:8f:76:b4:d9:b2:7e:ce:17:b5:27:98:59:3f:
ee:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:85:6F:0E:E8:AB:C8:BB:C8:3C:B5:65:8F:D8:17:9F:53:4B:58:FB
X509v3 Authority Key Identifier:
keyid:4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/f4VvDuiryLvIPLVlj9gXn1NLWPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.64.0/19
95.174.32.0/19
217.144.192.0/19
Signature Algorithm: sha256WithRSAEncryption
0f:ba:ce:ef:9a:06:09:6b:d2:06:c3:3c:91:86:20:1d:38:10:
8b:8e:a6:26:c4:74:ab:76:c2:8c:5d:81:76:5e:ba:64:56:50:
5f:55:20:c2:97:f1:44:8d:70:1f:35:79:c0:83:e6:07:1c:cb:
8f:b8:66:4b:01:d0:5e:99:cb:c7:88:7d:6c:2c:cd:65:14:75:
42:f7:6d:c0:48:7b:c9:19:e6:36:e7:fc:80:66:72:78:9f:17:
88:be:28:15:40:b4:e1:5b:09:ae:24:89:d7:7d:99:56:00:e9:
d7:dd:31:90:4b:11:fb:54:1b:58:aa:6a:5b:2a:e3:b9:33:06:
59:39:f6:0d:a4:28:45:4e:60:58:c0:c2:a7:9e:aa:f4:3c:13:
01:94:93:0d:5c:d1:35:57:66:a9:f8:5b:35:ac:9b:b2:b4:9c:
f2:36:f3:63:09:ec:8a:77:05:19:93:f6:2d:c4:6a:3b:be:11:
0d:58:94:58:38:bb:d1:e3:73:92:cb:d1:ab:bb:6b:b9:db:27:
5a:60:e5:54:da:2e:2f:04:b1:c5:ba:e2:24:b1:0c:8b:75:62:
1c:19:9e:38:ce:80:c1:4e:8d:03:1e:4d:68:9c:89:cf:12:d6:
57:b2:a1:a8:a1:68:d9:c5:44:29:1c:a2:2b:22:d5:91:2b:aa:
aa:ad:b1:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:37:41 2024 by rpki-client on console-fra.rpki-client.org