Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/Ffk5JDBlB3ogiBVyzAIbhZswVh0.roa
File: Ffk5JDBlB3ogiBVyzAIbhZswVh0.roa (raw, json)
Hash identifier: imjWpT35qIA9GGV4PzoPHd855YuP2QASi6fjtzvC1Jc=
Subject key identifier: 15:F9:39:24:30:65:07:7A:20:88:15:72:CC:02:1B:85:9B:30:56:1D
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 0188FCABC9C1DC2A60310709A252EE8E0491
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/Ffk5JDBlB3ogiBVyzAIbhZswVh0.roa
Signing time: Tue 27 Jun 2023 11:44:56 +0000
ROA not before: Tue 27 Jun 2023 11:44:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 32787
IP address blocks: 2.21.112.0/24 maxlen: 24
95.100.157.0/24 maxlen: 24
2.21.118.0/24 maxlen: 24
2.21.114.0/24 maxlen: 24
2.17.192.0/24 maxlen: 24
2.17.192.0/22 maxlen: 22
2.17.193.0/24 maxlen: 24
2.17.195.0/24 maxlen: 24
2.17.194.0/24 maxlen: 24
2.21.175.0/24 maxlen: 24
95.100.215.0/24 maxlen: 24
95.100.214.0/24 maxlen: 24
92.122.207.0/24 maxlen: 24
95.100.253.0/24 maxlen: 24
93.191.172.0/24 maxlen: 24
93.191.168.0/24 maxlen: 24
93.191.169.0/24 maxlen: 24
95.100.180.0/24 maxlen: 24
93.191.170.0/24 maxlen: 24
92.122.185.0/24 maxlen: 24
95.100.213.0/24 maxlen: 24
92.122.184.0/24 maxlen: 24
95.100.212.0/24 maxlen: 24
95.101.118.0/24 maxlen: 24
95.101.117.0/24 maxlen: 24
95.101.204.0/22 maxlen: 22
2.19.4.0/22 maxlen: 22
2.17.108.0/22 maxlen: 22
2a02:2370:207::/48 maxlen: 48
2a02:2370:2::/48 maxlen: 48
2a02:2370:102::/48 maxlen: 48
2a02:2370:202::/48 maxlen: 48
2a02:2370:6::/48 maxlen: 48
2a02:2370:106::/48 maxlen: 48
2a02:2370:206::/48 maxlen: 48
2a02:2370:1::/48 maxlen: 48
2a02:2370:101::/48 maxlen: 48
2a02:2370:201::/48 maxlen: 48
2a02:2370:204::/48 maxlen: 48
2a02:2370:4::/48 maxlen: 48
2a02:2370:104::/48 maxlen: 48
2a02:2370:103::/48 maxlen: 48
2a02:2370:203::/48 maxlen: 48
2a02:2370:3::/48 maxlen: 48
2a02:2370:200::/48 maxlen: 48
2a02:2370:5::/48 maxlen: 48
2a02:2370:105::/48 maxlen: 48
2a02:2370:205::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:fc:ab:c9:c1:dc:2a:60:31:07:09:a2:52:ee:8e:04:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Jun 27 11:44:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=15f939243065077a20881572cc021b859b30561d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4d:52:4e:9b:1b:e6:45:49:c4:77:ed:6e:7b:
a6:b9:63:70:d8:be:b6:27:d5:f4:ed:50:20:3f:b7:
4a:0f:e7:98:87:81:7f:98:aa:b0:4f:06:a2:bd:d7:
7a:c5:65:09:3e:e4:98:fe:88:c7:0c:94:1e:97:28:
97:dd:1d:b3:dc:4c:d8:bd:4b:2f:75:00:77:d8:b4:
3f:65:24:38:29:b3:b3:3e:67:54:8f:f3:08:f0:c5:
ae:bd:53:0e:0f:9a:cb:10:4c:2a:11:cd:08:d4:ae:
3a:2c:6a:87:66:24:d3:67:d6:38:36:23:ff:fa:5d:
d4:2c:94:a0:3f:83:11:f2:db:2f:20:f9:ba:8f:bd:
8a:a9:ac:a2:7f:7a:6f:e9:65:3e:91:0d:8f:5a:53:
5a:c4:38:1f:ce:c1:4c:23:8f:0f:60:df:a2:87:63:
62:30:37:8e:23:4b:79:e2:64:ee:a6:76:30:47:24:
1c:88:0e:0c:17:73:97:2f:db:f7:c5:7e:4c:76:69:
2d:41:c5:f7:f8:fd:4c:17:42:db:dd:83:3d:58:20:
8c:f6:f3:86:94:b4:64:7e:4e:b4:d1:f0:86:6f:69:
41:a5:45:9d:63:69:eb:ed:69:5a:43:e4:0b:ac:28:
b2:eb:82:33:bf:8c:d6:a8:5b:97:6b:1d:84:88:f5:
04:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F9:39:24:30:65:07:7A:20:88:15:72:CC:02:1B:85:9B:30:56:1D
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/Ffk5JDBlB3ogiBVyzAIbhZswVh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.17.108.0/22
2.17.192.0/22
2.19.4.0/22
2.21.112.0/24
2.21.114.0/24
2.21.118.0/24
2.21.175.0/24
92.122.184.0/23
92.122.207.0/24
93.191.168.0-93.191.170.255
93.191.172.0/24
95.100.157.0/24
95.100.180.0/24
95.100.212.0/22
95.100.253.0/24
95.101.117.0-95.101.118.255
95.101.204.0/22
IPv6:
2a02:2370:1::-2a02:2370:6:ffff:ffff:ffff:ffff:ffff
2a02:2370:101::-2a02:2370:106:ffff:ffff:ffff:ffff:ffff
2a02:2370:200::/45
Signature Algorithm: sha256WithRSAEncryption
61:79:b2:8d:53:df:66:a0:97:1a:b5:2a:a8:a1:3e:d6:d8:07:
11:f4:95:4d:8d:d1:54:50:3f:f9:f0:eb:74:89:f1:f1:cb:24:
09:92:6f:d2:d5:d3:03:12:c8:c3:37:77:d9:9a:26:78:97:53:
67:ab:69:8a:cd:52:17:70:8f:78:0c:11:5e:c5:70:9b:cb:79:
3f:7d:84:1f:3a:34:18:48:3e:fb:b0:d1:27:a8:30:fa:c2:c2:
cd:0c:01:d4:bc:a4:14:82:ef:7d:a8:ca:e0:8c:18:5d:93:96:
de:08:3c:51:5a:3b:02:ba:10:83:83:05:05:79:af:71:3b:22:
cd:b6:40:90:fd:e4:b8:e7:ce:b7:6c:bf:0c:ee:2c:a0:ca:ba:
18:b8:5d:f7:e2:b1:14:02:59:43:e4:c3:59:55:5a:71:a2:75:
be:41:61:1e:bb:f7:26:ce:dc:8e:51:e3:0c:7d:65:8f:8e:6c:
f5:b5:95:ed:04:49:9c:b1:46:a3:57:cd:18:7f:0f:e7:6e:4e:
a1:42:a4:fc:d6:b6:00:85:c4:da:fa:58:91:75:e1:c3:03:1a:
18:a2:30:f4:cf:a2:ef:52:b7:4b:6c:fc:84:f3:47:f9:5c:c8:
e7:68:e4:5d:6a:e4:bb:46:36:e0:aa:72:a0:e0:4b:41:63:27:
ef:9f:65:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 23 10:28:32 2023 by rpki-client on console-fra.rpki-client.org