Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/8bf389-813c-49ba-850c-940c6b8b502a/1/Eia6dq7breWqLm-N9RWfRy9r04s.roa
File: Eia6dq7breWqLm-N9RWfRy9r04s.roa (raw, json)
Hash identifier: uIvNxa16/Hd5mCSN9tiAPwvfLrp4Bf+WOxF+7b655oM=
Subject key identifier: 12:26:BA:76:AE:DB:AD:E5:AA:2E:6F:8D:F5:15:9F:47:2F:6B:D3:8B
Certificate issuer: /CN=f3f6a57ea2a902eb4912de927df80304c355ab12
Certificate serial: 01857321F583C9503D475378AC4AE9D5B326
Authority key identifier: F3:F6:A5:7E:A2:A9:02:EB:49:12:DE:92:7D:F8:03:04:C3:55:AB:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8_alfqKpAutJEt6SffgDBMNVqxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/8bf389-813c-49ba-850c-940c6b8b502a/1/Eia6dq7breWqLm-N9RWfRy9r04s.roa
Signing time: Mon 02 Jan 2023 15:38:03 +0000
ROA not before: Mon 02 Jan 2023 15:38:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200062
IP address blocks: 188.64.56.0/21 maxlen: 21
185.9.128.0/22 maxlen: 22
80.209.244.0/22 maxlen: 22
185.127.116.0/22 maxlen: 22
185.64.112.0/22 maxlen: 22
158.181.48.0/21 maxlen: 21
2a00:6140::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:21:f5:83:c9:50:3d:47:53:78:ac:4a:e9:d5:b3:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3f6a57ea2a902eb4912de927df80304c355ab12
Validity
Not Before: Jan 2 15:38:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1226ba76aedbade5aa2e6f8df5159f472f6bd38b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:98:b2:a9:f3:01:2e:6f:35:e3:04:e0:bd:60:
cd:bf:a9:e4:d3:1d:f2:94:63:6a:a5:cd:de:2d:67:
93:b9:32:95:51:54:7e:7d:41:25:29:f8:56:9f:59:
15:41:a5:64:46:99:0c:12:9c:72:e5:d5:6c:af:49:
4f:31:63:bd:00:e0:f3:c5:84:a3:40:09:90:8d:47:
37:7e:6d:b1:6c:28:2d:19:80:b6:68:e3:eb:36:f0:
de:ad:6a:55:ca:aa:47:d5:b5:d3:aa:4d:2b:1c:fd:
90:c2:62:ed:b2:d6:b0:0b:38:6a:d6:8a:65:ae:c0:
56:62:24:0d:11:22:15:f7:c6:7b:c3:3c:f4:7b:c9:
64:42:a2:5f:7a:8a:5d:78:f0:c5:e2:ce:19:e0:a4:
f4:8a:8b:95:fd:a0:7b:59:01:62:9f:f3:7f:6a:00:
48:3d:4f:ef:9d:d9:42:10:91:43:04:54:0a:16:a8:
de:b7:e8:31:1e:05:9b:8f:30:a4:7c:b5:98:be:c0:
c7:e4:81:9a:b7:d0:bc:25:7f:bd:20:19:89:79:b3:
9c:34:15:91:28:76:c8:c7:97:a9:ae:ac:99:5f:ea:
e6:73:38:4f:6b:98:ba:53:e7:4c:21:a0:0e:96:c8:
28:12:8e:a3:a8:9d:b7:93:71:96:a0:49:f4:dd:cd:
8c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:26:BA:76:AE:DB:AD:E5:AA:2E:6F:8D:F5:15:9F:47:2F:6B:D3:8B
X509v3 Authority Key Identifier:
keyid:F3:F6:A5:7E:A2:A9:02:EB:49:12:DE:92:7D:F8:03:04:C3:55:AB:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8_alfqKpAutJEt6SffgDBMNVqxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/8bf389-813c-49ba-850c-940c6b8b502a/1/Eia6dq7breWqLm-N9RWfRy9r04s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/8bf389-813c-49ba-850c-940c6b8b502a/1/8_alfqKpAutJEt6SffgDBMNVqxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.209.244.0/22
158.181.48.0/21
185.9.128.0/22
185.64.112.0/22
185.127.116.0/22
188.64.56.0/21
IPv6:
2a00:6140::/32
Signature Algorithm: sha256WithRSAEncryption
51:b9:22:20:90:fa:46:46:29:d4:87:7f:38:4f:3b:d7:9c:38:
9e:0b:e1:b1:37:2e:52:d1:2f:90:97:17:da:9a:92:b7:8f:ad:
b0:36:2e:2e:58:e6:1c:ac:c7:d1:4b:8f:ec:cd:97:74:87:5d:
fd:66:8e:23:ce:c1:ad:bd:be:34:d0:2f:1e:17:18:45:cc:b9:
06:7b:76:87:54:07:db:e0:5e:6c:2e:6e:08:c7:24:ca:c3:98:
4f:96:f2:b1:42:28:be:cf:f9:a7:c9:24:2e:26:4f:cc:4b:4c:
be:d6:3a:43:73:51:22:a5:72:30:8f:be:08:52:9e:14:9c:33:
81:8e:0a:12:98:2e:2d:65:4a:1e:b9:15:7e:40:78:b7:ca:d2:
d3:f3:c7:11:37:99:2c:2f:ee:f2:08:9a:84:b0:8b:de:b6:8c:
b5:f5:5d:f3:18:39:c9:96:f0:a2:1d:45:1f:92:ae:33:a4:88:
19:2d:cb:69:26:f8:0f:28:4c:fc:cf:41:e2:73:18:ae:14:7a:
43:b9:92:54:b1:02:07:09:34:08:8d:ae:a8:5a:bb:f1:16:7a:
22:bb:04:3c:6a:42:e6:61:28:42:63:df:45:74:bc:0a:50:a7:
1b:a5:4e:ba:df:c1:dc:c7:21:a9:93:cf:73:c7:85:86:9c:85:
ec:f2:17:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:15:58 2024 by rpki-client on console-ams.rpki-client.org