Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/GWS7_95e-T4CXhP9NdXoOZyNHTA.roa
File: GWS7_95e-T4CXhP9NdXoOZyNHTA.roa (raw, json)
Hash identifier: 7ka6XYR0iXl6mQn5r9OKm3N/JrUFVoRviKa2E8pIcns=
Subject key identifier: 19:64:BB:FF:DE:5E:F9:3E:02:5E:13:FD:35:D5:E8:39:9C:8D:1D:30
Certificate issuer: /CN=8817aafec61c3a6b024b6a9f54ffb764ca3df922
Certificate serial: 01856C813BFF619E478CC631D5E967DCFAC6
Authority key identifier: 88:17:AA:FE:C6:1C:3A:6B:02:4B:6A:9F:54:FF:B7:64:CA:3D:F9:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/GWS7_95e-T4CXhP9NdXoOZyNHTA.roa
Signing time: Sun 01 Jan 2023 08:44:46 +0000
ROA not before: Sun 01 Jan 2023 08:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12654
IP address blocks: 84.205.71.0/24 maxlen: 24
84.205.70.0/24 maxlen: 24
84.205.69.0/24 maxlen: 24
84.205.68.0/24 maxlen: 24
84.205.67.0/24 maxlen: 24
84.205.66.0/24 maxlen: 24
84.205.65.0/24 maxlen: 24
84.205.77.0/24 maxlen: 24
84.205.78.0/24 maxlen: 24
84.205.76.0/24 maxlen: 24
84.205.75.0/24 maxlen: 24
84.205.74.0/24 maxlen: 24
84.205.73.0/24 maxlen: 24
84.205.72.0/24 maxlen: 24
84.205.85.0/24 maxlen: 24
84.205.84.0/24 maxlen: 24
84.205.82.0/24 maxlen: 24
84.205.81.0/24 maxlen: 24
84.205.80.0/24 maxlen: 24
84.205.79.0/24 maxlen: 24
84.205.91.0/24 maxlen: 24
84.205.90.0/24 maxlen: 24
84.205.89.0/24 maxlen: 24
84.205.88.0/24 maxlen: 24
84.205.87.0/24 maxlen: 24
84.205.86.0/24 maxlen: 24
84.205.95.0/24 maxlen: 24
84.205.94.0/24 maxlen: 24
84.205.93.0/24 maxlen: 24
84.205.92.0/24 maxlen: 24
84.205.64.0/24 maxlen: 24
93.175.152.0/24 maxlen: 24
93.175.151.0/24 maxlen: 24
93.175.150.0/24 maxlen: 24
93.175.149.0/24 maxlen: 24
93.175.148.0/24 maxlen: 24
93.175.146.0/24 maxlen: 24
93.175.153.0/24 maxlen: 24
2001:7fb:ff13::/48 maxlen: 48
2001:7fb:fe13::/48 maxlen: 48
2001:7fb:ff02::/48 maxlen: 48
2001:7fb:fd02::/48 maxlen: 48
2001:7fb:fe10::/48 maxlen: 48
2001:7fb:ff10::/48 maxlen: 48
2001:7fb:ff17::/48 maxlen: 48
2001:7fb:fe17::/48 maxlen: 48
2001:7fb:ff06::/48 maxlen: 48
2001:7fb:fe06::/48 maxlen: 48
2001:7fb:fe03::/48 maxlen: 48
2001:7fb:ff0d::/48 maxlen: 48
2001:7fb:fe0d::/48 maxlen: 48
2001:7fb:fe14::/48 maxlen: 48
2001:7fb:ff14::/48 maxlen: 48
2001:7fb:ff00::/48 maxlen: 48
2001:7fb:fe00::/48 maxlen: 48
2001:7fb:ff0a::/48 maxlen: 48
2001:7fb:fe0a::/48 maxlen: 48
2001:7fb:ff07::/48 maxlen: 48
2001:7fb:fe07::/48 maxlen: 48
2001:7fb:ff18::/48 maxlen: 48
2001:7fb:fe18::/48 maxlen: 48
2001:7fb:fe04::/48 maxlen: 48
2001:7fb:ff04::/48 maxlen: 48
2001:7fb:ff0e::/48 maxlen: 48
2001:7fb:fe0e::/48 maxlen: 48
2001:7fb:fe0b::/48 maxlen: 48
2001:7fb:ff0b::/48 maxlen: 48
2001:7fb:ff15::/48 maxlen: 48
2001:7fb:fe15::/48 maxlen: 48
2001:7fb:ff01::/48 maxlen: 48
2001:7fb:fe01::/48 maxlen: 48
2001:7fb:ff12::/48 maxlen: 48
2001:7fb:fe12::/48 maxlen: 48
2001:7fb:fe0f::/48 maxlen: 48
2001:7fb:ff0f::/48 maxlen: 48
2001:7fb:fe05::/48 maxlen: 48
2001:7fb:ff05::/48 maxlen: 48
2001:7fb:fe0c::/48 maxlen: 48
2001:7fb:ff0c::/48 maxlen: 48
2001:7fb:ff16::/48 maxlen: 48
2001:7fb:fe16::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:81:3b:ff:61:9e:47:8c:c6:31:d5:e9:67:dc:fa:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8817aafec61c3a6b024b6a9f54ffb764ca3df922
Validity
Not Before: Jan 1 08:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1964bbffde5ef93e025e13fd35d5e8399c8d1d30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c5:7c:49:0d:ce:d8:dd:08:81:dd:d6:f1:57:
e3:9c:9b:2e:c6:20:17:6b:1d:26:1a:74:77:d7:8e:
8d:57:8f:e0:6f:62:c7:ad:dc:bf:77:2b:35:54:0e:
45:01:b4:ea:91:57:ed:3f:12:7e:dd:9b:09:d3:19:
22:88:13:72:92:5d:d6:f3:e7:65:04:02:4d:0e:2d:
5d:24:7f:d1:01:07:49:e7:1e:b2:0f:23:9a:3b:20:
24:ab:9c:c8:d3:c0:44:9c:02:16:b0:19:40:23:db:
d9:e6:ef:a8:30:fa:3b:28:f7:43:82:2d:7e:63:7a:
69:34:cc:16:9d:f9:f8:3d:58:38:ab:d3:4c:91:2f:
4e:8c:c3:ef:c6:e2:69:42:e2:03:3a:9a:5a:fd:ae:
64:74:0f:fb:55:24:00:f5:54:68:7c:d2:da:a9:f4:
b3:e2:9b:c5:ee:af:f6:28:5e:44:dc:dd:2f:d0:a7:
e4:e3:7d:73:32:c8:0c:4a:81:2c:d4:60:15:c5:2a:
ab:f2:b5:4d:c7:d7:8a:fb:14:cb:20:c1:6d:6a:6e:
d2:46:3b:df:5a:d5:3a:b6:3c:32:bf:1d:3c:44:95:
51:99:39:82:ec:65:77:89:a7:f7:43:cb:28:b6:d0:
13:37:cc:cd:0e:2b:b7:87:9b:e8:35:40:68:0b:aa:
89:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:64:BB:FF:DE:5E:F9:3E:02:5E:13:FD:35:D5:E8:39:9C:8D:1D:30
X509v3 Authority Key Identifier:
keyid:88:17:AA:FE:C6:1C:3A:6B:02:4B:6A:9F:54:FF:B7:64:CA:3D:F9:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/GWS7_95e-T4CXhP9NdXoOZyNHTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.205.64.0-84.205.82.255
84.205.84.0-84.205.95.255
93.175.146.0/24
93.175.148.0-93.175.153.255
IPv6:
2001:7fb:fd02::/48
2001:7fb:fe00::/47
2001:7fb:fe03::-2001:7fb:fe07:ffff:ffff:ffff:ffff:ffff
2001:7fb:fe0a::-2001:7fb:fe10:ffff:ffff:ffff:ffff:ffff
2001:7fb:fe12::-2001:7fb:fe18:ffff:ffff:ffff:ffff:ffff
2001:7fb:ff00::-2001:7fb:ff02:ffff:ffff:ffff:ffff:ffff
2001:7fb:ff04::/46
2001:7fb:ff0a::-2001:7fb:ff10:ffff:ffff:ffff:ffff:ffff
2001:7fb:ff12::-2001:7fb:ff18:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
09:23:51:94:31:5c:74:d9:21:70:31:1d:9f:55:9d:35:3d:72:
3b:80:32:ec:a2:b7:05:31:43:31:7c:49:96:58:a3:c0:24:e8:
3f:3c:8b:b4:e5:8b:52:ed:e6:36:9d:35:e7:06:e6:27:8a:d3:
42:05:8f:42:80:c9:72:df:ac:e8:f2:f9:76:84:6d:89:9a:29:
43:5e:74:81:6a:ab:6f:45:f0:22:e8:b8:80:6e:55:37:29:8d:
62:95:12:84:ba:bc:a0:4e:c7:f4:aa:b1:ed:cb:39:7a:5c:2c:
76:53:a2:19:1d:af:e9:20:f1:38:f6:11:f8:e7:32:9d:3e:1b:
9c:35:1b:0e:38:3c:9c:74:a2:d5:b2:09:77:cb:31:0c:dc:8b:
81:54:f9:ad:ea:52:93:90:5e:00:58:94:14:14:43:32:ca:8d:
e4:82:8c:18:37:af:4b:2f:06:69:9a:f0:95:92:de:4a:d7:d0:
0c:56:dc:de:09:44:0a:df:dc:93:6e:e0:0a:40:b1:5f:bd:58:
ba:44:08:d1:95:cc:0a:9e:92:f2:90:3f:ce:b2:f8:57:e4:05:
50:25:a3:38:5b:b0:30:c2:e2:01:02:ae:ef:0e:de:09:0f:dc:
31:f4:a6:e0:81:1f:be:31:dd:e5:3d:85:b6:f3:59:5c:ed:21:
b8:03:7c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:32:34 2024 by rpki-client on console-ams.rpki-client.org