Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/fWPfVnLQwqTvtNii5Au0utvtkEY.roa
File: fWPfVnLQwqTvtNii5Au0utvtkEY.roa (raw, json)
Hash identifier: ohusy0OB8BNfyhxUY1m8ZiC6OxFfdMoVBvN7/4k/WJY=
Subject key identifier: 7D:63:DF:56:72:D0:C2:A4:EF:B4:D8:A2:E4:0B:B4:BA:DB:ED:90:46
Certificate issuer: /CN=19622650048107918adf1b22cdf087c8a834f79c
Certificate serial: 0185CEFF9F63B15658A984D35404D3D82D12
Authority key identifier: 19:62:26:50:04:81:07:91:8A:DF:1B:22:CD:F0:87:C8:A8:34:F7:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWImUASBB5GK3xsizfCHyKg095w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/fWPfVnLQwqTvtNii5Au0utvtkEY.roa
Signing time: Fri 20 Jan 2023 11:45:37 +0000
ROA not before: Fri 20 Jan 2023 11:45:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206170
IP address blocks: 86.106.25.0/24 maxlen: 24
86.107.103.0/24 maxlen: 24
188.66.62.0/24 maxlen: 24
188.66.63.0/24 maxlen: 24
188.66.60.0/24 maxlen: 24
188.66.61.0/24 maxlen: 24
195.85.54.0/24 maxlen: 24
2a0b:dc80::/29 maxlen: 29
2001:67c:750::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ce:ff:9f:63:b1:56:58:a9:84:d3:54:04:d3:d8:2d:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19622650048107918adf1b22cdf087c8a834f79c
Validity
Not Before: Jan 20 11:45:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d63df5672d0c2a4efb4d8a2e40bb4badbed9046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a2:6b:4c:12:c7:8f:fd:ea:3b:1a:b1:37:d0:
ab:ab:ce:27:a8:f8:a2:33:70:db:bf:79:f9:ee:45:
14:ef:32:21:7b:5d:53:34:1e:91:2e:05:07:b7:dc:
c0:9f:be:46:af:44:ae:dc:13:e5:a0:89:7e:09:cf:
af:6d:43:74:c6:d9:42:b6:ff:60:53:e8:b4:74:31:
bd:49:99:7d:c9:3c:53:8e:85:aa:9c:b0:92:af:d5:
66:04:ee:e9:8c:ba:01:54:f5:2f:50:9a:19:88:82:
ea:40:9e:9d:0f:92:14:db:0e:0d:8e:22:b0:83:28:
0f:f9:6b:0c:b0:7b:5f:a7:9a:9e:3b:28:74:6c:80:
db:7f:2a:a3:64:8f:19:7b:44:bb:d6:cf:2d:0d:08:
cf:94:d7:47:f8:78:be:b5:c2:58:f6:60:b1:1f:31:
e8:63:2e:9d:ff:1b:ac:ba:1b:14:5b:a2:ac:ee:48:
79:40:a3:57:f7:05:b4:53:cb:81:9b:be:e2:1d:04:
64:db:89:3d:f9:15:e4:c6:93:b7:3e:b3:9d:a9:d3:
3a:23:1b:39:09:d0:f3:cb:80:10:15:c7:55:1e:11:
bc:c5:56:64:b5:c3:bd:7b:36:44:6d:39:56:a7:ac:
f6:d1:83:57:c5:95:1f:3e:2e:1f:82:6e:41:45:02:
c9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:63:DF:56:72:D0:C2:A4:EF:B4:D8:A2:E4:0B:B4:BA:DB:ED:90:46
X509v3 Authority Key Identifier:
keyid:19:62:26:50:04:81:07:91:8A:DF:1B:22:CD:F0:87:C8:A8:34:F7:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWImUASBB5GK3xsizfCHyKg095w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/fWPfVnLQwqTvtNii5Au0utvtkEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.106.25.0/24
86.107.103.0/24
188.66.60.0/22
195.85.54.0/24
IPv6:
2001:67c:750::/48
2a0b:dc80::/29
Signature Algorithm: sha256WithRSAEncryption
b3:48:21:50:4d:c2:af:81:f8:10:c2:84:1a:ee:72:10:38:1f:
60:13:6e:78:46:54:6f:f8:a1:ee:ce:cc:a8:a1:d4:38:df:17:
7d:d0:31:ca:ee:cc:a2:44:d7:fa:ee:6c:fe:e6:26:dd:d8:fd:
37:67:96:23:74:95:d8:2b:7c:b3:c5:a8:1e:ba:1f:7b:84:4c:
b6:4c:9d:56:cf:f1:4b:27:f2:7b:22:60:e7:b3:fb:7c:7b:e2:
24:38:61:ae:b8:b7:11:27:cd:74:76:e7:93:88:40:f0:73:b3:
e5:88:c5:c0:28:68:ee:26:58:a4:8f:ff:dc:a0:01:a3:34:af:
aa:27:5a:15:61:83:e1:67:bd:09:c8:dc:d8:20:ed:f5:31:f0:
1c:45:15:20:63:f5:9d:f0:63:d2:9b:1a:a8:84:57:05:2e:16:
23:5f:92:2a:68:24:0c:8e:c8:b3:34:a5:b5:1e:cb:2d:2c:4e:
44:4c:fe:ee:c8:6a:7a:db:4f:d0:70:68:aa:8e:07:a2:38:65:
c9:96:db:1f:36:37:e8:d9:2b:f2:88:79:bb:fd:e3:80:3a:fb:
b0:57:32:60:32:56:18:37:1b:73:b8:d1:2b:88:c0:1c:85:50:
54:ed:ea:07:33:35:b0:00:c3:2c:a7:79:1d:74:9a:d0:20:fa:
7c:6d:39:63
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAYXO/59jsVZYqYTTVATT2C0SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NjIyNjUwMDQ4MTA3OTE4YWRmMWIyMmNkZjA4N2M4YTgz
NGY3OWMwHhcNMjMwMTIwMTE0NTM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDYzZGY1NjcyZDBjMmE0ZWZiNGQ4YTJlNDBiYjRiYWRiZWQ5MDQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6JrTBLHj/3qOxqxN9Crq84nqPii
M3Dbv3n57kUU7zIhe11TNB6RLgUHt9zAn75Gr0Su3BPloIl+Cc+vbUN0xtlCtv9g
U+i0dDG9SZl9yTxTjoWqnLCSr9VmBO7pjLoBVPUvUJoZiILqQJ6dD5IU2w4NjiKw
gygP+WsMsHtfp5qeOyh0bIDbfyqjZI8Ze0S71s8tDQjPlNdH+Hi+tcJY9mCxHzHo
Yy6d/xusuhsUW6Ks7kh5QKNX9wW0U8uBm77iHQRk24k9+RXkxpO3PrOdqdM6Ixs5
CdDzy4AQFcdVHhG8xVZktcO9ezZEbTlWp6z20YNXxZUfPi4fgm5BRQLJgwIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFH1j31Zy0MKk77TYouQLtLrb7ZBGMB8GA1UdIwQY
MBaAFBliJlAEgQeRit8bIs3wh8ioNPecMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1dJbVVBU0JCNUdLM3hzaXpmQ0h5S2cwOTV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9jNTAyYzEtZjMxNC00MGIxLWEwMjQt
OGQxMGZlZTU4NGZlLzEvZldQZlZuTFF3cVR2dE5paTVBdTB1dHZ0a0VZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9jNTAyYzEtZjMxNC00MGIxLWEwMjQtOGQxMGZlZTU4NGZl
LzEvR1dJbVVBU0JCNUdLM3hzaXpmQ0h5S2cwOTV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODAeBAIAATAYAwQAVmoZAwQA
VmtnAwQCvEI8AwQAw1U2MBYEAgACMBADBwAgAQZ8B1ADBQMqC9yAMA0GCSqGSIb3
DQEBCwUAA4IBAQCzSCFQTcKvgfgQwoQa7nIQOB9gE254RlRv+KHuzsyoodQ43xd9
0DHK7syiRNf67mz+5ibd2P03Z5YjdJXYK3yzxageuh97hEy2TJ1Wz/FLJ/J7ImDn
s/t8e+IkOGGuuLcRJ810dueTiEDwc7PliMXAKGjuJlikj//coAGjNK+qJ1oVYYPh
Z70JyNzYIO31MfAcRRUgY/Wd8GPSmxqohFcFLhYjX5IqaCQMjsizNKW1HsstLE5E
TP7uyGp620/QcGiqjgeiOGXJltsfNjfo2SvyiHm7/eOAOvuwVzJgMlYYNxtzuNEr
iMAchVBU7eoHMzWwAMMsp3kddJrQIPp8bTlj
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:08 2023 by rpki-client on console-ams.rpki-client.org