Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/7jVSKL_3Yg1NQ9-DcbkwIsfu-p0.roa
File: 7jVSKL_3Yg1NQ9-DcbkwIsfu-p0.roa (raw, json)
Hash identifier: TOeAmnEkGuDLw6dPzfA6IY6B5677rIxrlzq+nW5Z5H8=
Subject key identifier: EE:35:52:28:BF:F7:62:0D:4D:43:DF:83:71:B9:30:22:C7:EE:FA:9D
Certificate issuer: /CN=126c660b30f5692b2b16e289b24901c518fda520
Certificate serial: 018CC584693E488F3CAC1DD24DB31754DE32
Authority key identifier: 12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/7jVSKL_3Yg1NQ9-DcbkwIsfu-p0.roa
Signing time: Mon 01 Jan 2024 14:53:58 +0000
ROA not before: Mon 01 Jan 2024 14:53:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5650
IP address blocks: 193.187.168.0/22 maxlen: 24
185.220.28.0/22 maxlen: 24
194.39.68.0/22 maxlen: 24
80.254.236.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:84:69:3e:48:8f:3c:ac:1d:d2:4d:b3:17:54:de:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=126c660b30f5692b2b16e289b24901c518fda520
Validity
Not Before: Jan 1 14:53:58 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ee355228bff7620d4d43df8371b93022c7eefa9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2c:8b:25:6b:a6:20:7a:27:7d:8d:7d:aa:17:
90:a0:86:2c:e7:6a:88:9c:25:9a:10:d2:87:13:9a:
82:8f:ac:e5:70:c3:77:9f:ac:df:16:4f:13:1c:4f:
a4:9c:ff:ac:0e:62:03:1b:cc:b6:48:b9:a6:be:61:
30:e6:3b:75:0d:24:34:7a:39:9d:01:dc:72:b7:07:
6a:cf:a7:2a:8e:e2:72:63:9d:78:b4:bb:0c:00:db:
c7:24:dd:76:61:7c:c9:bf:05:be:6f:aa:aa:80:29:
9f:9c:4a:fd:48:1b:cc:31:25:01:34:26:3a:d8:22:
6a:8b:46:f1:f2:6d:c7:b0:0d:98:83:72:d0:8c:8b:
66:76:e2:65:63:56:ec:1d:ed:c4:5a:11:1d:b6:fd:
69:39:8f:56:56:81:4a:b6:3a:19:72:19:e9:dd:0a:
48:ee:70:c5:6d:fc:69:4e:39:a1:40:2b:18:5d:2a:
c9:d9:64:4b:f3:b6:d7:0c:a7:a5:96:ee:f2:3c:d7:
fe:71:98:a5:02:60:7f:b7:b4:60:b0:fd:ed:21:c6:
bc:4f:4e:65:e1:ce:19:ca:80:3d:b6:c8:89:87:29:
dc:54:2e:46:29:9d:ed:27:c0:54:36:d7:5e:4b:c4:
3f:eb:56:7c:7b:45:a7:6f:e3:3c:f2:df:7d:23:4b:
1e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:35:52:28:BF:F7:62:0D:4D:43:DF:83:71:B9:30:22:C7:EE:FA:9D
X509v3 Authority Key Identifier:
keyid:12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/7jVSKL_3Yg1NQ9-DcbkwIsfu-p0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.254.236.0/22
185.220.28.0/22
193.187.168.0/22
194.39.68.0/22
Signature Algorithm: sha256WithRSAEncryption
72:c3:40:18:98:d4:b7:90:d2:12:8a:df:15:7f:03:df:71:46:
a1:3a:9f:cd:99:bd:f7:1b:b4:0e:d3:2f:c7:08:cd:b1:38:25:
ea:20:42:b2:7e:15:a3:53:dc:55:55:1f:8d:d5:f1:41:48:45:
94:f6:37:dc:55:96:be:f8:32:cb:44:2d:09:df:72:6a:ef:1c:
78:06:04:a0:91:7e:e4:82:dc:9e:f2:10:64:86:4e:86:a5:37:
1e:b0:37:52:02:01:a1:9d:c3:00:53:90:59:19:31:12:f3:7d:
fa:cf:d7:d4:e4:f6:e7:e3:58:4f:20:f6:29:d8:1b:db:0a:ec:
f1:4d:5c:5d:bc:c7:ec:fd:39:07:77:e4:e7:86:bb:0b:ca:e5:
12:3c:ba:2e:4a:14:98:22:7e:10:81:81:76:17:8a:02:dc:aa:
16:bf:85:62:5d:82:0b:44:e7:ae:6a:f3:a3:cd:83:61:b3:2e:
3b:7a:10:49:f5:f7:15:17:63:8f:a4:4e:a2:7f:91:ca:9b:a8:
0e:4b:4e:b6:e3:5c:8c:df:de:f8:32:eb:5e:2e:6b:a9:ae:89:
1d:01:0e:81:1a:5f:56:a7:5f:d5:53:eb:48:79:2e:c8:6a:b9:
fe:43:bb:3a:52:f6:70:fa:9a:e5:a5:10:4b:47:5d:1f:35:ba:
ea:7d:a3:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:10:15 2024 by rpki-client on console-ams.rpki-client.org