Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/7vRWgbR_jxrobHMy3NPGlx6XJ-c.roa
File: 7vRWgbR_jxrobHMy3NPGlx6XJ-c.roa (raw, json)
Hash identifier: SBo7oXhej0fWQfS4j++tCniqH2CTg5tcI5HD7786YV0=
Subject key identifier: EE:F4:56:81:B4:7F:8F:1A:E8:6C:73:32:DC:D3:C6:97:1E:97:27:E7
Certificate issuer: /CN=dd1daecd30aeb74652bbdda5dad9676ce488aa49
Certificate serial: 01874BA98979933CB45DE9558528E7FEF27F
Authority key identifier: DD:1D:AE:CD:30:AE:B7:46:52:BB:DD:A5:DA:D9:67:6C:E4:88:AA:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/7vRWgbR_jxrobHMy3NPGlx6XJ-c.roa
Signing time: Tue 04 Apr 2023 09:46:54 +0000
ROA not before: Tue 04 Apr 2023 09:46:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28907
IP address blocks: 193.178.144.0/23 maxlen: 23
193.178.146.0/23 maxlen: 23
77.87.192.0/21 maxlen: 21
195.39.197.0/24 maxlen: 24
195.39.196.0/24 maxlen: 24
195.39.196.0/23 maxlen: 23
89.184.64.0/19 maxlen: 24
89.184.72.0/21 maxlen: 21
89.184.88.0/21 maxlen: 21
78.27.192.0/19 maxlen: 24
5.149.120.0/21 maxlen: 21
2a02:2278:235::/48 maxlen: 48
2a02:2278::/32 maxlen: 32
2a02:2278:220::/48 maxlen: 48
2a02:2278:234::/48 maxlen: 48
2a02:2278:204::/48 maxlen: 48
2a02:2278:208::/48 maxlen: 48
2a02:2278:236::/48 maxlen: 48
2a02:2278:221::/48 maxlen: 48
2a02:2278:237::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4b:a9:89:79:93:3c:b4:5d:e9:55:85:28:e7:fe:f2:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd1daecd30aeb74652bbdda5dad9676ce488aa49
Validity
Not Before: Apr 4 09:46:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eef45681b47f8f1ae86c7332dcd3c6971e9727e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d1:b1:23:d3:77:31:24:7a:4a:9d:32:73:de:
1b:8e:3d:c1:68:d2:6d:15:6b:31:a3:e3:06:f9:8f:
29:56:17:79:d0:fb:f8:7c:0e:7a:83:47:27:eb:0b:
9e:6a:b5:39:b5:1a:c6:15:00:f8:3a:7f:08:35:07:
a5:cd:33:f8:54:bb:21:72:e6:69:96:c6:27:ad:5e:
a7:52:13:c3:3b:a9:bb:cc:86:5d:bf:d0:20:cb:e8:
8c:f7:13:48:a7:dd:8c:92:a6:eb:72:32:20:b1:9c:
02:72:44:aa:b6:20:b9:7e:54:e8:3d:c0:7e:7e:d2:
f4:7c:3d:48:18:79:71:ea:c4:47:f1:70:2e:ef:43:
de:2f:30:d0:71:ca:09:ba:d8:54:7f:8b:0e:45:e5:
cd:cb:88:b1:8b:4a:ad:60:de:07:b9:3a:b0:77:cb:
9a:f3:2b:24:2f:aa:30:78:a0:f1:a8:f0:39:0a:32:
2a:0f:22:e5:49:e7:12:50:c3:17:c1:3b:23:bf:3b:
5d:8f:6b:fa:40:e4:a5:d5:b0:0c:0b:ce:d6:54:54:
a0:e7:28:82:00:d5:06:bb:d5:25:64:dd:a8:7e:aa:
fe:00:1c:74:38:19:3c:d0:e1:26:8b:32:30:a8:e0:
2f:8a:46:e4:1a:be:58:f7:bc:25:1c:0f:8e:3b:1a:
d2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F4:56:81:B4:7F:8F:1A:E8:6C:73:32:DC:D3:C6:97:1E:97:27:E7
X509v3 Authority Key Identifier:
keyid:DD:1D:AE:CD:30:AE:B7:46:52:BB:DD:A5:DA:D9:67:6C:E4:88:AA:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/7vRWgbR_jxrobHMy3NPGlx6XJ-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.120.0/21
77.87.192.0/21
78.27.192.0/19
89.184.64.0/19
193.178.144.0/22
195.39.196.0/23
IPv6:
2a02:2278::/32
Signature Algorithm: sha256WithRSAEncryption
dd:12:b4:20:da:a6:47:ab:ac:c0:2d:ba:ae:07:36:78:7a:bc:
ea:cb:c9:01:78:34:35:fe:6f:33:e1:b6:fe:8a:48:6f:d8:d8:
4c:a9:7f:bd:6b:51:e7:66:1e:ac:3f:19:21:5b:32:8e:c8:7d:
5e:85:bd:79:43:2f:a0:8d:7c:76:e2:fa:00:71:9d:f4:6a:71:
96:1b:83:e9:7d:5b:9c:23:71:72:f8:74:bd:dd:23:45:6e:65:
86:81:64:49:a3:27:fb:69:03:65:a1:81:19:41:6a:d2:bf:dc:
5c:37:5c:e9:e5:dd:15:76:c1:21:35:75:7a:2d:60:9c:a9:2b:
7a:17:00:8a:c3:f9:d4:db:f9:90:f0:4c:9c:86:f3:0e:16:0d:
d1:6c:43:aa:9a:21:88:b9:95:34:b7:d9:6a:39:de:5d:20:1a:
c9:6a:1d:ce:2d:89:a5:89:36:78:6b:6c:ce:7a:b0:13:9f:80:
3c:ca:4d:92:f7:29:ad:15:d7:e6:d8:2d:2f:68:a0:0a:87:cb:
ff:b3:7b:5f:cc:2c:c6:f7:a5:9c:ad:0c:bb:14:02:0f:4e:ec:
64:cb:48:4b:34:fe:de:79:7f:dd:57:2d:fc:47:74:aa:bb:10:
a8:7e:d5:98:c4:1b:f2:ea:63:72:e0:71:4f:11:88:4e:bb:a1:
3b:84:4c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:35 2023 by rpki-client on console-ams.rpki-client.org