Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/6fbbed-871f-485b-ad1a-46269d17e9f1/1/1-0E_YQ8rtfzuXhoD1OFBMogJ7yU.roa
File: 1-0E_YQ8rtfzuXhoD1OFBMogJ7yU.roa (raw, json)
Hash identifier: RmFsi7nxbe16PZ/rEA70YAd7a1NuBzi+BRyHCs7+Mb0=
Subject key identifier: FB:41:3F:61:0F:2B:B5:FC:EE:5E:1A:03:D4:E1:41:32:88:09:EF:25
Certificate issuer: /CN=faf814df8575986dd904a98687583c138768a114
Certificate serial: 018775D1922C62E513DC1785AAA0B2E9CB31
Authority key identifier: FA:F8:14:DF:85:75:98:6D:D9:04:A9:86:87:58:3C:13:87:68:A1:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vgU34V1mG3ZBKmGh1g8E4dooRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/6fbbed-871f-485b-ad1a-46269d17e9f1/1/1-0E_YQ8rtfzuXhoD1OFBMogJ7yU.roa
Signing time: Wed 12 Apr 2023 14:14:41 +0000
ROA not before: Wed 12 Apr 2023 14:14:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21217
IP address blocks: 185.254.152.0/22 maxlen: 22
185.254.152.0/24 maxlen: 24
185.247.8.0/22 maxlen: 22
80.80.224.0/20 maxlen: 20
185.169.92.0/22 maxlen: 22
2001:40c0::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:75:d1:92:2c:62:e5:13:dc:17:85:aa:a0:b2:e9:cb:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf814df8575986dd904a98687583c138768a114
Validity
Not Before: Apr 12 14:14:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb413f610f2bb5fcee5e1a03d4e141328809ef25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ec:57:19:15:f8:0d:fe:73:a9:e5:bd:f0:e4:
0e:2a:32:d0:23:2d:20:45:8a:16:19:ec:86:7e:1b:
1f:22:8c:fe:22:b6:4b:2e:ff:69:1c:65:01:6b:a7:
d8:25:37:b5:83:aa:4c:f3:07:94:49:0a:7c:ed:00:
6d:fb:48:eb:e5:19:e8:3c:a6:ad:35:ec:40:47:24:
7e:29:23:c2:d7:f4:b2:96:82:c8:71:86:e1:31:89:
e8:93:59:7a:c1:4a:a1:a9:48:15:68:77:8d:44:e8:
17:ea:bb:e7:88:f4:06:de:98:fd:15:9b:a2:96:26:
02:61:20:57:38:ac:dd:91:41:0b:61:f1:c3:51:c2:
6e:a5:25:84:bc:30:93:10:88:6c:7d:1c:a0:5d:e3:
67:56:fc:2c:9c:23:4b:24:4d:95:30:24:7d:55:3f:
2f:66:30:f4:c9:0c:dd:92:d4:bb:42:0f:5c:2c:0e:
38:3b:a2:d5:3e:47:f2:f8:e8:4a:03:63:fd:c3:d8:
98:b8:0c:c0:7e:0c:5f:2a:a5:a5:23:01:92:e3:eb:
a5:18:9b:ae:ef:48:b2:f4:7c:28:cf:e7:6d:53:0c:
a2:f6:f1:c1:45:07:a8:a5:8d:23:dc:c3:f4:d6:7e:
5a:40:f2:44:5c:b0:f8:37:54:5d:a9:ad:96:db:77:
b5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:41:3F:61:0F:2B:B5:FC:EE:5E:1A:03:D4:E1:41:32:88:09:EF:25
X509v3 Authority Key Identifier:
keyid:FA:F8:14:DF:85:75:98:6D:D9:04:A9:86:87:58:3C:13:87:68:A1:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vgU34V1mG3ZBKmGh1g8E4dooRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/6fbbed-871f-485b-ad1a-46269d17e9f1/1/1-0E_YQ8rtfzuXhoD1OFBMogJ7yU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/6fbbed-871f-485b-ad1a-46269d17e9f1/1/1-vgU34V1mG3ZBKmGh1g8E4dooRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.80.224.0/20
185.169.92.0/22
185.247.8.0/22
185.254.152.0/22
IPv6:
2001:40c0::/48
Signature Algorithm: sha256WithRSAEncryption
dc:43:2e:fd:60:54:5a:17:28:03:bf:9f:9c:87:25:09:ab:10:
dd:1e:ec:f4:f7:a6:19:64:25:5e:9a:b6:99:ba:51:1e:6f:dd:
ea:38:84:cc:8f:64:76:18:cd:3f:44:c2:dc:3f:ab:38:a5:72:
74:02:e1:28:2e:4a:d0:72:50:e9:f7:e2:93:a2:fa:cd:be:10:
0d:54:9d:62:90:01:d9:a6:53:6b:66:3a:36:8c:ea:f8:6e:18:
f6:a3:a0:aa:14:4c:ab:59:9f:d5:29:54:87:05:3c:be:33:10:
d6:22:f9:85:81:b3:91:37:bb:c8:2f:3f:ac:ef:0b:28:6a:15:
67:e9:76:8f:6b:b8:0d:20:cf:65:41:f2:1a:5f:a4:a4:d6:cd:
bd:9b:2c:be:23:74:d1:ab:d3:0a:18:43:5c:17:65:68:19:7b:
74:a3:dc:b4:ce:4c:e4:86:d4:01:68:07:0e:d8:65:c5:8d:01:
04:61:11:6e:7c:55:66:f9:82:c1:9f:79:c3:08:f1:2b:37:aa:
75:ba:9e:1a:48:cd:62:14:a9:c3:8c:00:3e:08:5f:0c:63:f1:
ed:90:be:02:36:51:5a:1b:e7:f2:d5:6e:ac:4b:50:da:71:9e:
ed:d5:36:eb:a0:35:06:4e:20:48:b5:18:a6:f3:4e:05:52:e7:
fe:8b:6b:99
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgISAYd10ZIsYuUT3BeFqqCy6csxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhZjgxNGRmODU3NTk4NmRkOTA0YTk4Njg3NTgzYzEzODc2
OGExMTQwHhcNMjMwNDEyMTQxNDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYjQxM2Y2MTBmMmJiNWZjZWU1ZTFhMDNkNGUxNDEzMjg4MDllZjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoexXGRX4Df5zqeW98OQOKjLQIy0g
RYoWGeyGfhsfIoz+IrZLLv9pHGUBa6fYJTe1g6pM8weUSQp87QBt+0jr5RnoPKat
NexARyR+KSPC1/SyloLIcYbhMYnok1l6wUqhqUgVaHeNROgX6rvniPQG3pj9FZui
liYCYSBXOKzdkUELYfHDUcJupSWEvDCTEIhsfRygXeNnVvwsnCNLJE2VMCR9VT8v
ZjD0yQzdktS7Qg9cLA44O6LVPkfy+OhKA2P9w9iYuAzAfgxfKqWlIwGS4+ulGJuu
70iy9Hwoz+dtUwyi9vHBRQeopY0j3MP01n5aQPJEXLD4N1Rdqa2W23e17QIDAQAB
o4ICLzCCAiswHQYDVR0OBBYEFPtBP2EPK7X87l4aA9ThQTKICe8lMB8GA1UdIwQY
MBaAFPr4FN+FdZht2QSphodYPBOHaKEUMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS12Z1UzNFYxbUczWkJLbUdoMWc4RTRkb29SUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWEvNmZiYmVkLTg3MWYtNDg1Yi1hZDFh
LTQ2MjY5ZDE3ZTlmMS8xLzEtMEVfWVE4cnRmenVYaG9EMU9GQk1vZ0o3eVUucm9h
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2FhLzZmYmJlZC04NzFmLTQ4NWItYWQxYS00NjI2OWQxN2U5
ZjEvMS8xLXZnVTM0VjFtRzNaQkttR2gxZzhFNGRvb1JRLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAeBAIAATAYAwQEUFDg
AwQCualcAwQCufcIAwQCuf6YMA8EAgACMAkDBwAgAUDAAAAwDQYJKoZIhvcNAQEL
BQADggEBANxDLv1gVFoXKAO/n5yHJQmrEN0e7PT3phlkJV6atpm6UR5v3eo4hMyP
ZHYYzT9Ewtw/qzilcnQC4SguStByUOn34pOi+s2+EA1UnWKQAdmmU2tmOjaM6vhu
GPajoKoUTKtZn9UpVIcFPL4zENYi+YWBs5E3u8gvP6zvCyhqFWfpdo9ruA0gz2VB
8hpfpKTWzb2bLL4jdNGr0woYQ1wXZWgZe3Sj3LTOTOSG1AFoBw7YZcWNAQRhEW58
VWb5gsGfecMI8Ss3qnW6nhpIzWIUqcOMAD4IXwxj8e2QvgI2UVob5/LVbqxLUNpx
nu3VNuugNQZOIEi1GKbzTgVS5/6La5k=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:00 2023 by rpki-client on console-fra.rpki-client.org