Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/P7AfRZy93o-uHlp4ioGywfVBrIk.roa
File: P7AfRZy93o-uHlp4ioGywfVBrIk.roa (raw, json)
Hash identifier: 0gJ3dWRD+Z1T+3ESSi6V+RkvZw4uo5KY3n2n1BcTfQo=
Subject key identifier: 3F:B0:1F:45:9C:BD:DE:8F:AE:1E:5A:78:8A:81:B2:C1:F5:41:AC:89
Certificate issuer: /CN=8ef645770d2914402d6c95b8daf51f7ffe12772b
Certificate serial: 0188B3CFDA790884BB3442337F6D8F3E707D
Authority key identifier: 8E:F6:45:77:0D:29:14:40:2D:6C:95:B8:DA:F5:1F:7F:FE:12:77:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jvZFdw0pFEAtbJW42vUff_4Sdys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/P7AfRZy93o-uHlp4ioGywfVBrIk.roa
Signing time: Tue 13 Jun 2023 08:12:03 +0000
ROA not before: Tue 13 Jun 2023 08:12:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16001
IP address blocks: 194.76.19.0/24 maxlen: 24
80.250.128.0/20 maxlen: 20
185.255.64.0/22 maxlen: 22
2a00:ecc0::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b3:cf:da:79:08:84:bb:34:42:33:7f:6d:8f:3e:70:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ef645770d2914402d6c95b8daf51f7ffe12772b
Validity
Not Before: Jun 13 08:12:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3fb01f459cbdde8fae1e5a788a81b2c1f541ac89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:69:f7:ca:e7:15:dc:4d:f8:81:1b:a9:c0:e0:
01:70:30:df:ad:4d:37:85:b1:2a:99:ad:3c:ba:a4:
8c:ad:f0:aa:57:9c:3d:60:94:15:70:de:49:eb:87:
fc:85:0e:57:42:22:c5:80:70:38:9c:57:0f:ab:22:
d6:7a:ad:1c:6d:89:58:48:b6:fe:92:79:19:44:c7:
87:00:75:88:4f:d0:53:25:e1:12:4e:4c:ba:b6:3a:
f6:d3:33:0b:bb:6c:f0:3f:ae:dc:ff:3d:4b:f5:f2:
3a:ba:02:ac:44:39:c9:91:2a:94:05:b6:33:36:55:
3b:70:b2:5f:5d:12:c0:47:43:2a:6e:e8:bd:fd:6d:
d9:35:0f:71:c1:e0:d5:62:e9:8b:d6:4a:48:5d:a1:
b8:8e:4b:99:6a:93:48:a4:3b:a2:5c:d7:87:94:cd:
b7:b8:8b:41:bf:9f:e1:39:6f:01:09:db:15:9b:15:
6b:82:f2:f2:40:30:c4:11:ac:5f:90:53:bb:14:f6:
d3:b3:5f:1a:6a:90:02:27:4e:f8:22:76:1a:56:a4:
cb:71:b1:bd:ec:6a:b1:79:40:b5:78:bb:d2:85:aa:
8f:72:cd:65:b9:a8:00:5a:86:38:53:6f:67:83:c8:
ea:87:b4:e9:b6:d2:39:9b:9c:ff:17:d9:22:e1:aa:
a7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B0:1F:45:9C:BD:DE:8F:AE:1E:5A:78:8A:81:B2:C1:F5:41:AC:89
X509v3 Authority Key Identifier:
keyid:8E:F6:45:77:0D:29:14:40:2D:6C:95:B8:DA:F5:1F:7F:FE:12:77:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvZFdw0pFEAtbJW42vUff_4Sdys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/P7AfRZy93o-uHlp4ioGywfVBrIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.250.128.0/20
185.255.64.0/22
194.76.19.0/24
IPv6:
2a00:ecc0::/32
Signature Algorithm: sha256WithRSAEncryption
4c:f1:d2:4f:ee:81:f4:54:24:9f:c9:18:8d:86:c7:aa:c4:e7:
de:68:00:04:87:a8:a0:a4:e0:c7:83:0f:df:54:9d:68:88:48:
e5:0e:80:a4:04:68:0e:5a:c0:ed:4d:d9:7e:45:3b:83:4d:1f:
e5:d5:6a:57:d9:5d:93:b3:1b:f2:1e:5b:63:97:23:de:58:c2:
fa:98:46:a1:a8:dc:79:1b:8e:4c:c6:9b:88:63:1b:cc:59:8b:
7a:83:22:ef:df:11:f3:f0:11:e3:f1:ad:5b:92:df:5a:2f:65:
2f:bb:0f:c2:fb:45:64:b4:e6:ff:a4:da:75:24:cc:15:bf:27:
d3:ba:2d:0a:a2:34:5b:82:c9:e2:84:64:2c:b4:0e:7e:63:9a:
49:25:c6:62:df:bd:c1:60:d7:c4:a1:85:49:ab:b0:35:13:b0:
f0:72:91:88:21:a7:c2:9b:5e:76:a8:15:bf:96:18:29:ec:f9:
98:d6:e4:72:99:f5:48:ea:7f:53:b7:69:3c:8f:d2:b9:76:8f:
77:f6:48:d8:f8:5f:3f:69:f4:47:55:91:56:a8:00:96:8e:67:
d6:58:ba:8c:9e:30:39:70:d3:89:d0:b1:e5:00:f8:18:cd:39:
47:5e:9d:2b:57:42:6e:a6:8b:6e:85:65:bb:61:ee:d2:3c:d9:
c6:65:e2:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:22:25 2024 by rpki-client on console-ams.rpki-client.org