Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/a6-fe_eSyTdXAjYh_pJiD3zDj2Y.roa
File: a6-fe_eSyTdXAjYh_pJiD3zDj2Y.roa (raw, json)
Hash identifier: vBpN0eoF8nPaFSNG8nzIdiapa7GQLPu6LkqsPVZJqrY=
Subject key identifier: 6B:AF:9F:7B:F7:92:C9:37:57:02:36:21:FE:92:62:0F:7C:C3:8F:66
Certificate issuer: /CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
Certificate serial: 01857094F29569BC21FBB906819FFB3FF381
Authority key identifier: 88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/a6-fe_eSyTdXAjYh_pJiD3zDj2Y.roa
Signing time: Mon 02 Jan 2023 03:44:47 +0000
ROA not before: Mon 02 Jan 2023 03:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50810
IP address blocks: 93.117.176.0/20 maxlen: 22
93.119.208.0/20 maxlen: 22
188.213.192.0/21 maxlen: 21
188.212.240.0/21 maxlen: 21
37.98.114.0/24 maxlen: 24
188.211.0.0/20 maxlen: 20
94.101.248.0/21 maxlen: 21
178.131.0.0/16 maxlen: 22
37.98.64.0/18 maxlen: 22
62.102.128.0/20 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:94:f2:95:69:bc:21:fb:b9:06:81:9f:fb:3f:f3:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
Validity
Not Before: Jan 2 03:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6baf9f7bf792c93757023621fe92620f7cc38f66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a9:12:d5:5e:3f:5c:78:13:b2:6c:cf:f7:f8:
39:ef:65:c6:0b:8e:d4:d7:28:80:c6:7e:b0:a1:54:
b2:34:10:e7:04:bc:cf:f7:89:18:1a:d4:af:15:f0:
d0:fc:70:d4:2c:40:36:18:85:a0:ae:b9:e0:28:72:
af:14:eb:2d:60:4b:f2:4c:84:63:c3:9e:61:fb:fe:
dd:13:df:3b:d7:8b:12:0b:96:a2:48:e4:5a:94:a0:
5a:7c:a8:cb:e4:3d:19:21:c9:2f:f4:45:7d:10:61:
b4:04:58:86:35:fd:dd:2a:1c:ab:2e:03:54:f7:45:
e4:20:fd:6e:57:7b:3c:48:c2:02:48:43:73:62:61:
c5:89:24:07:4d:61:28:39:42:41:77:b4:df:f6:7d:
04:8b:89:f1:33:f6:92:ba:26:81:ed:77:2e:af:43:
91:cf:89:54:93:df:ec:ae:84:cd:86:80:1a:0b:30:
8d:cc:67:ac:64:28:5a:e0:66:45:68:1c:c1:82:16:
0f:08:5a:1b:90:70:70:bb:76:c2:b4:8f:32:fc:b4:
ad:28:66:d0:ce:c2:ff:22:c6:3b:ab:2d:76:5c:14:
07:d9:0a:82:62:7f:5b:81:17:d5:c0:47:d4:a2:78:
f1:e5:7d:0a:fb:c0:60:19:56:a0:71:48:11:48:8d:
ef:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:AF:9F:7B:F7:92:C9:37:57:02:36:21:FE:92:62:0F:7C:C3:8F:66
X509v3 Authority Key Identifier:
keyid:88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/a6-fe_eSyTdXAjYh_pJiD3zDj2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.64.0/18
62.102.128.0/20
93.117.176.0/20
93.119.208.0/20
94.101.248.0/21
178.131.0.0/16
188.211.0.0/20
188.212.240.0/21
188.213.192.0/21
Signature Algorithm: sha256WithRSAEncryption
21:6a:fb:47:f2:4b:fc:b0:1d:f5:e5:37:a9:10:d2:52:1a:bb:
fa:89:46:68:d2:f0:87:4f:0a:26:9c:8b:e1:48:c3:11:06:fc:
0b:b1:1c:e2:f3:f3:4d:fd:5e:71:bf:55:e5:ef:9e:97:71:a7:
70:c0:e4:eb:ea:72:57:8d:46:d2:0d:43:c1:ba:d0:17:db:3e:
f6:25:95:c7:9b:53:dd:9f:6d:1d:de:13:14:08:f0:75:d9:5a:
c4:6f:d0:90:65:28:e9:9a:ff:bb:9c:f7:e9:1f:15:e9:15:fc:
f6:24:50:fd:a6:78:05:ca:b4:44:cc:56:69:bb:d6:ac:4f:47:
90:6e:5f:47:d1:41:e0:0c:6c:1f:01:74:49:d5:bd:f7:49:4f:
aa:ee:2e:ec:57:0d:20:d4:36:9a:e8:1f:93:16:4a:de:cf:b0:
a2:53:67:e7:07:4b:9e:92:ee:46:4c:e3:db:20:66:93:76:f0:
cf:01:55:7f:a3:e6:2e:17:da:d2:df:01:0c:a6:ad:e2:1c:66:
9e:fd:53:3e:74:b3:bf:aa:e4:c5:52:ba:22:6e:1e:7f:38:8e:
ba:b0:53:da:0c:72:08:5f:97:7c:e3:31:33:cd:3f:42:b7:ab:
32:6f:9e:24:f0:69:02:9e:4f:f6:5f:73:e9:cb:33:84:b5:f7:
53:22:a9:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:47 2023 by rpki-client on console-fra.rpki-client.org