Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/FWwUk3UeP64ht5-HWuV92og2psM.roa
File: FWwUk3UeP64ht5-HWuV92og2psM.roa (raw, json)
Hash identifier: b9XXIq1vYUOlF2afdVo0fuzZAzMJ4OGeVdoXxMgjAew=
Subject key identifier: 15:6C:14:93:75:1E:3F:AE:21:B7:9F:87:5A:E5:7D:DA:88:36:A6:C3
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 018573F19384A2A7702A41708EFE081D30A2
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/FWwUk3UeP64ht5-HWuV92og2psM.roa
Signing time: Mon 02 Jan 2023 19:24:49 +0000
ROA not before: Mon 02 Jan 2023 19:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34073
IP address blocks: 87.246.172.0/24 maxlen: 24
81.198.73.0/24 maxlen: 24
81.198.192.0/22 maxlen: 22
2a02:2330:b2::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:f1:93:84:a2:a7:70:2a:41:70:8e:fe:08:1d:30:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Jan 2 19:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=156c1493751e3fae21b79f875ae57dda8836a6c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0f:6c:c9:69:0d:da:c1:e2:8d:60:da:ae:4f:
13:a7:af:02:b1:a5:77:fb:d9:64:fc:d3:69:3f:3b:
ff:48:13:a2:64:80:33:2b:ae:be:7a:a1:14:a5:2c:
94:4e:40:4a:af:53:0e:21:de:c1:6b:c1:08:24:67:
36:1a:d9:2f:11:06:e5:ac:9d:d5:f6:0a:72:92:dd:
dd:b6:cb:7e:5c:3e:61:d0:6b:d9:ef:10:ee:a7:70:
aa:30:82:3b:4e:16:75:d6:e6:19:b7:74:9b:ad:c5:
9a:d1:3f:df:c0:e9:37:45:a4:65:47:f6:9b:fe:06:
85:c8:8f:64:c3:07:3b:a2:d7:ec:38:3b:67:bd:d7:
dc:7b:f2:6d:f7:e2:42:8d:d1:b7:10:d9:b6:e7:87:
fa:6d:b2:b8:69:82:fa:43:e1:a8:de:c1:52:0c:3e:
77:1a:40:b7:e3:35:59:be:58:62:bb:6f:d9:5b:e2:
23:b2:aa:f9:15:ac:70:a0:65:12:10:f8:21:8b:37:
13:b9:5c:3f:32:1d:9d:3e:2b:60:84:52:e9:40:d1:
f4:05:f5:55:cd:c3:36:46:07:6e:a5:98:a7:20:a6:
c7:9d:6d:e8:85:0a:77:80:a8:44:50:6f:32:1d:ec:
52:01:c6:98:37:5e:09:0a:85:a5:99:02:6d:14:e1:
76:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:6C:14:93:75:1E:3F:AE:21:B7:9F:87:5A:E5:7D:DA:88:36:A6:C3
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/FWwUk3UeP64ht5-HWuV92og2psM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.198.73.0/24
81.198.192.0/22
87.246.172.0/24
IPv6:
2a02:2330:b2::/48
Signature Algorithm: sha256WithRSAEncryption
3d:5d:12:6a:83:32:71:5c:8a:64:92:79:50:01:4b:e0:44:31:
89:35:71:e1:4e:40:fb:7e:b8:42:9a:fd:a0:62:5f:ef:e3:f8:
bc:cf:2a:62:63:00:cf:20:20:7c:6d:07:ea:a8:93:54:c7:21:
79:7d:de:98:8f:13:ed:93:8b:3e:1e:eb:0b:95:33:89:05:60:
48:85:dc:64:18:24:d6:b0:04:64:e7:92:ae:db:7e:d7:7b:81:
d2:43:af:b5:82:34:63:1a:e2:28:d7:e2:9e:d7:b2:7b:5a:ee:
86:97:40:61:61:9d:98:13:5e:4d:11:4c:58:75:47:58:85:d0:
7a:2d:c1:02:2b:7b:1a:ec:0d:c5:35:49:9b:09:86:42:d1:16:
53:c6:a7:52:c8:de:d0:3e:c0:78:7c:54:17:dd:fb:b6:c9:77:
43:c5:43:ee:01:81:e1:70:73:46:a7:a0:44:09:ab:4d:57:af:
02:d3:3f:71:0e:c5:3c:7b:38:eb:03:7e:0a:cc:df:62:85:c3:
e8:50:fe:26:c3:cf:9e:28:1e:86:08:f7:8a:2d:f3:77:8e:a2:
53:8c:17:11:b9:bc:60:4f:a6:9a:a4:41:ef:2c:2c:6b:3e:1d:
39:fb:f9:cf:1b:3d:ef:6c:ad:15:f3:d6:56:dd:47:d5:41:ae:
20:f7:43:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 30 08:51:39 2023 by rpki-client on console-ams.rpki-client.org