Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/1-vJoPwbXoaZER6Ndq4U0OGIZCmc.roa
File: 1-vJoPwbXoaZER6Ndq4U0OGIZCmc.roa (raw, json)
Hash identifier: XIN/gmatHYeDrvzS3wQkOoWgfvd1Azj0Q1g4/dA5gfU=
Subject key identifier: FA:F2:68:3F:06:D7:A1:A6:44:47:A3:5D:AB:85:34:38:62:19:0A:67
Certificate issuer: /CN=13a0f7143ffa22113442dc8589ee1352ebe3daa3
Certificate serial: 01864F24B3DA548C724C4A8F61B9EB9D10DD
Authority key identifier: 13:A0:F7:14:3F:FA:22:11:34:42:DC:85:89:EE:13:52:EB:E3:DA:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E6D3FD_6IhE0QtyFie4TUuvj2qM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/1-vJoPwbXoaZER6Ndq4U0OGIZCmc.roa
Signing time: Tue 14 Feb 2023 08:57:30 +0000
ROA not before: Tue 14 Feb 2023 08:57:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50889
IP address blocks: 185.136.71.0/24 maxlen: 24
185.136.69.0/24 maxlen: 24
185.136.70.0/24 maxlen: 24
77.111.250.0/24 maxlen: 24
77.111.251.0/24 maxlen: 24
77.111.248.0/24 maxlen: 24
77.111.249.0/24 maxlen: 24
80.84.166.0/24 maxlen: 24
80.84.160.0/24 maxlen: 24
80.84.164.0/24 maxlen: 24
80.84.165.0/24 maxlen: 24
80.84.163.0/24 maxlen: 24
80.84.161.0/24 maxlen: 24
80.84.162.0/24 maxlen: 24
80.84.167.0/24 maxlen: 24
80.84.171.0/24 maxlen: 24
80.84.172.0/24 maxlen: 24
80.84.170.0/24 maxlen: 24
80.84.168.0/24 maxlen: 24
80.84.169.0/24 maxlen: 24
80.84.174.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4f:24:b3:da:54:8c:72:4c:4a:8f:61:b9:eb:9d:10:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13a0f7143ffa22113442dc8589ee1352ebe3daa3
Validity
Not Before: Feb 14 08:57:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=faf2683f06d7a1a64447a35dab85343862190a67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ed:84:2d:30:f4:3e:38:78:56:c5:b0:4c:c3:
aa:2a:64:36:af:7d:0d:9a:c4:83:cf:61:7f:88:36:
a0:25:4b:ce:f4:9b:41:5a:3e:62:4c:9b:e0:48:7b:
7d:f7:44:17:38:a9:3a:03:0b:db:f9:ca:d3:18:6a:
fa:4f:3e:bd:2f:0c:ac:bb:f1:54:f6:86:07:62:92:
cf:0f:18:24:82:41:21:9b:b8:1d:09:aa:59:3e:1d:
73:0f:46:02:81:5b:fa:81:0d:6d:e5:49:34:43:c1:
15:10:16:ff:c9:24:e0:32:b7:d6:73:ed:d3:39:eb:
d4:51:dc:e1:52:b4:da:3b:1f:7d:f2:06:34:e6:e0:
2c:25:82:05:9a:bb:8a:2b:4f:07:48:5b:91:07:bd:
0d:be:43:28:7f:e5:29:91:fc:49:e2:0d:b8:4d:cf:
3a:8b:6d:8a:60:2b:f7:bb:c7:7e:62:f5:1a:fe:95:
9c:3f:fc:15:6a:58:e0:80:94:0c:4d:99:af:46:fc:
0e:f2:14:36:e4:7a:8b:c9:b5:f1:48:11:11:cf:86:
b4:09:cd:5d:13:ef:88:38:0a:41:a0:46:5c:4b:be:
4b:08:48:a1:79:e8:10:4f:23:e9:4b:28:ed:a3:f2:
2d:44:4a:58:33:6f:0f:c5:03:71:73:72:42:84:1a:
0f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F2:68:3F:06:D7:A1:A6:44:47:A3:5D:AB:85:34:38:62:19:0A:67
X509v3 Authority Key Identifier:
keyid:13:A0:F7:14:3F:FA:22:11:34:42:DC:85:89:EE:13:52:EB:E3:DA:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E6D3FD_6IhE0QtyFie4TUuvj2qM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/1-vJoPwbXoaZER6Ndq4U0OGIZCmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.248.0/22
80.84.160.0-80.84.172.255
80.84.174.0/24
185.136.69.0-185.136.71.255
Signature Algorithm: sha256WithRSAEncryption
71:c2:e1:36:3a:c8:9b:fa:35:d5:5d:0f:77:94:04:e9:06:f8:
7e:7b:7c:3a:90:e4:c4:c5:7e:9f:09:ae:cb:81:e0:86:b7:e7:
f2:a6:cf:69:27:ed:59:10:01:c8:82:bc:51:bd:7a:25:33:6e:
0b:e2:65:88:7a:5f:26:be:98:b1:a3:72:14:8c:bc:e6:6c:6d:
6c:90:52:b3:cc:bd:2b:0e:ee:77:47:6e:06:ba:f3:79:83:e1:
b9:c9:56:3b:62:cc:02:d5:83:e0:83:e0:51:f3:a2:0e:f8:c1:
75:d6:19:f2:c1:86:2d:50:91:0a:e0:12:67:45:12:65:c3:3f:
f6:78:34:af:f9:56:4b:e5:3c:54:d0:f8:58:d6:51:fd:b1:ae:
0f:9d:03:09:1e:57:80:6b:f6:b9:90:9d:97:66:f7:c5:df:28:
0e:b5:d7:06:5d:3f:1d:6e:fa:46:c2:f4:5d:a9:ed:54:24:ad:
e3:1e:96:e8:a7:09:5b:91:d5:25:79:a3:d1:44:d3:ba:8b:a8:
a9:35:fc:18:38:c6:1b:01:f8:d1:fc:cc:25:aa:4e:2d:31:10:
49:1a:0b:44:40:02:a3:fa:27:80:64:26:0e:1f:20:0e:2f:b5:
17:a2:4f:a1:a1:a2:db:05:b8:9c:9f:0c:6c:01:44:bf:03:3a:
8d:0b:71:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:50 2023 by rpki-client on console-ams.rpki-client.org