Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/fjJ7J9C3PWW1y2Mc3-xswDNpeJ8.roa
File: fjJ7J9C3PWW1y2Mc3-xswDNpeJ8.roa (raw, json)
Hash identifier: pAO/W5cceFxJ3smyWgXpP2h5mzImyZDyyNF54CIPZnk=
Subject key identifier: 7E:32:7B:27:D0:B7:3D:65:B5:CB:63:1C:DF:EC:6C:C0:33:69:78:9F
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018AD0C1F91D7AECD891BF3919DF77F3BD78
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/fjJ7J9C3PWW1y2Mc3-xswDNpeJ8.roa
Signing time: Tue 26 Sep 2023 09:11:27 +0000
ROA not before: Tue 26 Sep 2023 09:11:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 84.54.33.0/24 maxlen: 24
193.218.34.0/24 maxlen: 24
45.83.28.0/24 maxlen: 24
2a0b:64c5::/32 maxlen: 48
2a0b:64c7::/32 maxlen: 32
2a0b:64c4::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d0:c1:f9:1d:7a:ec:d8:91:bf:39:19:df:77:f3:bd:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Sep 26 09:11:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e327b27d0b73d65b5cb631cdfec6cc03369789f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ce:6e:1a:65:b3:48:4d:69:1b:32:84:db:ec:
b6:c0:5e:33:76:11:1f:45:fc:7b:1c:a5:b8:82:52:
3a:27:50:3f:cd:81:95:c3:52:e0:ed:8b:0f:4e:ea:
fb:c1:1d:39:19:4b:05:82:7a:22:34:3b:a8:35:78:
2c:95:3a:b5:b8:6f:e4:47:85:a5:8d:e3:ca:9f:b5:
09:49:8b:19:73:c4:2f:02:74:d3:c0:17:ee:d8:7f:
06:75:d8:1a:41:fc:90:7e:15:d5:58:99:63:e1:8d:
21:6c:c7:c8:6c:f0:3c:44:97:7d:b1:b1:33:60:c0:
ec:1f:9d:72:d1:9e:17:dc:f6:5f:a6:b1:c6:14:d9:
da:e3:a8:7b:9a:46:23:a7:89:08:70:b6:63:db:b7:
72:52:6d:45:e0:5b:5e:71:d5:ca:6b:90:32:5a:d4:
0c:2d:17:12:46:75:d2:21:6a:05:a9:65:c1:0c:a5:
90:a0:dc:2f:4c:72:c0:ee:52:73:c3:ab:a7:01:ff:
13:a3:42:d4:78:8a:a4:1e:7b:ff:ed:60:ad:a1:76:
85:75:ec:32:85:c9:a8:fd:15:2a:65:5d:20:75:1c:
28:08:6f:3b:6d:8e:a0:8a:d4:cd:c1:73:b0:7d:f9:
5d:bd:96:09:a1:f3:76:2f:df:71:10:6c:64:cd:35:
5e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:32:7B:27:D0:B7:3D:65:B5:CB:63:1C:DF:EC:6C:C0:33:69:78:9F
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/fjJ7J9C3PWW1y2Mc3-xswDNpeJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.28.0/24
84.54.33.0/24
193.218.34.0/24
IPv6:
2a0b:64c4::/31
2a0b:64c7::/32
Signature Algorithm: sha256WithRSAEncryption
69:16:50:8e:af:ab:c1:47:2a:84:31:1f:19:4f:9b:94:f1:c6:
20:38:37:cc:c8:e4:0b:ab:a3:67:14:36:53:02:f8:54:af:e7:
80:10:8f:44:d8:21:41:d5:e8:d2:89:c4:7e:42:3f:4d:1b:fb:
be:da:27:bc:68:78:19:ab:22:17:14:e1:08:30:48:aa:6c:3e:
de:e0:2e:4e:70:2e:4e:a7:26:a9:a3:77:9c:01:76:01:95:82:
10:1c:21:9e:5e:da:38:59:cd:ab:e3:dc:d0:30:ba:3e:de:9a:
3f:f3:03:c4:45:2b:65:73:7a:fa:97:06:22:2f:ac:56:f4:a1:
b1:c3:d2:18:0c:09:30:f7:b6:8e:3f:94:11:4e:a5:16:fe:64:
ee:1d:17:6a:2e:11:05:e2:83:51:90:c0:c9:1b:05:26:c9:8c:
33:95:d6:8d:bf:e1:bf:14:ab:17:6b:ae:76:02:82:18:86:0b:
85:5d:a3:7f:29:b9:25:ec:85:93:cc:a1:06:b4:6c:ab:f8:55:
3b:30:fd:ef:63:11:17:59:96:bc:fa:49:d1:22:26:1a:5f:b9:
6b:50:cd:83:fb:e9:fe:6c:2e:6e:3d:f3:dc:77:70:30:17:99:
b3:17:19:10:49:30:77:2c:df:72:1e:01:f3:25:90:21:fb:e9:
5a:4d:f4:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:15:28 2024 by rpki-client on console-fra.rpki-client.org