Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/CrVSheARq7_Lwl4E4E4VzmL2_Mw.roa
File: CrVSheARq7_Lwl4E4E4VzmL2_Mw.roa (raw, json)
Hash identifier: ujUwUItENtxFUo01sQxp+6KVwDFsZRnlSPKl6nWl7+M=
Subject key identifier: 0A:B5:52:85:E0:11:AB:BF:CB:C2:5E:04:E0:4E:15:CE:62:F6:FC:CC
Certificate issuer: /CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6
Certificate serial: 018607B5120FEDD8C90DEFD669A4CD5E14C1
Authority key identifier: 0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/CrVSheARq7_Lwl4E4E4VzmL2_Mw.roa
Signing time: Tue 31 Jan 2023 12:02:32 +0000
ROA not before: Tue 31 Jan 2023 12:02:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8849
IP address blocks: 88.210.36.0/23 maxlen: 24
185.140.210.0/24 maxlen: 24
185.140.211.0/24 maxlen: 24
2a06:f902:4000::/36 maxlen: 36
2a06:f901:4000::/36 maxlen: 36
2a06:f901:8000::/36 maxlen: 36
2a06:f901:c000::/36 maxlen: 36
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:07:b5:12:0f:ed:d8:c9:0d:ef:d6:69:a4:cd:5e:14:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6
Validity
Not Before: Jan 31 12:02:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ab55285e011abbfcbc25e04e04e15ce62f6fccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:df:c8:08:6e:60:02:87:76:39:30:e5:c6:67:
9b:a9:fa:3d:96:62:7b:ff:ec:6c:87:46:60:63:70:
93:d5:41:2e:c5:5e:c7:80:2b:ec:7e:d3:fa:68:10:
18:e4:64:8b:04:57:27:9a:ef:e4:c4:3e:6f:d3:d0:
40:c9:84:08:0f:91:17:cb:c5:cf:13:75:ba:8e:49:
cc:e0:09:13:c6:89:5b:e2:e2:9a:2b:99:f6:36:4a:
77:c2:da:45:de:17:e8:06:67:cd:fe:13:c3:53:69:
9c:94:e4:1b:54:98:22:36:b1:8a:b3:44:09:e1:6e:
d9:f1:13:85:22:d4:3b:e4:ba:c6:98:e4:13:45:76:
a0:64:6b:b9:e1:47:14:8c:fd:c9:29:8a:a8:2f:d8:
cb:e8:7d:e5:03:85:28:3e:3c:4b:71:08:fe:b3:a0:
64:d8:f9:28:37:7a:aa:a3:84:90:f2:00:db:c2:6f:
c2:9d:94:f7:e7:6b:03:74:a4:79:50:0f:ca:c8:6e:
c7:a0:23:39:49:a4:17:d8:41:50:d0:81:a2:74:c6:
79:55:6c:cd:5c:67:f9:20:81:4c:9f:ee:f3:33:6f:
7a:a7:cd:9b:2e:f5:f3:4d:2e:23:34:e9:63:fe:a8:
04:c1:24:be:13:3d:78:17:b0:d2:3c:f5:44:2a:94:
07:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:B5:52:85:E0:11:AB:BF:CB:C2:5E:04:E0:4E:15:CE:62:F6:FC:CC
X509v3 Authority Key Identifier:
keyid:0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/CrVSheARq7_Lwl4E4E4VzmL2_Mw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.210.36.0/23
185.140.210.0/23
IPv6:
2a06:f901:4000::/36
2a06:f901:8000::/36
2a06:f901:c000::/36
2a06:f902:4000::/36
Signature Algorithm: sha256WithRSAEncryption
83:82:a4:30:d9:4b:b6:ea:8f:f0:fa:2f:4a:22:36:27:26:0f:
94:f5:7b:61:58:e4:82:68:bd:d3:c6:b4:69:70:68:26:38:07:
19:69:0f:cc:50:d5:5d:60:1f:2f:db:16:e9:c0:f0:69:eb:24:
34:22:91:1f:8b:d3:25:ef:67:bc:99:0d:03:03:16:fe:4a:1f:
fe:29:ee:ac:11:94:0e:c5:cc:f2:e2:0d:c0:5c:47:aa:25:ec:
7b:96:b4:7f:ee:28:e8:5a:1f:5c:05:c4:23:c7:df:93:e5:f8:
08:78:7d:c5:0c:30:79:d7:9a:24:77:6a:bc:2b:bd:4b:b2:86:
7a:75:4c:99:e8:93:29:f3:66:a0:00:09:08:78:b6:4b:09:e0:
27:5d:5c:2b:94:d4:51:5b:84:be:fd:98:e8:54:1f:21:af:e6:
9a:44:6a:07:a7:f6:e7:35:9f:f1:98:06:20:61:cb:cc:8d:73:
eb:fb:c8:e1:1e:47:e4:e9:cc:d6:6d:5b:83:f5:cb:d5:2c:3c:
55:3f:4c:76:39:56:7e:b6:e1:0e:8c:be:ca:b8:be:75:84:7d:
70:67:d3:9d:e2:60:8c:b2:b0:a0:4c:d7:6f:d4:8d:c6:4d:d9:
06:b4:b2:73:7c:4a:ab:a4:32:65:87:e8:ab:aa:83:21:e5:7b:
6c:77:cb:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:04 2023 by rpki-client on console-ams.rpki-client.org