Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/PxwsAssqLfAHj8xykXD2Erz7OBQ.roa
File: PxwsAssqLfAHj8xykXD2Erz7OBQ.roa (raw, json)
Hash identifier: 7KMvgG3+GsVKmS+12650PDiLRBMy1psYTRvHNSHwsVE=
Subject key identifier: 3F:1C:2C:02:CB:2A:2D:F0:07:8F:CC:72:91:70:F6:12:BC:FB:38:14
Certificate issuer: /CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6
Certificate serial: 0189689F70F2E6A232B1BDB2733176E11998
Authority key identifier: 0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/PxwsAssqLfAHj8xykXD2Erz7OBQ.roa
Signing time: Tue 18 Jul 2023 10:50:26 +0000
ROA not before: Tue 18 Jul 2023 10:50:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8849
IP address blocks: 91.192.81.0/24 maxlen: 24
89.40.226.0/24 maxlen: 24
88.210.36.0/23 maxlen: 24
185.140.210.0/24 maxlen: 24
185.140.211.0/24 maxlen: 24
2a06:f902:4000::/36 maxlen: 36
2a06:f901:4000::/36 maxlen: 36
2a06:f901:8000::/36 maxlen: 36
2a06:f901:c000::/36 maxlen: 36
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:68:9f:70:f2:e6:a2:32:b1:bd:b2:73:31:76:e1:19:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6
Validity
Not Before: Jul 18 10:50:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f1c2c02cb2a2df0078fcc729170f612bcfb3814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:13:8b:e3:d8:2b:68:bd:b8:e0:ec:1c:8f:f8:
49:6a:4e:15:5b:cb:25:e0:ee:c6:8b:22:e6:ee:d3:
59:ed:ae:a2:3e:ac:6a:a9:be:8d:e8:7f:8f:4c:9d:
73:19:e9:2a:32:fe:e7:e3:de:24:15:84:5a:3d:35:
c4:b0:85:ef:42:f9:21:bc:2a:4a:76:a9:66:df:91:
f1:dc:ee:79:71:ac:ff:d5:10:93:b6:7c:be:d1:0d:
e7:90:7d:c1:69:33:b0:aa:0f:3a:85:2b:42:21:08:
ca:15:7a:d1:b4:07:e7:a1:43:65:59:df:e2:b7:86:
26:9e:df:28:3a:6f:36:84:95:5a:74:41:f5:b8:e4:
da:da:86:a7:d3:14:8e:27:5c:ee:93:d8:e4:52:ce:
d8:ca:5e:17:3c:b5:12:04:0c:40:3d:3f:d1:ff:68:
1b:f6:8e:df:97:e4:cc:a7:5b:41:3d:76:1b:3c:d2:
0b:21:a6:a4:e6:47:c6:45:91:8c:b5:ae:08:1d:47:
65:8c:e3:71:d5:de:b8:d6:ee:ba:61:c9:a7:ac:d7:
e0:2a:3b:33:eb:f8:70:c6:6c:15:e9:a9:d6:49:ba:
26:7d:63:77:87:b5:21:2b:81:97:b9:31:b2:5a:ba:
83:bb:42:eb:63:d7:bb:4d:18:3e:59:3b:99:ef:5f:
c4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:1C:2C:02:CB:2A:2D:F0:07:8F:CC:72:91:70:F6:12:BC:FB:38:14
X509v3 Authority Key Identifier:
keyid:0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/PxwsAssqLfAHj8xykXD2Erz7OBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.210.36.0/23
89.40.226.0/24
91.192.81.0/24
185.140.210.0/23
IPv6:
2a06:f901:4000::/36
2a06:f901:8000::/36
2a06:f901:c000::/36
2a06:f902:4000::/36
Signature Algorithm: sha256WithRSAEncryption
7f:76:cb:0c:e4:12:41:60:28:fb:e4:cc:56:68:79:f2:26:b9:
68:d0:d7:82:b2:3b:32:c1:4c:46:55:4d:cf:fa:7e:b4:ca:de:
01:79:f4:0d:dd:83:ff:e3:b4:81:f2:82:69:64:24:29:6b:e6:
45:b5:98:4d:61:e5:cc:6d:e8:02:e3:b8:eb:70:de:dd:fc:97:
9d:4c:74:86:b4:1b:b9:02:16:1f:ab:45:0c:8f:db:88:4d:b3:
ef:fd:b6:ab:6a:6f:d6:c6:16:47:1b:d3:59:44:f4:05:10:f7:
ff:20:52:86:1a:15:d6:3e:1c:eb:95:59:04:55:09:d5:80:69:
50:34:43:98:21:59:09:57:b2:e4:d8:3a:7d:e7:1b:53:16:5d:
f1:41:4a:75:3f:29:57:b8:13:c8:c2:2e:ee:e9:21:e4:d1:24:
ef:68:75:96:9f:0e:22:c5:9f:4c:52:12:b0:39:26:85:c0:8a:
3e:6e:8b:be:45:f5:07:94:ed:92:e7:ef:4a:d6:7d:b7:32:b0:
c6:27:59:84:ba:a5:c2:c9:34:d4:e5:68:0d:90:7a:b6:0b:19:
8a:22:9f:f3:32:46:46:3b:03:b3:89:94:e5:2d:86:b6:94:21:
b7:fe:19:0a:e5:b2:42:52:b4:e1:7c:7e:87:33:33:16:56:b1:
66:b4:e4:4e
-----BEGIN CERTIFICATE-----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Generated at Thu Aug 24 21:17:40 2023 by rpki-client on console-ams.rpki-client.org