Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/_D15JX0qg6pOfx4r9S_LqxQLleE.roa
File: _D15JX0qg6pOfx4r9S_LqxQLleE.roa (raw, json)
Hash identifier: faB7crKUrM/YmQoHg0dC/sT3aB5qBMd4QvKGe8VSoT8=
Subject key identifier: FC:3D:79:25:7D:2A:83:AA:4E:7F:1E:2B:F5:2F:CB:AB:14:0B:95:E1
Certificate issuer: /CN=eb1dc00fd2c1e3eaafceccc1b4ba1f8fd0a4a98c
Certificate serial: 0185715544096CC70270FA05D10E08FD2817
Authority key identifier: EB:1D:C0:0F:D2:C1:E3:EA:AF:CE:CC:C1:B4:BA:1F:8F:D0:A4:A9:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6x3AD9LB4-qvzszBtLofj9CkqYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/_D15JX0qg6pOfx4r9S_LqxQLleE.roa
Signing time: Mon 02 Jan 2023 07:14:51 +0000
ROA not before: Mon 02 Jan 2023 07:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62167
IP address blocks: 185.44.163.0/24 maxlen: 24
185.44.160.0/24 maxlen: 24
185.44.160.0/22 maxlen: 22
185.44.162.0/24 maxlen: 24
185.44.161.0/24 maxlen: 24
89.107.29.0/24 maxlen: 24
89.107.28.0/24 maxlen: 24
89.107.28.0/22 maxlen: 22
185.163.83.0/24 maxlen: 24
185.163.82.0/23 maxlen: 23
185.163.81.0/24 maxlen: 24
185.163.80.0/22 maxlen: 22
185.163.80.0/24 maxlen: 24
2a01:7520:5::/48 maxlen: 48
2a01:7520::/32 maxlen: 32
2a01:7520::/48 maxlen: 48
2a01:7520:4::/48 maxlen: 48
2a01:7520:2::/48 maxlen: 48
2a01:7520:8::/48 maxlen: 48
2a01:7520:3::/48 maxlen: 48
2a01:7520:6::/48 maxlen: 48
2a01:7520:1::/48 maxlen: 48
2a01:7520:7::/48 maxlen: 48
2a0b:5800::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:55:44:09:6c:c7:02:70:fa:05:d1:0e:08:fd:28:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb1dc00fd2c1e3eaafceccc1b4ba1f8fd0a4a98c
Validity
Not Before: Jan 2 07:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc3d79257d2a83aa4e7f1e2bf52fcbab140b95e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d9:f2:74:ae:5d:28:2b:f4:31:02:16:79:bf:
0e:75:c5:41:07:21:79:57:84:cc:ff:bf:5a:a9:15:
06:cc:19:0f:1b:6e:58:65:b2:b7:48:b1:09:2c:f8:
ec:f2:bc:4f:8b:59:c7:9b:ab:6c:33:8b:6b:2a:78:
33:5b:b8:1c:88:de:f7:46:ac:2e:7b:c9:a3:83:01:
ac:e0:30:81:b9:c4:60:34:9f:0d:7a:d3:b8:d0:6a:
be:29:2d:5f:03:93:9a:00:ef:a8:9a:6d:49:23:4f:
51:f4:2b:3f:a5:ac:89:4a:df:8c:f8:89:c2:09:7f:
6a:b9:dd:54:2d:cd:8c:26:90:4e:91:c9:6c:99:51:
8a:18:b5:1e:67:ee:fe:df:c5:fe:5b:4a:b6:42:10:
b5:32:54:52:41:45:a9:25:9f:2f:86:c2:3f:26:c4:
b4:dd:78:33:f2:7e:c4:b6:b7:65:a9:5c:77:49:4a:
c9:cf:6d:bf:8a:06:7c:aa:9a:73:78:cd:7f:bc:ca:
fb:0a:74:ed:3c:18:cc:ff:10:52:13:47:a1:fe:4f:
73:9f:09:b3:fc:6e:b8:5f:6a:52:3a:66:5f:15:f1:
57:50:ae:8f:56:3c:9c:2a:10:c8:db:33:8a:15:f2:
21:2b:42:58:4c:ad:99:14:2a:80:61:67:d2:fe:a1:
d8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:3D:79:25:7D:2A:83:AA:4E:7F:1E:2B:F5:2F:CB:AB:14:0B:95:E1
X509v3 Authority Key Identifier:
keyid:EB:1D:C0:0F:D2:C1:E3:EA:AF:CE:CC:C1:B4:BA:1F:8F:D0:A4:A9:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6x3AD9LB4-qvzszBtLofj9CkqYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/_D15JX0qg6pOfx4r9S_LqxQLleE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.107.28.0/22
185.44.160.0/22
185.163.80.0/22
IPv6:
2a01:7520::/32
2a0b:5800::/32
Signature Algorithm: sha256WithRSAEncryption
17:91:47:01:a6:be:b9:58:42:48:e1:5f:31:9b:d7:cb:b8:41:
3b:35:73:14:a3:e5:15:ad:e6:56:7f:97:1b:b1:a6:55:25:e0:
59:5e:8b:9e:93:89:e7:08:d5:d1:a2:38:72:dc:29:15:a6:e4:
dc:ef:4b:43:0c:af:ee:62:ad:cb:09:54:96:6b:4f:81:0c:4e:
8f:49:df:aa:54:59:0c:bb:21:eb:1d:cc:cd:4d:8f:3d:79:39:
82:43:51:0a:1e:3d:0a:21:2b:c6:57:fb:68:43:ad:0c:f6:58:
6f:d3:4e:3b:11:5c:97:a0:f7:fe:e2:d5:e6:58:da:f9:d3:44:
59:6c:32:f3:f5:27:05:ef:2a:cc:82:6b:c6:69:54:6f:9f:34:
78:24:1b:42:10:3a:25:7a:a8:01:5a:b0:c3:46:d5:28:82:ca:
da:4c:0b:48:b0:e4:b6:10:5c:93:65:a4:fa:4b:3c:ff:bf:e1:
e2:50:28:03:48:00:bf:81:9d:f1:f4:15:3e:08:41:48:9d:94:
5a:a5:1d:54:61:cf:20:fe:04:e7:8c:b5:c9:c5:60:99:ff:34:
0a:5d:e7:4d:54:17:19:8c:58:30:37:59:cb:93:da:b7:df:d0:
ea:be:ed:42:d3:6a:b6:88:70:b5:ae:60:66:36:69:7d:cc:2d:
05:5c:6b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:15:36 2024 by rpki-client on console-fra.rpki-client.org