Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/7aO1aBgZtVRqs44AYQ8_AZRHCyk.roa
File: 7aO1aBgZtVRqs44AYQ8_AZRHCyk.roa (raw, json)
Hash identifier: pkLCfZB+xAuYD7ijlva21WwTnCH1Tyoo3oESTFpdnQI=
Subject key identifier: ED:A3:B5:68:18:19:B5:54:6A:B3:8E:00:61:0F:3F:01:94:47:0B:29
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 0189116DD55C2381A8E4579C0129B549C3C0
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/7aO1aBgZtVRqs44AYQ8_AZRHCyk.roa
Signing time: Sat 01 Jul 2023 12:29:18 +0000
ROA not before: Sat 01 Jul 2023 12:29:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40676
IP address blocks: 94.26.89.0/24 maxlen: 24
93.152.210.0/24 maxlen: 24
93.152.212.0/24 maxlen: 24
93.152.218.0/24 maxlen: 24
93.152.226.0/24 maxlen: 24
93.152.222.0/24 maxlen: 24
93.152.227.0/24 maxlen: 24
212.102.105.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:11:6d:d5:5c:23:81:a8:e4:57:9c:01:29:b5:49:c3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Jul 1 12:29:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eda3b5681819b5546ab38e00610f3f0194470b29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:96:4e:77:7a:8b:8d:e3:1d:83:60:d5:61:49:
3c:1f:aa:98:b9:ef:b0:1e:d5:16:b7:ba:4f:09:33:
e9:02:e3:2a:55:57:1a:de:9b:9a:23:5f:a7:16:eb:
6f:d6:1c:f7:19:4c:78:93:f5:99:44:81:1f:f9:fd:
98:74:41:16:79:7d:77:aa:87:13:9b:55:59:76:2f:
74:b7:ab:c6:f9:69:a5:ea:16:19:67:0d:19:45:33:
77:ef:cf:ec:66:a4:2d:21:7f:e0:2c:35:ad:00:7b:
00:fa:9c:67:03:11:22:ba:8b:d2:7f:06:f8:5d:4b:
79:61:62:68:c9:1d:88:a0:05:fa:d0:7f:9c:0c:4a:
1b:4c:da:03:e5:2f:70:9e:af:9a:12:db:ba:a4:08:
df:b9:bd:c4:ea:2f:d4:aa:22:93:e9:6a:ff:a3:cf:
c6:d8:0f:36:a6:23:47:e6:f8:72:b8:51:8c:3b:30:
21:8e:c2:18:19:4d:6c:fc:a0:e9:a3:4c:ac:b0:bf:
ec:65:7b:1d:9b:21:fa:82:f4:e6:b1:3c:8f:59:86:
5a:77:7e:43:0f:83:52:25:b4:d2:b0:ba:bb:ff:1a:
8e:ae:9e:09:49:38:04:73:2b:2e:5d:85:d3:43:5d:
42:a9:3c:14:82:50:ed:30:dd:eb:24:52:12:4e:44:
8b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A3:B5:68:18:19:B5:54:6A:B3:8E:00:61:0F:3F:01:94:47:0B:29
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/7aO1aBgZtVRqs44AYQ8_AZRHCyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.152.210.0/24
93.152.212.0/24
93.152.218.0/24
93.152.222.0/24
93.152.226.0/23
94.26.89.0/24
212.102.105.0/24
Signature Algorithm: sha256WithRSAEncryption
84:c8:c0:b1:88:ec:09:7d:38:2f:46:8f:fe:93:77:9a:35:ee:
ac:e0:f6:8f:4c:3c:c1:46:62:43:54:47:32:bd:97:3b:50:9c:
02:cf:b1:6b:33:90:5d:22:cd:0b:11:ef:1d:6b:5d:58:94:4d:
c3:ae:0b:03:24:50:99:66:6c:22:b1:74:c5:db:43:9b:aa:cb:
d7:d3:39:27:9a:d0:c6:84:38:d2:89:e5:91:e2:fb:c2:4d:7c:
c2:d9:45:96:d5:7c:37:a3:62:4b:e7:0e:24:1b:25:12:5e:6c:
5f:b1:2f:7e:7b:0e:1c:bd:ee:c2:49:0f:bc:77:8b:a6:9e:40:
e4:9d:d2:1e:5f:25:6c:29:f4:bf:97:c0:c1:1c:b8:72:a9:61:
42:e1:1d:12:fe:b2:37:0b:9b:1e:fc:49:a9:26:21:93:e7:be:
f7:e7:85:40:fc:df:79:ab:6a:ec:ea:1a:35:fa:49:d0:85:45:
2a:bd:eb:88:01:a9:68:9a:b7:81:af:30:eb:a0:86:ab:c7:51:
54:13:d5:05:2b:9b:1f:e2:b1:b1:bc:b4:4a:b7:82:e6:66:ab:
a5:5c:6c:1a:19:af:30:8f:fe:0d:ed:8c:11:4e:ea:76:52:c4:
4d:75:54:6f:ba:88:75:32:89:aa:0f:87:e0:a3:df:e0:0a:a6:
23:fb:2a:7f
-----BEGIN CERTIFICATE-----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Generated at Wed Jul 26 10:04:32 2023 by rpki-client on console-fra.rpki-client.org