Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/iElvqVqP_y0hepT1DqwaT9-NyTk.roa
File: iElvqVqP_y0hepT1DqwaT9-NyTk.roa (raw, json)
Hash identifier: atEK9Gni/QbMDYH1PVKCCeiYbwh+giG25A27IpfC0XQ=
Subject key identifier: 88:49:6F:A9:5A:8F:FF:2D:21:7A:94:F5:0E:AC:1A:4F:DF:8D:C9:39
Certificate issuer: /CN=fae16b493d2a12897caf4757bb18a02eec2cde17
Certificate serial: 018C9621ABF4EA339F18849FAD00D20987E8
Authority key identifier: FA:E1:6B:49:3D:2A:12:89:7C:AF:47:57:BB:18:A0:2E:EC:2C:DE:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uFrST0qEol8r0dXuxigLuws3hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/iElvqVqP_y0hepT1DqwaT9-NyTk.roa
Signing time: Sat 23 Dec 2023 10:03:58 +0000
ROA not before: Sat 23 Dec 2023 10:03:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12322
IP address blocks: 83.152.0.0/13 maxlen: 15
88.120.0.0/13 maxlen: 13
213.36.0.0/16 maxlen: 18
91.160.0.0/12 maxlen: 12
82.142.0.0/18 maxlen: 18
83.214.0.0/16 maxlen: 16
212.62.128.0/18 maxlen: 18
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:96:21:ab:f4:ea:33:9f:18:84:9f:ad:00:d2:09:87:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fae16b493d2a12897caf4757bb18a02eec2cde17
Validity
Not Before: Dec 23 10:03:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=88496fa95a8fff2d217a94f50eac1a4fdf8dc939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f4:ef:f6:48:30:93:c6:0c:72:11:96:d8:b1:
26:78:8c:c1:21:2b:a2:a5:4e:fb:70:dd:69:17:33:
f5:ca:0d:76:27:16:7a:d0:e8:22:33:f1:3c:58:d3:
75:7b:73:89:50:85:79:c2:ac:a2:79:b2:f0:f4:1f:
bd:c2:92:48:4a:40:6f:7e:79:51:d9:76:98:a8:19:
ce:4f:6d:7d:2b:cc:f5:2d:01:1a:5d:90:68:2f:3f:
ea:37:2d:9b:db:5a:3d:23:f1:d9:36:e9:94:0f:07:
96:f4:24:03:39:ad:be:47:aa:f0:3f:85:2b:9b:58:
86:b4:37:64:19:4b:5c:17:a6:e6:5f:e9:5e:f5:ff:
7a:ad:79:43:b2:75:63:f3:e7:c2:8b:e0:9a:49:f3:
8b:a5:d8:af:aa:f2:43:c6:2e:d0:8f:69:b8:3d:a9:
83:cc:e1:3d:0d:75:89:53:82:ec:84:cc:d3:3f:41:
ba:63:17:bc:07:75:3c:9d:4b:15:2b:31:f9:98:73:
3e:ed:2b:78:b2:07:5b:76:8d:69:d3:5f:26:99:a0:
52:e2:c0:e3:77:05:09:1f:35:94:8b:0a:b3:eb:2f:
a8:c6:47:4c:24:bf:1d:61:c9:0b:62:db:f8:33:e8:
1a:be:c8:fe:f7:c8:73:36:de:c0:4f:ef:3f:5b:9d:
3c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:49:6F:A9:5A:8F:FF:2D:21:7A:94:F5:0E:AC:1A:4F:DF:8D:C9:39
X509v3 Authority Key Identifier:
keyid:FA:E1:6B:49:3D:2A:12:89:7C:AF:47:57:BB:18:A0:2E:EC:2C:DE:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uFrST0qEol8r0dXuxigLuws3hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/iElvqVqP_y0hepT1DqwaT9-NyTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.142.0.0/18
83.152.0.0/13
83.214.0.0/16
88.120.0.0/13
91.160.0.0/12
212.62.128.0/18
213.36.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6b:a1:86:61:d0:f1:df:e3:03:3a:16:d7:23:56:72:dc:87:81:
18:3a:55:68:59:ed:29:ee:73:a5:4d:72:c6:92:c2:bd:3f:5f:
d1:86:7e:21:84:cf:58:c7:0b:f5:20:77:91:3d:d2:23:3c:51:
38:6d:9d:ba:dd:b1:cb:f0:aa:8e:ee:88:71:b9:eb:d7:98:9b:
62:16:b5:07:39:90:d2:16:93:81:3d:1c:0b:f6:b1:a7:3c:ae:
9a:4f:e8:11:7d:94:54:55:cf:14:40:75:70:26:40:24:48:a6:
21:00:19:15:e4:f3:c5:77:6c:6c:41:c8:08:95:e1:cf:9c:62:
dd:07:a1:5e:25:30:46:63:94:08:96:92:b2:ef:67:c4:c8:f0:
95:85:e9:10:b0:ce:55:e9:c7:73:17:bb:ae:c0:d8:06:fc:c3:
6a:b8:b8:1e:45:b0:1c:b7:ee:db:b4:47:57:79:ca:d5:de:72:
28:f9:61:7c:05:3a:92:8a:09:d7:f1:eb:5a:a5:ee:b3:a7:ab:
2b:c9:53:ac:25:cf:bd:bb:da:59:aa:35:3a:8a:fb:aa:9a:aa:
08:34:07:00:00:4c:59:49:2b:34:00:4e:eb:07:4a:26:99:50:
91:62:fc:60:b0:09:ac:2b:28:1a:11:f0:6f:cc:7d:3b:07:2b:
24:48:fc:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:53:02 2024 by rpki-client on console-fra.rpki-client.org