Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/1-aFcgKI_5cNeGTJB8La1oekqm18.roa
File: 1-aFcgKI_5cNeGTJB8La1oekqm18.roa (raw, json)
Hash identifier: N+m3ydrEJEplrNDKAmnjQMn2GKbsn+DWdlPulvpP46A=
Subject key identifier: F9:A1:5C:80:A2:3F:E5:C3:5E:19:32:41:F0:B6:B5:A1:E9:2A:9B:5F
Certificate issuer: /CN=bfabf5a474afe7212331670e831e119da38f284f
Certificate serial: 01857169B81E99258A2255D9AB2E35EE84CC
Authority key identifier: BF:AB:F5:A4:74:AF:E7:21:23:31:67:0E:83:1E:11:9D:A3:8F:28:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v6v1pHSv5yEjMWcOgx4RnaOPKE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/1-aFcgKI_5cNeGTJB8La1oekqm18.roa
Signing time: Mon 02 Jan 2023 07:37:11 +0000
ROA not before: Mon 02 Jan 2023 07:37:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21232
IP address blocks: 185.41.132.0/22 maxlen: 22
185.108.244.0/22 maxlen: 22
213.188.32.0/19 maxlen: 19
185.70.68.0/22 maxlen: 22
185.110.184.0/22 maxlen: 22
185.119.36.0/22 maxlen: 22
62.32.0.0/19 maxlen: 19
185.41.76.0/22 maxlen: 22
82.192.224.0/19 maxlen: 19
185.110.88.0/22 maxlen: 22
77.74.56.0/21 maxlen: 21
213.160.32.0/19 maxlen: 19
79.142.128.0/20 maxlen: 20
195.216.64.0/19 maxlen: 19
185.132.16.0/22 maxlen: 22
185.64.184.0/22 maxlen: 22
185.110.72.0/22 maxlen: 22
185.31.248.0/22 maxlen: 22
185.45.236.0/22 maxlen: 22
93.184.16.0/20 maxlen: 20
2a02:5c0::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:69:b8:1e:99:25:8a:22:55:d9:ab:2e:35:ee:84:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfabf5a474afe7212331670e831e119da38f284f
Validity
Not Before: Jan 2 07:37:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f9a15c80a23fe5c35e193241f0b6b5a1e92a9b5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:15:4d:49:ee:9c:85:75:d4:dc:46:53:9e:8e:
00:fa:d7:fc:6c:a3:33:85:45:8a:0d:c0:d0:29:4d:
4a:f5:56:e5:da:d8:1d:ce:e5:af:ae:3f:9c:d5:79:
0f:71:e5:da:3a:62:23:63:74:59:60:60:aa:a1:df:
ea:4b:a3:58:2c:cd:94:c3:47:de:0e:af:1e:44:a0:
45:46:a1:ca:ff:3a:80:87:f6:62:5b:32:f7:41:7f:
eb:83:7e:38:91:7f:3f:45:c3:8b:25:56:d8:1d:b3:
40:e3:16:22:ce:05:e5:49:9c:24:d1:b8:3d:2c:39:
82:c6:6f:f0:6f:e6:96:6f:db:b9:e2:11:b9:e3:2f:
51:8d:cd:db:fd:85:dc:b6:c7:ce:0d:41:35:c5:55:
ae:31:7f:d5:fa:30:98:07:d9:d3:87:f9:d2:f5:a2:
f7:73:69:88:49:f1:b3:c2:ea:74:39:bf:2a:9f:64:
51:67:85:96:39:9d:34:c7:e0:31:10:6b:fb:ef:a9:
02:a2:d4:c6:9b:fc:f0:fe:7a:44:1c:02:e8:aa:54:
0b:a4:4c:4a:6a:e2:09:44:5e:2b:29:1c:02:79:42:
c9:e1:e5:e5:7a:fc:74:ab:f9:ce:31:cf:33:8b:c6:
f1:97:3f:b2:3b:bc:d5:ab:3c:41:2e:65:a3:3c:ea:
a5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:A1:5C:80:A2:3F:E5:C3:5E:19:32:41:F0:B6:B5:A1:E9:2A:9B:5F
X509v3 Authority Key Identifier:
keyid:BF:AB:F5:A4:74:AF:E7:21:23:31:67:0E:83:1E:11:9D:A3:8F:28:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6v1pHSv5yEjMWcOgx4RnaOPKE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/1-aFcgKI_5cNeGTJB8La1oekqm18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/v6v1pHSv5yEjMWcOgx4RnaOPKE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.32.0.0/19
77.74.56.0/21
79.142.128.0/20
82.192.224.0/19
93.184.16.0/20
185.31.248.0/22
185.41.76.0/22
185.41.132.0/22
185.45.236.0/22
185.64.184.0/22
185.70.68.0/22
185.108.244.0/22
185.110.72.0/22
185.110.88.0/22
185.110.184.0/22
185.119.36.0/22
185.132.16.0/22
195.216.64.0/19
213.160.32.0/19
213.188.32.0/19
IPv6:
2a02:5c0::/32
Signature Algorithm: sha256WithRSAEncryption
6c:8a:d0:ed:27:d1:c7:97:5d:3e:92:14:fd:41:06:be:1c:4a:
2f:cb:68:ff:ba:e0:42:09:b9:9f:90:10:4c:ef:86:6a:1b:b9:
9d:99:b4:7b:aa:76:65:17:41:fa:ad:29:0d:a9:35:af:6a:80:
61:f5:f1:d3:3c:33:e2:7c:11:1f:17:f6:cf:e8:c6:ac:60:7e:
ce:09:cc:00:34:50:c5:53:25:42:96:be:14:0e:cf:19:b4:4a:
5f:e6:a1:f3:be:df:29:3c:e3:f1:16:0d:fe:5c:59:ab:44:26:
0e:1d:f9:d5:47:03:66:ae:33:df:40:cb:e7:c8:0e:bf:58:e3:
a1:1c:7d:3e:dd:87:96:dc:8e:1c:56:50:00:6c:d7:a4:a2:88:
68:d2:dc:ef:0e:e7:62:3a:64:af:3d:d1:41:93:34:e9:f9:29:
e4:93:fd:6f:18:a6:45:11:da:1d:9b:65:39:f3:a9:e4:f8:d2:
63:5f:26:d7:ff:73:27:8f:c4:77:3d:89:68:0e:8b:c1:59:6b:
b6:89:e1:9b:8c:ed:4e:70:11:88:5f:8e:70:ad:11:71:05:ff:
1e:b3:f5:0f:8f:0c:f0:b3:98:47:40:15:26:8a:80:e2:b0:95:
70:3d:6d:8d:93:c3:cc:8b:2e:4d:57:53:13:18:39:4c:71:e4:
54:a6:19:65
-----BEGIN CERTIFICATE-----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Generated at Thu Aug 3 17:05:09 2023 by rpki-client on console-fra.rpki-client.org