Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/87OoVsxgX4wbmUOANoTTDUyU9_0.roa
File: 87OoVsxgX4wbmUOANoTTDUyU9_0.roa (raw, json)
Hash identifier: BM/fmxM9H68UtMp37F2/v7FScGqwtWduUVJ1P3Lvyj8=
Subject key identifier: F3:B3:A8:56:CC:60:5F:8C:1B:99:43:80:36:84:D3:0D:4C:94:F7:FD
Certificate issuer: /CN=df8877f3c55b528e1a29db3d79920656f0c66aeb
Certificate serial: 0185703967C4DCD24ECFA225E547965672DA
Authority key identifier: DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/87OoVsxgX4wbmUOANoTTDUyU9_0.roa
Signing time: Mon 02 Jan 2023 02:04:48 +0000
ROA not before: Mon 02 Jan 2023 02:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21183
IP address blocks: 217.73.132.0/24 maxlen: 24
217.73.131.0/24 maxlen: 24
217.73.130.0/24 maxlen: 24
217.73.128.0/20 maxlen: 20
217.73.129.0/24 maxlen: 24
217.73.128.0/24 maxlen: 24
217.73.136.0/24 maxlen: 24
217.73.135.0/24 maxlen: 24
217.73.133.0/24 maxlen: 24
217.73.139.0/24 maxlen: 24
217.73.138.0/24 maxlen: 24
217.73.137.0/24 maxlen: 24
217.73.143.0/24 maxlen: 24
217.73.142.0/24 maxlen: 24
217.73.141.0/24 maxlen: 24
109.69.2.0/24 maxlen: 24
109.69.1.0/24 maxlen: 24
109.69.0.0/24 maxlen: 24
109.69.0.0/21 maxlen: 21
109.69.4.0/23 maxlen: 23
109.69.3.0/24 maxlen: 24
109.69.6.0/24 maxlen: 24
109.69.5.0/24 maxlen: 24
109.69.7.0/24 maxlen: 24
185.62.174.0/23 maxlen: 23
80.78.64.0/20 maxlen: 20
2a04:eb40::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:67:c4:dc:d2:4e:cf:a2:25:e5:47:96:56:72:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df8877f3c55b528e1a29db3d79920656f0c66aeb
Validity
Not Before: Jan 2 02:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f3b3a856cc605f8c1b9943803684d30d4c94f7fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b6:e2:95:dc:57:0b:10:df:d9:9e:57:d1:39:
0c:4f:21:7c:2f:40:86:7a:fc:ae:71:5f:38:0a:78:
6d:af:eb:f3:0d:c1:0a:73:cf:10:91:6d:99:35:2c:
0f:c6:d5:0b:18:49:13:b8:4e:bd:c4:fd:e8:ff:1a:
1b:cd:39:ad:aa:59:da:3b:61:e9:c0:f0:18:48:13:
2d:4b:2b:ab:e5:a1:e6:c5:f3:86:aa:ff:36:bb:be:
18:68:3e:10:f9:16:64:a2:b4:d7:84:1f:ae:ad:0a:
59:bd:ee:99:b7:2a:a3:94:90:77:8d:97:9b:a9:21:
78:b9:04:1b:9a:25:5d:fa:36:6b:48:a5:1e:ed:4c:
35:31:90:ab:e1:6e:9b:31:1e:41:aa:55:7b:fb:14:
a8:c2:b9:5b:f2:36:53:2e:95:52:44:0f:4f:aa:79:
7f:09:e1:90:fc:8a:90:c6:52:a1:d4:16:79:d9:be:
26:58:6d:66:5f:2e:87:b2:07:45:7c:f4:3c:dd:ac:
aa:c0:00:86:2d:bf:8b:69:a1:5a:04:9c:66:3a:e0:
2a:c2:9f:d7:34:73:73:a1:e9:17:fc:02:63:0a:e9:
ef:1f:75:04:11:39:72:88:9f:d1:c3:f8:93:1c:3a:
b2:c7:16:5a:9f:f6:63:b5:f6:3f:31:45:c7:e4:d1:
17:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B3:A8:56:CC:60:5F:8C:1B:99:43:80:36:84:D3:0D:4C:94:F7:FD
X509v3 Authority Key Identifier:
keyid:DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/87OoVsxgX4wbmUOANoTTDUyU9_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.78.64.0/20
109.69.0.0/21
185.62.174.0/23
217.73.128.0/20
IPv6:
2a04:eb40::/29
Signature Algorithm: sha256WithRSAEncryption
70:2e:b6:fe:84:c7:0e:9f:67:f9:2f:17:ad:b6:af:42:95:98:
eb:7e:62:2a:a3:ae:41:c6:74:04:d7:01:6b:67:81:6b:4e:6b:
8c:51:cb:7b:39:fd:48:b5:2e:2c:19:bf:c5:96:f9:f0:6f:89:
93:c2:c8:c0:d5:f8:be:a3:96:c0:4b:79:63:e9:58:3f:09:a5:
96:7e:e9:4a:94:f9:91:bc:de:f8:20:b4:59:65:fb:82:00:3f:
a5:31:b5:b5:8c:91:79:c8:b8:d7:3a:77:fa:15:cb:ed:25:3d:
62:7e:44:02:e8:4a:27:98:ee:4f:a9:e2:bf:af:18:5d:a8:6a:
a5:96:73:fc:3c:e6:5d:aa:55:28:6b:9b:b1:bd:c5:94:8c:82:
95:bb:e1:17:1f:8b:0a:d8:1f:5d:9c:25:6f:e2:66:cf:dd:ed:
fd:01:a1:54:21:74:e2:5d:b3:ab:81:52:76:b3:68:e8:73:67:
62:16:44:79:99:2f:50:55:5a:fe:23:79:64:6b:5c:77:bb:29:
17:c0:c6:14:d0:4d:95:cb:64:e1:55:f7:17:86:51:fe:83:00:
23:4d:b0:b2:c2:b4:e0:c1:53:19:72:38:d8:a0:45:d8:79:43:
e2:fb:1c:86:18:e4:0f:91:4e:d7:9f:5c:f2:e6:db:2e:b6:1d:
a7:b3:4f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:23 2023 by rpki-client on console-ams.rpki-client.org