Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/1IBHg9YxvcJd9fugXEjQCaHArMk.roa
File: 1IBHg9YxvcJd9fugXEjQCaHArMk.roa (raw, json)
Hash identifier: 5/EBXS4ki7E73u0PFq4vU8eSl2By+7haA7uJb3Nk8Ls=
Subject key identifier: D4:80:47:83:D6:31:BD:C2:5D:F5:FB:A0:5C:48:D0:09:A1:C0:AC:C9
Certificate issuer: /CN=eecc4cf37241ced1467c918aa276d388b0a82ed5
Certificate serial: 0187988A6E515A88CAF2E55695E559044157
Authority key identifier: EE:CC:4C:F3:72:41:CE:D1:46:7C:91:8A:A2:76:D3:88:B0:A8:2E:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7sxM83JBztFGfJGKonbTiLCoLtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/1IBHg9YxvcJd9fugXEjQCaHArMk.roa
Signing time: Wed 19 Apr 2023 08:03:41 +0000
ROA not before: Wed 19 Apr 2023 08:03:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39505
IP address blocks: 185.75.48.0/24 maxlen: 24
87.247.250.0/24 maxlen: 24
93.93.8.0/24 maxlen: 24
87.247.248.0/24 maxlen: 24
87.247.249.0/24 maxlen: 24
78.40.136.0/24 maxlen: 24
78.40.137.0/24 maxlen: 24
78.40.138.0/24 maxlen: 24
87.247.254.0/24 maxlen: 24
93.93.12.0/24 maxlen: 24
87.247.255.0/24 maxlen: 24
93.93.13.0/24 maxlen: 24
2a00:6580::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:98:8a:6e:51:5a:88:ca:f2:e5:56:95:e5:59:04:41:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eecc4cf37241ced1467c918aa276d388b0a82ed5
Validity
Not Before: Apr 19 08:03:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d4804783d631bdc25df5fba05c48d009a1c0acc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ce:de:49:22:b2:8f:98:19:72:37:dd:6c:67:
17:d0:1d:6f:6d:03:c0:c9:53:40:ea:4b:2f:ae:87:
c8:a4:8f:63:57:23:b7:9b:e5:f8:28:2c:c9:2a:b7:
96:34:73:b9:b4:bf:61:2b:2a:56:e5:78:33:07:4c:
73:52:c8:59:d9:3d:4a:71:a6:b4:5d:df:05:00:61:
72:c8:41:3b:88:66:68:ae:60:e0:e4:cb:a7:80:66:
05:43:13:1a:e3:ca:3b:8c:15:04:16:02:e9:50:9d:
77:5b:28:27:95:fc:c1:fb:62:6a:8e:15:7e:d3:b4:
1d:be:9d:03:75:2e:7e:ff:28:f6:a2:f4:d2:43:cb:
9a:71:4b:a7:58:3b:6e:88:3c:23:29:88:86:08:e7:
5f:7d:ce:e8:59:5e:ed:81:6b:fb:e5:23:b0:27:78:
ef:47:6e:dd:5a:a5:b1:99:14:65:cd:6e:46:0d:e4:
6a:4a:e3:44:8d:11:d0:cc:0a:3d:53:3c:b1:73:6a:
d4:9a:21:41:23:dc:a3:20:28:8b:8f:d3:7f:bf:74:
71:a8:4a:24:b2:cb:e9:94:bc:60:cd:62:81:69:50:
7c:c6:2a:83:31:a0:52:74:f9:cd:61:eb:01:f9:23:
b8:95:fc:52:17:75:a6:84:c4:34:58:a3:8a:5e:ac:
5d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:80:47:83:D6:31:BD:C2:5D:F5:FB:A0:5C:48:D0:09:A1:C0:AC:C9
X509v3 Authority Key Identifier:
keyid:EE:CC:4C:F3:72:41:CE:D1:46:7C:91:8A:A2:76:D3:88:B0:A8:2E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7sxM83JBztFGfJGKonbTiLCoLtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/1IBHg9YxvcJd9fugXEjQCaHArMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/7sxM83JBztFGfJGKonbTiLCoLtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.40.136.0-78.40.138.255
87.247.248.0-87.247.250.255
87.247.254.0/23
93.93.8.0/24
93.93.12.0/23
185.75.48.0/24
IPv6:
2a00:6580::/32
Signature Algorithm: sha256WithRSAEncryption
1c:f3:31:df:e3:c8:e8:2e:e7:50:35:93:23:77:4b:9d:29:62:
91:f9:13:8c:01:eb:25:1e:2a:47:92:31:83:e0:9b:3d:b1:f0:
b4:87:63:6c:ce:ea:f1:95:1b:0b:90:6f:27:a6:cf:07:dc:c0:
de:34:35:22:a3:4a:b6:df:09:3e:70:73:51:9c:83:56:c7:7c:
bb:6b:af:90:a5:ed:6e:b5:b1:9b:63:11:b9:77:1d:d6:55:df:
4f:4f:3f:b5:8f:25:5b:bf:05:a5:b1:de:04:b6:1a:3d:ea:70:
f1:87:48:cb:a4:d3:c0:2d:6f:f2:30:50:a3:52:e3:82:9d:6d:
2f:04:ce:5a:a3:25:56:ba:a3:d6:e8:0f:27:82:75:d4:4a:ef:
47:3d:77:10:0d:0d:02:1f:d3:02:07:06:ec:39:c7:ba:6e:61:
bd:11:60:b5:72:8a:55:5d:c0:e3:77:1d:ea:f2:d9:64:27:b2:
d5:a1:80:67:ac:34:36:ca:e7:24:50:48:37:f9:ae:32:1d:ee:
7f:17:4a:3a:a7:1e:3c:7d:54:ac:bb:b3:7c:e2:59:62:8b:f5:
5c:22:5f:f4:00:a9:19:b1:3c:81:b7:c2:67:a0:3a:b2:d6:95:
57:da:5e:6c:9f:a3:a5:8d:30:e6:43:80:5a:ab:dc:77:1c:95:
31:ee:c0:4d
-----BEGIN CERTIFICATE-----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==
Generated at Thu Sep 28 20:40:38 2023 by rpki-client on console-fra.rpki-client.org