Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/FBS3Fr6vQ6hR-Cm4doRhla_tP88.roa
File: FBS3Fr6vQ6hR-Cm4doRhla_tP88.roa (raw, json)
Hash identifier: khZvwn01Cwfhv7b0dSuKVfYN6EIynI6l2Q1O6KCtsKs=
Subject key identifier: 14:14:B7:16:BE:AF:43:A8:51:F8:29:B8:76:84:61:95:AF:ED:3F:CF
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 018748AA5391ED0CBC6B6310AB0DB76C5449
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/FBS3Fr6vQ6hR-Cm4doRhla_tP88.roa
Signing time: Mon 03 Apr 2023 19:48:54 +0000
ROA not before: Mon 03 Apr 2023 19:48:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 188.240.83.0/24 maxlen: 24
5.35.192.0/21 maxlen: 24
62.112.0.0/21 maxlen: 24
89.37.128.0/24 maxlen: 24
176.223.190.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:48:aa:53:91:ed:0c:bc:6b:63:10:ab:0d:b7:6c:54:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Apr 3 19:48:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1414b716beaf43a851f829b876846195afed3fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9b:56:e7:22:ca:5d:3d:76:1b:6f:68:25:67:
48:b1:87:98:b4:cd:d5:1d:cd:7f:b7:b4:f2:a9:c0:
77:ab:ef:79:55:b5:d8:29:1c:79:b9:39:19:e2:0c:
b2:78:35:b4:c4:dc:2c:eb:ca:ea:93:00:a7:31:64:
45:e7:28:fc:fe:c3:1f:6a:0b:bc:6e:3d:78:be:fd:
26:bd:d4:31:c3:32:a0:01:be:f5:7a:97:20:bd:9c:
26:36:e0:2d:55:2e:d9:c1:e5:a3:63:4b:45:af:0b:
9c:a5:d3:05:a6:a5:a8:d8:d5:10:b2:f5:b6:65:0a:
5d:e2:2e:33:81:c1:55:4c:30:a2:26:c9:86:18:e0:
91:d2:e8:63:ee:ea:5a:63:45:88:c6:1c:df:da:eb:
18:a7:1f:59:da:8d:89:92:ed:6c:37:f7:0a:4e:2e:
b6:7c:47:6d:77:ba:34:74:bb:dc:79:67:56:97:cb:
82:0d:58:9e:b9:47:00:7e:e4:d4:96:66:65:0c:49:
7c:0d:a9:ee:f1:d4:8b:af:61:ec:36:3e:6b:c2:33:
12:22:40:fb:b5:3d:36:62:de:5c:c8:7c:11:ab:bf:
dd:b3:62:e0:52:ca:98:2d:60:1b:e1:dd:b2:be:ac:
13:96:bd:14:53:46:67:b9:57:9a:40:3e:5a:6f:49:
6d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:14:B7:16:BE:AF:43:A8:51:F8:29:B8:76:84:61:95:AF:ED:3F:CF
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/FBS3Fr6vQ6hR-Cm4doRhla_tP88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.192.0/21
62.112.0.0/21
89.37.128.0/24
176.223.190.0/24
188.240.83.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:de:f5:a7:ba:65:78:e3:0f:be:ff:4b:e7:f4:77:02:fc:16:
fa:cc:12:38:4a:9e:e8:81:a6:e0:aa:e0:50:e1:2c:ad:be:39:
ce:f3:f2:ea:51:b3:45:e9:76:0a:7c:40:3d:93:a2:f8:2c:dd:
36:f5:c9:77:d8:61:b3:e5:67:49:90:9c:6c:8d:9b:48:3b:6a:
8b:c4:de:4c:28:f8:3a:76:f9:8d:6c:f8:24:0f:16:08:c6:34:
0d:87:6a:8d:9e:a1:69:f2:32:cb:af:55:7f:fe:ed:57:88:8d:
fe:7c:08:72:18:53:05:ba:8d:f8:1b:d4:d5:95:be:3b:5e:51:
e3:9f:2c:f2:d9:ce:6e:fb:71:c3:0d:5a:d2:34:cc:7c:90:35:
4b:ef:eb:b3:43:3d:68:36:60:58:04:62:c2:32:6d:b8:10:13:
68:a8:5f:db:11:de:79:6f:d3:6b:13:59:2e:40:f0:28:84:c6:
13:e4:6a:7a:a0:8c:8d:c9:9b:21:4d:4b:57:33:bd:90:08:82:
ed:f2:d0:df:22:94:a3:a8:ea:b4:0b:d8:1a:3f:6a:7e:07:1b:
8d:4b:5c:a9:40:b1:33:a9:69:87:ea:67:41:12:0a:8f:e4:55:
17:73:37:12:81:87:77:86:4f:3e:e6:88:6d:99:be:c9:1e:11:
fc:bd:0c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:04 2023 by rpki-client on console-fra.rpki-client.org