Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/RIfu3uhlb-4aYgUGwS9aXH-CA44.roa
File: RIfu3uhlb-4aYgUGwS9aXH-CA44.roa (raw, json)
Hash identifier: gyRuhDFfdsa0Q6JNhBum97pF20DpdW9H8QWr//N811Y=
Subject key identifier: 44:87:EE:DE:E8:65:6F:EE:1A:62:05:06:C1:2F:5A:5C:7F:82:03:8E
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 018AEA4B556F22A9563D5D30B5E09EB96788
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/RIfu3uhlb-4aYgUGwS9aXH-CA44.roa
Signing time: Sun 01 Oct 2023 08:12:00 +0000
ROA not before: Sun 01 Oct 2023 08:12:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 393427
IP address blocks: 94.190.248.0/22 maxlen: 24
84.234.16.0/20 maxlen: 24
194.88.96.0/21 maxlen: 24
5.35.192.0/21 maxlen: 24
85.204.160.0/22 maxlen: 24
194.88.112.0/20 maxlen: 24
185.77.250.0/23 maxlen: 24
91.232.136.0/22 maxlen: 24
188.240.40.0/23 maxlen: 24
188.212.104.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ea:4b:55:6f:22:a9:56:3d:5d:30:b5:e0:9e:b9:67:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Oct 1 08:12:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4487eedee8656fee1a620506c12f5a5c7f82038e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b1:e1:61:5d:75:96:8f:a0:6d:2f:2c:e7:fb:
b7:b3:fb:1a:a3:f0:1d:57:2f:5c:ed:cd:60:54:8c:
40:05:1d:ab:9a:0e:22:37:fe:c5:0b:e5:5a:01:43:
d7:4a:af:4a:c6:c1:28:29:33:49:74:bd:29:64:06:
23:c9:30:28:28:a0:ab:c0:3d:2a:0d:f8:bb:cd:3b:
f4:9d:42:cd:6b:9f:79:47:1d:a2:a7:30:59:5f:e9:
88:a6:0c:a2:fd:c5:43:83:ba:34:08:c3:0a:2d:54:
a9:2d:76:ab:e1:fa:fd:5c:6b:8d:cc:4c:9e:d6:4c:
d7:5c:fb:43:c7:0c:2b:03:6d:94:cb:ca:4e:23:f1:
46:d9:8a:33:5a:6d:3d:9e:95:c8:56:4e:8d:af:c4:
48:0d:b9:56:78:8a:42:99:f0:55:2f:ea:4d:46:54:
0c:c4:ad:f1:74:66:a5:eb:1f:56:8a:35:38:1f:10:
b2:0b:62:c5:2f:ba:3d:09:61:ab:36:34:e1:a6:19:
b9:d2:63:36:b2:d6:f0:19:65:b5:cd:88:c4:ae:7b:
84:92:ad:25:51:35:9e:75:3e:20:63:8a:64:58:57:
ce:18:b2:cd:96:9c:aa:78:63:90:c3:09:18:0c:33:
cd:2b:8c:f4:5f:05:5c:a5:34:4e:ea:ad:8c:49:a4:
33:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:87:EE:DE:E8:65:6F:EE:1A:62:05:06:C1:2F:5A:5C:7F:82:03:8E
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/RIfu3uhlb-4aYgUGwS9aXH-CA44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.192.0/21
84.234.16.0/20
85.204.160.0/22
91.232.136.0/22
94.190.248.0/22
185.77.250.0/23
188.212.104.0/22
188.240.40.0/23
194.88.96.0/21
194.88.112.0/20
Signature Algorithm: sha256WithRSAEncryption
99:7e:4a:69:a5:c1:ce:af:12:19:8e:b7:61:9a:ad:b2:c4:2a:
02:ac:d6:3f:05:a8:7c:73:d0:ca:88:16:e9:c6:70:28:4f:68:
9c:44:31:36:6a:35:51:c5:be:53:0c:67:5c:0f:20:6b:0e:bd:
7a:5a:52:98:df:e1:0d:fd:f1:eb:bb:26:e1:c0:e4:68:9d:57:
eb:a5:58:82:3d:61:1e:27:ed:67:3b:d5:33:23:30:a2:94:73:
09:c1:14:43:57:7d:2f:44:ff:d1:88:81:e0:c7:73:e7:fe:ce:
7d:65:dc:af:9a:21:e5:f4:98:bb:4d:f6:86:49:51:a6:4f:46:
e5:27:b0:3d:2b:a1:25:32:c3:37:88:84:fc:12:37:8e:51:4d:
9b:08:72:c8:c6:f7:3d:fc:41:d7:54:58:42:e6:4f:c7:62:38:
54:6e:5b:4c:12:7e:90:3a:e1:f8:c0:89:a9:d5:50:ea:db:cf:
f9:79:d7:12:12:2f:ad:24:20:11:8d:0e:d7:b9:c7:d6:88:ee:
83:fb:d2:ee:e6:8c:0e:cd:45:03:6a:dd:d8:d8:f9:9f:bf:4f:
04:8b:f5:03:25:95:5a:f2:69:b5:6a:ab:e7:cc:5a:8a:88:0a:
da:35:38:06:a1:57:6b:a8:e4:df:26:25:28:ca:97:0e:10:8d:
d0:4e:a3:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 1 09:52:56 2023 by rpki-client on console-fra.rpki-client.org