Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/V4xhrKJvf5iDZoDJ8olC_LWgHLk.roa
File: V4xhrKJvf5iDZoDJ8olC_LWgHLk.roa (raw, json)
Hash identifier: wa2QEn0dNStfovgnzGJ2Y/dqdVcG+S+vQ/BNsN6FnwE=
Subject key identifier: 57:8C:61:AC:A2:6F:7F:98:83:66:80:C9:F2:89:42:FC:B5:A0:1C:B9
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 0189DBAE435694324AE6AE53CDDD3FC76B88
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/V4xhrKJvf5iDZoDJ8olC_LWgHLk.roa
Signing time: Wed 09 Aug 2023 19:02:58 +0000
ROA not before: Wed 09 Aug 2023 19:02:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 213.159.10.0/23 maxlen: 24
213.159.12.0/23 maxlen: 24
195.133.202.0/23 maxlen: 24
195.133.208.0/23 maxlen: 24
62.112.0.0/21 maxlen: 24
194.58.64.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:db:ae:43:56:94:32:4a:e6:ae:53:cd:dd:3f:c7:6b:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Aug 9 19:02:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=578c61aca26f7f98836680c9f28942fcb5a01cb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:36:11:4a:1b:d1:c2:37:de:94:bb:f5:91:39:
90:55:82:db:a9:6a:69:76:86:f4:3a:fa:56:bc:bd:
d7:fb:ba:77:fe:2a:66:f6:1c:7c:0e:49:04:e0:73:
93:a9:14:6e:5e:14:ce:f6:a6:32:3a:c1:8e:4a:e7:
85:e5:db:6c:e6:87:29:8c:30:78:60:ad:10:6d:aa:
60:4e:03:14:9a:ce:35:f8:6a:6a:97:90:a7:96:b3:
03:22:9a:73:1e:03:7d:b2:f5:e2:da:bf:06:b8:8e:
bb:ce:ca:d3:2a:5a:48:82:32:1d:47:63:18:c9:55:
9f:e3:54:08:b5:4e:2a:47:b7:1b:38:40:b4:a3:cc:
48:70:d3:9d:68:7a:0e:2a:56:df:38:6c:9b:24:9a:
d8:e6:11:a7:70:de:3c:3b:17:32:e6:09:45:ce:04:
4b:74:a2:a3:bc:93:3e:db:50:50:71:b6:2e:d4:b6:
49:79:6b:85:d4:dd:85:88:9b:94:a0:54:81:5f:c9:
66:d6:7a:ad:d9:83:46:79:80:93:0b:a0:5a:c5:e1:
09:b3:9b:33:50:17:7c:5e:df:74:36:1e:25:36:50:
c1:bc:1d:ee:ec:2c:4c:83:cb:06:6a:e0:dc:0c:ea:
69:4f:49:44:11:77:7d:6f:a4:4c:8e:ed:0a:ac:8b:
98:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:8C:61:AC:A2:6F:7F:98:83:66:80:C9:F2:89:42:FC:B5:A0:1C:B9
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/V4xhrKJvf5iDZoDJ8olC_LWgHLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.112.0.0/21
194.58.64.0/23
195.133.202.0/23
195.133.208.0/23
213.159.10.0-213.159.13.255
Signature Algorithm: sha256WithRSAEncryption
67:20:00:bf:ba:72:d9:3b:0a:49:c2:24:25:3c:42:b4:4b:63:
f7:b6:95:26:38:e3:18:9d:81:12:18:bd:30:bb:ea:09:e4:62:
b4:b2:b1:f1:87:60:eb:33:06:42:d1:54:e9:47:76:ce:c5:45:
29:88:fb:d4:51:6a:dd:8c:54:80:5a:f9:ed:72:0d:43:75:cd:
66:7e:1a:e6:67:92:97:c1:88:75:fd:74:19:b3:83:3f:98:51:
bc:58:1d:a0:ee:dc:ea:cd:4f:20:a4:a8:eb:c3:15:57:d8:f1:
80:1c:4d:12:36:da:08:26:e1:e1:2c:d9:ea:03:5c:44:ec:33:
c9:76:66:4f:4b:c4:03:33:ec:f7:fb:c1:6e:d5:17:f6:58:28:
9e:26:1d:a9:e4:b2:01:a4:9a:79:57:07:29:29:2f:46:69:a8:
63:73:3f:31:36:b6:a4:e7:1b:a6:c5:19:07:3f:71:79:36:7b:
58:db:78:20:b1:fb:31:63:51:51:b1:7c:27:e0:db:18:0a:32:
fd:8d:a8:80:15:d3:8f:f7:d2:e5:8c:f0:05:fd:e3:0f:98:6d:
ba:e0:16:6b:3d:2e:ea:5f:ab:09:82:a7:b9:d1:4f:8c:c4:4c:
3e:0d:46:09:70:c8:eb:ba:a4:cd:ee:5e:8a:c2:a9:67:00:8c:
bb:c8:52:29
-----BEGIN CERTIFICATE-----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Generated at Sat Aug 19 21:56:05 2023 by rpki-client on console-ams.rpki-client.org