Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/f7OHBtbbavDepyZF7izB6RRVO5A.roa
File: f7OHBtbbavDepyZF7izB6RRVO5A.roa (raw, json)
Hash identifier: t5g0QBjoil4DwiI0YJ1aAG7/SVwlOg4mx8qQkGl3egg=
Subject key identifier: 7F:B3:87:06:D6:DB:6A:F0:DE:A7:26:45:EE:2C:C1:E9:14:55:3B:90
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 018A0FA19FB7EB0820E0D2B9BCA202325482
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/f7OHBtbbavDepyZF7izB6RRVO5A.roa
Signing time: Sat 19 Aug 2023 21:09:24 +0000
ROA not before: Sat 19 Aug 2023 21:09:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 213.159.10.0/23 maxlen: 24
213.159.12.0/23 maxlen: 24
195.133.202.0/23 maxlen: 24
195.133.208.0/23 maxlen: 24
194.88.96.0/21 maxlen: 24
62.112.0.0/21 maxlen: 24
93.113.184.0/21 maxlen: 24
194.58.64.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:0f:a1:9f:b7:eb:08:20:e0:d2:b9:bc:a2:02:32:54:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Aug 19 21:09:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7fb38706d6db6af0dea72645ee2cc1e914553b90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7a:a1:45:91:99:f0:19:4a:5a:47:40:0d:4b:
1c:63:48:67:0b:09:bb:bc:53:7d:5e:7f:7d:21:9d:
99:6a:13:a0:bb:89:1e:9e:80:75:65:e2:0f:bc:9c:
7c:7f:2b:5f:93:6a:b7:cd:82:ac:6b:40:76:7a:91:
c1:8d:3d:d9:09:59:21:41:c4:99:d3:de:e4:71:c9:
47:60:9d:06:bb:f1:fd:22:a7:56:0c:70:57:03:5c:
4e:eb:a6:4c:16:a3:79:09:7b:df:85:2e:f0:5f:b1:
70:0c:af:c8:e4:84:39:b2:06:dc:fd:fd:17:81:5d:
33:a3:cf:21:4d:fc:7c:1d:66:07:9c:af:3d:76:8e:
6d:a7:c4:20:58:73:80:e4:3a:91:76:a7:58:f2:44:
c5:2f:96:6c:5f:b9:45:72:ed:33:c1:57:71:e7:68:
5b:1c:91:97:75:0d:cb:1b:8c:99:7b:68:f8:16:b3:
ed:01:47:cf:de:34:f0:00:bf:b3:df:73:35:ad:58:
5c:14:62:e1:8d:bd:82:96:a0:8a:b6:e6:73:ae:c3:
e1:3f:4f:87:e9:2b:20:70:ca:45:84:43:94:c0:b2:
17:7d:a7:30:50:c7:34:19:24:f6:bd:5b:69:7e:8c:
fe:c0:9f:8c:03:46:a8:41:e5:cd:dd:a7:96:1b:30:
da:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B3:87:06:D6:DB:6A:F0:DE:A7:26:45:EE:2C:C1:E9:14:55:3B:90
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/f7OHBtbbavDepyZF7izB6RRVO5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.112.0.0/21
93.113.184.0/21
194.58.64.0/23
194.88.96.0/21
195.133.202.0/23
195.133.208.0/23
213.159.10.0-213.159.13.255
Signature Algorithm: sha256WithRSAEncryption
72:ca:51:08:51:96:f9:7f:c5:07:7b:54:14:f5:a4:01:d4:b4:
44:98:62:f6:e3:cf:83:4b:9b:43:5e:f3:d7:96:ac:6f:6d:ff:
db:71:86:88:c4:2b:48:3c:5d:a2:60:8d:c5:b3:38:c6:bc:df:
f2:d7:aa:b3:63:ed:84:49:93:eb:51:21:98:5e:ea:dd:49:cd:
38:3b:22:92:46:b4:73:ed:a2:4b:b0:5d:79:b3:3c:f9:22:57:
25:72:5b:34:bf:30:11:c5:1e:bf:4f:37:03:83:20:42:c6:c5:
d2:9e:5b:23:da:f3:77:c4:0d:37:c0:02:04:bf:d8:14:df:3a:
0f:40:49:46:b3:df:47:62:7c:22:1c:f8:25:a9:c0:33:19:84:
f6:c9:53:7c:19:08:b8:52:78:42:24:1a:dc:dc:77:92:66:54:
ff:2d:92:8f:40:5a:39:da:a4:9b:cf:bf:ff:d2:5e:a2:1b:d2:
e6:10:85:1c:ab:0b:c3:88:43:f7:99:bb:b4:7d:ee:66:05:96:
06:2c:5e:52:e9:e6:42:ed:92:94:bb:c3:23:4e:3d:00:1e:4e:
6e:f0:9f:7f:65:82:6f:c8:39:14:e4:87:ef:7b:14:c5:16:3c:
01:87:69:f2:3c:d6:ce:18:78:55:3f:e0:d6:81:ec:a1:c8:d9:
82:d4:0e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 08:11:08 2023 by rpki-client on console-fra.rpki-client.org