Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/fJl4PWiX5jdJkBDEVL-_MKmvE7Y.roa
File: fJl4PWiX5jdJkBDEVL-_MKmvE7Y.roa (raw, json)
Hash identifier: 9KOvniBwDaUTKVNjWR0tL8y4LBhzoLqdR4uYY6eYUUM=
Subject key identifier: 7C:99:78:3D:68:97:E6:37:49:90:10:C4:54:BF:BF:30:A9:AF:13:B6
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 018BBBC738E33B2EFF5D02E63C1E9A87BAA0
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/fJl4PWiX5jdJkBDEVL-_MKmvE7Y.roa
Signing time: Sat 11 Nov 2023 00:27:57 +0000
ROA not before: Sat 11 Nov 2023 00:27:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 195.133.202.0/23 maxlen: 24
194.88.96.0/21 maxlen: 24
89.37.216.0/23 maxlen: 24
84.234.24.0/22 maxlen: 24
93.113.184.0/21 maxlen: 24
62.112.12.0/23 maxlen: 24
194.58.64.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:bb:c7:38:e3:3b:2e:ff:5d:02:e6:3c:1e:9a:87:ba:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Nov 11 00:27:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c99783d6897e637499010c454bfbf30a9af13b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:48:a9:15:17:6a:c6:d0:50:f3:37:a5:e9:99:
78:42:6c:67:6f:8e:70:3b:36:3b:5a:2e:2e:80:64:
00:a5:a4:f2:bf:ec:f7:9c:9c:03:5d:0e:8d:ed:71:
ec:80:c2:e0:b1:30:bc:33:3a:26:15:59:f8:e3:35:
68:eb:ff:30:62:f3:ce:a6:67:6c:39:ff:e9:ad:14:
87:e7:73:25:96:38:5a:e0:a8:f9:29:a5:ef:d6:e0:
14:5f:58:d5:66:95:42:bf:01:fd:f7:a4:6d:ec:e9:
3b:75:9e:45:c1:f8:2d:d1:53:51:c6:95:f0:18:9d:
4b:a4:be:ca:28:00:f3:d6:6a:11:be:7e:5a:bb:4c:
a0:69:44:b2:3a:cd:00:79:62:2e:9d:92:f9:b0:e4:
98:50:ef:de:22:b4:88:6b:0e:65:ff:cf:27:07:5c:
b4:b3:3b:d4:81:e3:9a:de:f7:af:2b:04:f0:f7:f4:
48:a4:a2:da:93:9d:a9:21:c3:d6:b4:f7:b7:09:b5:
eb:ac:4b:22:29:66:84:89:dd:54:c5:a0:33:23:17:
2d:02:d0:d2:51:0d:7e:93:69:8a:90:9b:ce:eb:45:
b8:c6:e9:e7:cc:60:7f:32:57:46:f3:11:d6:1e:ea:
4d:b0:d2:bd:15:fe:a5:27:49:c8:65:ea:1b:2f:69:
e5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:99:78:3D:68:97:E6:37:49:90:10:C4:54:BF:BF:30:A9:AF:13:B6
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/fJl4PWiX5jdJkBDEVL-_MKmvE7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.112.12.0/23
84.234.24.0/22
89.37.216.0/23
93.113.184.0/21
194.58.64.0/23
194.88.96.0/21
195.133.202.0/23
Signature Algorithm: sha256WithRSAEncryption
88:e7:86:5c:43:fd:04:7f:55:03:c2:f4:af:a3:ae:45:b8:7f:
8b:11:16:90:ca:64:0d:6e:eb:eb:13:73:4a:4d:d4:2d:62:b5:
65:24:7a:34:39:6a:43:6b:a9:51:fc:b6:f3:3b:b5:2a:5a:96:
84:5e:ac:a4:18:54:3e:0a:3a:89:1c:44:3a:15:49:66:dc:95:
89:a0:e1:1e:42:5b:06:66:32:3d:a3:d8:10:99:12:31:60:0e:
d9:04:ce:0a:22:d6:19:64:7e:64:67:5e:c4:d2:05:01:1f:75:
1d:cf:4e:9d:d4:1a:3a:3c:a9:d8:df:58:85:6b:55:87:56:6f:
61:29:f4:3e:6c:c0:af:26:8c:83:45:4d:03:fc:35:90:1f:76:
0e:de:53:a3:93:31:e9:6d:3d:06:e0:89:51:42:d2:f1:e5:c6:
11:ae:06:bc:60:fb:e9:0a:07:6d:bd:af:c8:bf:cf:a4:e4:f9:
d4:b1:23:dc:51:2e:cc:a0:49:3d:fd:5e:3c:41:53:dc:80:63:
9a:bf:04:be:aa:12:f5:27:9b:5e:ef:d9:44:d7:4a:da:88:fe:
51:7b:6e:53:c8:bb:f0:49:d1:9c:bc:14:f6:b6:d9:76:05:6d:
b2:75:fa:24:bc:43:23:39:55:f3:15:c1:c3:0b:31:88:01:21:
bf:c9:b1:72
-----BEGIN CERTIFICATE-----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Generated at Mon Nov 13 23:54:44 2023 by rpki-client on console-fra.rpki-client.org