Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/gAjHcBLnN5eSPFncV4NDedx7CoY.roa
File: gAjHcBLnN5eSPFncV4NDedx7CoY.roa (raw, json)
Hash identifier: uAB7DuRnh3SWnF9BX/X8PRA7mt4O9enAlUGcdqGlCds=
Subject key identifier: 80:08:C7:70:12:E7:37:97:92:3C:59:DC:57:83:43:79:DC:7B:0A:86
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 0185F284CF9B272C2BC0442799DA8370D4EB
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/gAjHcBLnN5eSPFncV4NDedx7CoY.roa
Signing time: Fri 27 Jan 2023 09:17:48 +0000
ROA not before: Fri 27 Jan 2023 09:17:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 93.115.155.0/24 maxlen: 24
94.177.27.0/24 maxlen: 24
89.42.213.0/24 maxlen: 24
86.104.209.0/24 maxlen: 24
217.19.1.0/24 maxlen: 24
89.42.40.0/24 maxlen: 24
185.77.249.0/24 maxlen: 24
84.247.59.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f2:84:cf:9b:27:2c:2b:c0:44:27:99:da:83:70:d4:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Jan 27 09:17:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8008c77012e73797923c59dc57834379dc7b0a86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4f:07:56:1b:ad:4a:e7:27:b3:54:fd:a4:95:
71:61:20:bb:71:9d:ab:96:b2:13:57:7a:d2:a4:9b:
c4:d6:f6:21:4d:14:03:f2:1d:f2:66:5d:d0:52:a3:
da:c4:81:d5:55:e0:f1:d9:ab:bc:d8:79:92:9a:b5:
1b:b2:0f:c9:1c:f1:b6:a4:79:b0:b6:7b:79:d7:de:
9d:12:53:78:1c:e0:b2:60:14:f4:d5:1b:02:7a:28:
d6:43:d3:9b:f1:d6:a1:e0:95:4b:40:09:e5:c2:60:
8e:1e:f2:20:ab:50:07:15:90:0c:b2:b5:af:a3:18:
4d:7a:f8:0c:88:45:60:7b:de:90:32:e4:30:06:31:
d4:bd:f8:71:fe:33:d2:6d:b7:a9:c7:6e:6d:9d:0c:
14:6b:38:45:52:64:43:e8:79:11:5d:40:29:cf:57:
26:47:78:a6:5f:b4:3e:94:9e:1e:21:e0:69:30:d1:
d6:e5:ae:fd:53:df:5d:5d:9e:f8:d7:61:f0:20:37:
2a:35:62:15:f5:cb:80:7c:2c:38:3b:65:ab:7d:d8:
41:dc:a1:a5:19:0e:c8:c8:a6:cc:f5:e6:d8:1e:6d:
cf:e7:6a:02:22:fa:f1:b8:28:1e:1b:10:59:6f:06:
29:7d:59:18:f6:e5:28:3f:ac:78:ab:63:1e:50:9c:
ce:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:08:C7:70:12:E7:37:97:92:3C:59:DC:57:83:43:79:DC:7B:0A:86
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/gAjHcBLnN5eSPFncV4NDedx7CoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.247.59.0/24
86.104.209.0/24
89.42.40.0/24
89.42.213.0/24
93.115.155.0/24
94.177.27.0/24
185.77.249.0/24
217.19.1.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:89:d4:8e:d5:50:9e:3a:f0:e1:92:f9:dc:3d:a1:80:5c:7e:
0e:9f:d0:5b:59:97:e7:32:a1:37:9f:dc:b5:0e:80:3d:d6:16:
e4:be:08:5b:ee:f6:1a:f6:78:f4:4b:3a:04:3f:b4:6e:9f:3b:
08:5a:cb:f7:95:c7:c5:a7:60:1d:a3:9a:37:33:00:60:53:9e:
8e:08:e4:88:c5:fd:4f:fe:40:81:7f:84:41:07:ed:8e:af:5b:
fb:78:66:d6:5a:79:ce:94:b6:5d:da:ee:63:ec:bd:42:b3:8f:
1f:f1:a7:55:17:a8:b4:74:eb:13:53:d2:eb:ed:c6:84:57:ba:
51:53:dc:44:4a:39:55:51:bd:7f:eb:a8:a6:33:d2:92:d5:f6:
cf:e2:66:86:34:1c:bb:01:6a:df:26:c0:b9:1c:0d:67:d2:61:
3b:21:e4:4e:72:e2:d4:07:8c:3c:8c:2d:e6:5e:af:82:d5:cf:
94:44:25:c6:6e:e3:1e:79:02:75:32:08:99:ef:ef:6c:b8:5a:
78:87:e3:03:7b:a8:ca:73:dd:b2:05:af:44:50:7b:81:77:3d:
c4:0f:b6:29:95:86:52:98:f3:da:b3:f4:ea:b2:2b:42:a3:12:
70:7d:6c:56:29:bc:de:25:80:86:94:03:33:4c:49:28:10:2c:
2a:3a:1c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:05 2023 by rpki-client on console-fra.rpki-client.org