Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/oRvqLUGzJ8933If7DbXvkH49qR8.roa
File: oRvqLUGzJ8933If7DbXvkH49qR8.roa (raw, json)
Hash identifier: 2ooOTgpQ0jYpN92AuWBUYH+5O0k5ZRvExv/e+EJtsGM=
Subject key identifier: A1:1B:EA:2D:41:B3:27:CF:77:DC:87:FB:0D:B5:EF:90:7E:3D:A9:1F
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 018CC56F0368746629B9600E46C9A3264934
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/oRvqLUGzJ8933If7DbXvkH49qR8.roa
Signing time: Mon 01 Jan 2024 14:30:36 +0000
ROA not before: Mon 01 Jan 2024 14:30:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 393427
IP address blocks: 84.234.16.0/20 maxlen: 24
194.88.96.0/21 maxlen: 24
5.35.192.0/21 maxlen: 24
85.204.160.0/22 maxlen: 24
194.88.112.0/20 maxlen: 24
91.232.136.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6f:03:68:74:66:29:b9:60:0e:46:c9:a3:26:49:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Jan 1 14:30:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a11bea2d41b327cf77dc87fb0db5ef907e3da91f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:50:c1:8e:71:d7:92:9f:2e:ba:77:6d:bc:1f:
11:e8:83:ee:6b:7d:80:2a:c2:e0:63:89:02:02:b4:
c6:6f:8c:70:7e:e5:8f:11:f2:ae:d0:b9:47:05:c7:
11:c4:9a:80:6c:2f:e6:4c:26:7d:c0:d3:31:e8:90:
78:d5:0d:86:91:5e:71:48:d7:e3:79:8d:cc:95:21:
86:e8:d2:96:23:dc:e6:7c:56:ce:06:b0:95:0b:2f:
3f:ab:ff:ed:89:2c:96:ab:36:5c:b5:50:c2:d5:84:
69:f3:d1:6f:fd:1b:a9:6d:6f:bc:38:d8:da:fc:1e:
0b:70:34:00:2b:31:1c:aa:70:64:7c:b0:ce:2e:59:
35:17:45:9f:61:e0:b2:34:96:0e:85:b2:d6:6b:c3:
98:1a:d8:e7:a1:6a:0a:05:7e:a7:df:27:05:dc:94:
ab:5a:47:36:a4:7f:b1:48:f1:32:fb:81:75:39:22:
43:c7:56:65:3a:01:3c:90:11:44:6d:ec:26:76:43:
c8:e7:ce:ef:4b:ba:6f:4a:b9:c6:13:c7:54:b1:06:
62:2b:0e:4e:25:51:1d:9c:b5:ff:62:2d:1d:10:b3:
fd:b4:07:d7:d3:5f:ee:88:93:fb:63:59:4e:a4:07:
47:bc:b0:0b:f9:4b:4e:6f:20:4e:a4:c5:1d:7a:4b:
30:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:1B:EA:2D:41:B3:27:CF:77:DC:87:FB:0D:B5:EF:90:7E:3D:A9:1F
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/oRvqLUGzJ8933If7DbXvkH49qR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.192.0/21
84.234.16.0/20
85.204.160.0/22
91.232.136.0/22
194.88.96.0/21
194.88.112.0/20
Signature Algorithm: sha256WithRSAEncryption
2b:48:32:34:8a:1c:21:99:eb:f1:42:f1:01:5e:dd:26:d7:95:
f0:b7:c9:95:17:c8:65:81:35:ba:71:b8:eb:77:14:74:34:70:
c1:aa:73:2b:bd:49:40:6c:29:49:23:29:eb:f4:37:46:a1:7c:
27:1d:1d:df:d8:c5:01:33:4b:24:3d:71:8f:ed:7d:5d:3c:ad:
1a:ce:00:e8:1c:5e:4d:d9:24:ae:78:5b:66:b9:39:a4:e6:08:
13:8d:71:c3:3f:89:e0:98:af:76:43:59:28:37:28:3b:f7:02:
02:1c:0f:64:2e:a6:83:24:03:6b:6b:d0:74:0b:61:0d:44:1c:
0f:ae:73:07:ca:93:2e:1c:b6:16:e9:b0:35:c5:1a:53:ff:dc:
95:20:0d:27:ca:27:85:23:ba:0e:b8:e5:0f:1a:10:dc:52:e5:
2b:c1:8b:03:0c:f9:e9:5b:2f:0b:55:56:59:f5:9c:4e:a8:ab:
50:fb:0a:a9:e5:0d:7b:55:4a:42:b3:58:e1:4b:bc:42:07:ee:
08:1a:f1:be:1d:1a:e0:13:b1:66:61:75:91:82:df:d8:e2:e7:
b9:8e:3f:b9:9e:59:97:80:93:d7:cc:4e:f0:c3:9a:a1:d3:53:
13:7a:98:84:9d:d9:2b:2b:a6:f4:47:91:e9:42:d3:df:1e:cd:
d4:14:9a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 03:13:03 2024 by rpki-client on console-fra.rpki-client.org