Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/eoFt87AFU-WMFbwXK_FCSEIniqE.roa
File: eoFt87AFU-WMFbwXK_FCSEIniqE.roa (raw, json)
Hash identifier: kZ9cTeoo/mALkk1TGfKy8VFqeKM5hFrhcbbesXp4Hpk=
Subject key identifier: 7A:81:6D:F3:B0:05:53:E5:8C:15:BC:17:2B:F1:42:48:42:27:8A:A1
Certificate issuer: /CN=a00cb4b8d569477512ce57885ba6a2898fbc2d95
Certificate serial: 018BA3DD5FB97BF24D907CEB235A2D13F847
Authority key identifier: A0:0C:B4:B8:D5:69:47:75:12:CE:57:88:5B:A6:A2:89:8F:BC:2D:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oAy0uNVpR3USzleIW6aiiY-8LZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/eoFt87AFU-WMFbwXK_FCSEIniqE.roa
Signing time: Mon 06 Nov 2023 09:01:15 +0000
ROA not before: Mon 06 Nov 2023 09:01:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197883
IP address blocks: 94.154.119.0/24 maxlen: 24
195.144.23.0/24 maxlen: 24
80.73.241.0/24 maxlen: 24
195.137.186.0/24 maxlen: 24
195.137.188.0/24 maxlen: 24
185.136.40.0/24 maxlen: 24
185.136.41.0/24 maxlen: 24
185.136.42.0/24 maxlen: 24
185.136.43.0/24 maxlen: 24
185.8.145.0/24 maxlen: 24
185.8.144.0/24 maxlen: 24
185.8.146.0/24 maxlen: 24
185.8.147.0/24 maxlen: 24
176.57.240.0/24 maxlen: 24
176.57.243.0/24 maxlen: 24
176.57.244.0/24 maxlen: 24
176.57.241.0/24 maxlen: 24
176.57.242.0/24 maxlen: 24
176.57.245.0/24 maxlen: 24
176.57.246.0/24 maxlen: 24
176.57.247.0/24 maxlen: 24
195.138.220.0/24 maxlen: 24
194.53.4.0/24 maxlen: 24
194.53.5.0/24 maxlen: 24
194.53.6.0/24 maxlen: 24
194.53.7.0/24 maxlen: 24
2a01:9d80::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a3:dd:5f:b9:7b:f2:4d:90:7c:eb:23:5a:2d:13:f8:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a00cb4b8d569477512ce57885ba6a2898fbc2d95
Validity
Not Before: Nov 6 09:01:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7a816df3b00553e58c15bc172bf1424842278aa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b3:56:ca:ec:b6:43:44:9e:97:1c:89:e1:32:
02:f0:49:d1:82:b9:e2:a2:73:c3:af:6a:21:f7:17:
e4:0c:b6:3c:98:79:06:e2:d1:ba:94:15:17:86:1d:
f5:db:65:bb:ab:c8:bf:51:1a:62:c8:1e:87:dc:ff:
59:0c:63:73:11:73:5a:a3:ac:92:75:40:39:84:f8:
f8:f8:86:13:32:cd:cb:15:af:7f:36:3d:32:85:70:
9b:2f:d5:ff:b6:73:84:7c:6c:7d:3a:a1:b4:8d:24:
28:56:c2:41:8b:f8:a6:6e:50:98:55:32:66:86:56:
b3:a5:8d:f6:a9:47:a2:4b:13:18:7d:03:4f:62:55:
3f:2f:6d:11:6f:99:f7:f2:83:3d:7d:5e:e3:7c:b1:
9d:84:6b:55:cc:ea:b6:5b:c6:5f:12:e9:b1:78:7a:
25:fd:6d:33:02:4e:21:f1:1e:d2:ec:af:2c:95:52:
49:a5:91:10:4e:16:5c:c1:a6:04:4b:d1:89:8b:7b:
86:f5:09:a9:1f:15:62:cd:c4:91:bf:fe:fd:ec:55:
ec:8d:07:d4:7a:62:bf:92:b3:bd:86:6a:3e:22:af:
ee:4b:4b:1b:6f:9a:24:89:1b:9c:80:dd:87:8f:a0:
3a:a4:ab:4a:72:e7:94:5f:51:59:73:bb:dc:65:de:
07:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:81:6D:F3:B0:05:53:E5:8C:15:BC:17:2B:F1:42:48:42:27:8A:A1
X509v3 Authority Key Identifier:
keyid:A0:0C:B4:B8:D5:69:47:75:12:CE:57:88:5B:A6:A2:89:8F:BC:2D:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oAy0uNVpR3USzleIW6aiiY-8LZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/eoFt87AFU-WMFbwXK_FCSEIniqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.73.241.0/24
94.154.119.0/24
176.57.240.0/21
185.8.144.0/22
185.136.40.0/22
194.53.4.0/22
195.137.186.0/24
195.137.188.0/24
195.138.220.0/24
195.144.23.0/24
IPv6:
2a01:9d80::/32
Signature Algorithm: sha256WithRSAEncryption
69:f3:8e:22:f9:d9:28:92:f6:d4:3b:6d:5e:db:2d:52:b9:60:
75:eb:68:fc:03:da:f3:c1:09:c4:2f:ca:19:db:9c:9f:c5:4d:
2f:8b:7c:ad:3d:6a:36:7a:1b:63:ba:ca:3c:30:78:1b:e6:a9:
71:c4:c0:c2:c6:fc:58:58:f9:e3:41:0b:e7:c9:85:bb:01:c9:
76:76:0c:54:e1:4d:86:5f:b6:27:cc:57:d9:51:a9:40:6f:de:
a7:a3:ac:49:be:00:69:8a:f5:ee:75:6c:ae:12:ca:43:ae:34:
18:70:7d:0f:7e:7b:82:c6:09:82:25:f0:1a:74:8a:fb:5a:4a:
40:6a:e3:11:b2:d7:a8:65:5d:c7:d4:7b:c9:17:66:ba:29:25:
35:ec:5e:69:82:97:67:a1:c7:09:0e:67:75:12:53:dc:c8:59:
2d:5c:56:f4:fa:d1:db:c6:14:8b:31:b7:c1:2a:32:08:a2:62:
e2:21:ee:7b:77:ff:21:c9:4b:1c:e0:6a:5b:59:27:b7:73:51:
3e:d9:88:0f:52:7e:6f:88:1f:ee:a3:dc:22:be:29:f3:27:07:
f2:e2:26:56:3c:d5:91:b2:2c:24:e0:b4:de:3f:6a:fc:18:f6:
68:18:6b:ab:04:9b:d5:34:6f:31:58:14:c6:a6:a2:7a:43:13:
c6:48:61:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:47 2023 by rpki-client on console.sobornost.net