Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/7sH_6ODpYLznqSXYe5qe3MkfE50.roa
File: 7sH_6ODpYLznqSXYe5qe3MkfE50.roa (raw, json)
Hash identifier: gOMCJkYgrkWpNZGlBUOdKH2pnNUBxZBRA5RkaJD2XHA=
Subject key identifier: EE:C1:FF:E8:E0:E9:60:BC:E7:A9:25:D8:7B:9A:9E:DC:C9:1F:13:9D
Certificate issuer: /CN=fc983137042fc8c4921707d4eb6da5f6c4a79a5b
Certificate serial: 0186206A1984F98CA608D546646CF57EE493
Authority key identifier: FC:98:31:37:04:2F:C8:C4:92:17:07:D4:EB:6D:A5:F6:C4:A7:9A:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JgxNwQvyMSSFwfU622l9sSnmls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/7sH_6ODpYLznqSXYe5qe3MkfE50.roa
Signing time: Sun 05 Feb 2023 07:11:09 +0000
ROA not before: Sun 05 Feb 2023 07:11:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8245
IP address blocks: 195.26.192.0/19 maxlen: 19
212.236.0.0/18 maxlen: 18
212.236.0.0/16 maxlen: 16
195.26.216.0/22 maxlen: 24
195.26.220.0/22 maxlen: 22
212.236.160.0/19 maxlen: 19
212.236.192.0/18 maxlen: 18
2a02:2750::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:20:6a:19:84:f9:8c:a6:08:d5:46:64:6c:f5:7e:e4:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc983137042fc8c4921707d4eb6da5f6c4a79a5b
Validity
Not Before: Feb 5 07:11:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eec1ffe8e0e960bce7a925d87b9a9edcc91f139d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d5:b8:a4:68:00:e8:25:97:d2:bb:1c:e1:ba:
95:09:55:73:07:45:66:fb:23:93:dd:22:d7:ea:b2:
bf:cd:38:91:cc:2e:f6:c5:3d:a0:87:93:d8:03:cb:
43:68:0a:fa:70:97:4e:87:4d:0f:25:fd:b8:20:6d:
10:31:e4:c5:39:ad:04:c9:5a:32:21:c4:f5:fd:21:
72:98:f0:76:b9:e5:07:df:cd:69:7f:c6:70:88:0a:
e3:67:ac:f5:52:65:7a:3a:33:df:5a:80:f5:81:d7:
0b:84:0d:3b:bc:c2:c5:b5:06:4c:37:15:58:f6:6f:
1c:33:df:75:00:6d:82:40:86:df:cb:6d:ad:f6:ba:
bd:be:e0:70:f8:4b:0c:42:d6:f2:50:90:af:62:21:
18:32:86:b7:8b:57:e8:fc:dc:e1:94:41:ca:d6:3f:
12:78:bd:5c:68:bf:82:b6:dc:89:32:3f:63:93:b3:
b0:14:72:6f:10:16:a6:33:c5:22:e8:f7:2b:77:e3:
20:3f:74:4a:12:68:ef:b9:8d:a0:7d:cd:80:b1:a7:
4c:7c:ff:a9:f3:f6:40:d5:e7:4d:40:3f:08:88:49:
d7:03:ec:57:46:5f:b6:62:ee:54:4b:e1:fd:9e:d0:
d2:3a:27:d1:6a:ad:6e:3d:4f:71:5e:56:93:f2:de:
98:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:C1:FF:E8:E0:E9:60:BC:E7:A9:25:D8:7B:9A:9E:DC:C9:1F:13:9D
X509v3 Authority Key Identifier:
keyid:FC:98:31:37:04:2F:C8:C4:92:17:07:D4:EB:6D:A5:F6:C4:A7:9A:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JgxNwQvyMSSFwfU622l9sSnmls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/7sH_6ODpYLznqSXYe5qe3MkfE50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/_JgxNwQvyMSSFwfU622l9sSnmls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.26.192.0/19
212.236.0.0/16
IPv6:
2a02:2750::/32
Signature Algorithm: sha256WithRSAEncryption
2c:aa:35:27:f1:16:17:8f:3b:b9:25:b3:27:fb:70:7c:87:0c:
a0:b3:5b:42:66:30:f9:a3:45:d1:3b:41:47:8f:3d:b8:81:74:
87:77:37:ed:b5:cf:d6:5e:2a:37:e8:29:06:f8:f1:5d:09:b3:
fd:9f:ad:0d:a8:76:1f:cc:7c:1d:3d:90:98:24:ec:6d:ac:25:
2b:6a:93:a7:fe:6f:43:4d:b9:13:30:7a:b9:2f:c9:81:eb:6e:
6d:83:3d:69:3f:15:b5:37:e4:a9:2b:56:91:bf:a9:ff:a1:54:
0a:ce:44:73:9b:34:8c:41:a3:12:44:8d:2c:0d:30:e0:22:52:
63:bd:0b:be:0e:5f:5e:c2:fc:ac:b4:65:04:53:02:dc:c2:f6:
b9:fd:e1:43:7e:dd:82:b5:9e:2f:16:8b:69:62:9e:7d:9e:eb:
52:37:da:d8:bc:d3:5a:de:e0:d0:47:5c:88:cd:e9:87:00:78:
f2:34:26:40:90:48:2d:4f:63:0d:04:74:73:c8:64:74:d2:b5:
a9:91:7c:14:78:1d:23:f4:fe:00:a8:fb:2a:5d:2f:f3:f4:1c:
07:60:57:83:d9:ad:79:0e:32:c2:03:6a:af:d8:9f:18:47:7b:
8f:01:a5:3e:ba:54:6b:b7:47:8f:33:80:44:69:f3:0d:83:90:
92:25:50:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:30:55 2024 by rpki-client on console.sobornost.net