Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/FschC6QQev21-9fbJrCwZw5hw7M.roa
File: FschC6QQev21-9fbJrCwZw5hw7M.roa (raw, json)
Hash identifier: tJ9/ogK9/2VhTzRVxp5RDl/3Yqu6L/p6zC9KCyxcwHk=
Subject key identifier: 16:C7:21:0B:A4:10:7A:FD:B5:FB:D7:DB:26:B0:B0:67:0E:61:C3:B3
Certificate issuer: /CN=cfeace714c29568ef197007b141d12758cc415d5
Certificate serial: 018A17E3941418053E5102C25278A8659199
Authority key identifier: CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/FschC6QQev21-9fbJrCwZw5hw7M.roa
Signing time: Mon 21 Aug 2023 11:38:25 +0000
ROA not before: Mon 21 Aug 2023 11:38:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1299
IP address blocks: 185.114.104.0/22 maxlen: 24
185.56.212.0/22 maxlen: 24
45.137.208.0/22 maxlen: 24
81.201.208.0/20 maxlen: 24
2a00:e900::/29 maxlen: 48
2a01:4400::/32 maxlen: 48
2a0b:fd80::/32 maxlen: 48
2a02:5120::/32 maxlen: 48
2a0b:fd82::/32 maxlen: 48
2a0b:fd81::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:17:e3:94:14:18:05:3e:51:02:c2:52:78:a8:65:91:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfeace714c29568ef197007b141d12758cc415d5
Validity
Not Before: Aug 21 11:38:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=16c7210ba4107afdb5fbd7db26b0b0670e61c3b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e4:12:35:d4:29:9f:19:d1:27:e1:40:60:b4:
d7:58:d9:67:69:d2:b7:27:48:2c:1c:87:dc:3d:3d:
4b:04:63:f7:d6:61:d2:20:81:d7:6e:59:17:aa:68:
43:06:75:92:9e:bc:42:52:2d:47:52:3b:95:3b:aa:
71:e4:f3:39:c4:d7:71:4e:ae:ad:52:09:fd:10:c3:
5f:49:77:51:d7:55:7d:2f:9c:21:75:b3:c5:44:2e:
ac:1d:c7:1f:79:38:39:cb:a1:d6:0b:32:6c:9c:f5:
c2:24:1d:ff:a2:d7:88:86:7d:f0:b3:c0:ab:02:a0:
70:43:4f:ed:dc:d7:3c:33:4e:ac:f8:0d:55:ff:41:
2c:07:b8:f0:40:58:3a:1d:8b:f7:c4:e0:90:8e:b1:
60:be:77:f6:5e:5e:22:3d:a7:b0:00:09:eb:03:88:
98:08:b6:ae:33:f5:d8:46:10:33:ec:82:16:21:b6:
3a:7d:21:99:e8:0e:33:4e:ae:dd:52:bd:ac:c5:63:
cb:6e:e0:54:64:84:9d:75:50:a0:3a:45:cc:97:e5:
a3:17:95:aa:e1:84:50:c1:ce:51:c8:0f:ba:7b:e8:
f7:cf:8a:2a:82:fb:dd:fe:9c:a0:93:54:d7:be:f9:
1c:d5:2a:67:ef:80:0b:d7:03:6b:6e:b3:b4:b5:e4:
72:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C7:21:0B:A4:10:7A:FD:B5:FB:D7:DB:26:B0:B0:67:0E:61:C3:B3
X509v3 Authority Key Identifier:
keyid:CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/FschC6QQev21-9fbJrCwZw5hw7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.208.0/22
81.201.208.0/20
185.56.212.0/22
185.114.104.0/22
IPv6:
2a00:e900::/29
2a01:4400::/32
2a02:5120::/32
2a0b:fd80::-2a0b:fd82:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
54:66:da:4a:7a:96:2c:eb:3b:9f:10:92:15:7d:70:45:fa:9f:
16:43:ef:ab:fc:0e:c0:38:b2:92:0b:f4:03:85:57:38:c3:9c:
3d:dd:34:f4:58:1f:a3:0e:2f:28:3e:0b:fb:68:e0:b4:9b:01:
3a:9f:b5:f9:78:26:fe:05:a3:86:1b:78:20:f5:4a:b5:17:ff:
22:c0:99:0d:be:f3:0e:8f:40:01:6f:ed:a5:12:ca:d6:09:d5:
f0:19:65:45:93:c6:78:0e:ac:12:94:f9:42:13:9a:86:c2:e2:
fb:6e:bc:96:e4:f1:91:33:76:d4:06:44:af:22:67:5e:cd:5d:
b3:bd:02:44:ad:b1:f8:3d:73:9f:d0:13:eb:16:a6:16:4b:0e:
29:07:06:2a:c1:20:ef:55:b8:9a:5c:c0:69:0d:9a:fa:2d:7f:
50:c8:3c:3d:74:fa:22:36:36:46:f1:33:5e:77:7f:9b:cd:d8:
b6:e7:4c:74:7f:1c:7a:06:6b:79:9e:5a:b6:4f:b3:e3:47:8d:
81:5d:87:d2:73:11:81:74:31:af:d3:ed:3a:4f:82:9b:76:32:
31:c3:f7:00:d9:36:80:53:9a:ce:18:b4:30:59:b5:03:8d:e5:
98:2a:75:71:81:f9:6c:21:8d:de:ee:33:5a:f0:96:c5:5f:92:
fa:9b:68:46
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgISAYoX45QUGAU+UQLCUnioZZGZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmZWFjZTcxNGMyOTU2OGVmMTk3MDA3YjE0MWQxMjc1OGNj
NDE1ZDUwHhcNMjMwODIxMTEzODI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNmM3MjEwYmE0MTA3YWZkYjVmYmQ3ZGIyNmIwYjA2NzBlNjFjM2IzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeQSNdQpnxnRJ+FAYLTXWNlnadK3
J0gsHIfcPT1LBGP31mHSIIHXblkXqmhDBnWSnrxCUi1HUjuVO6px5PM5xNdxTq6t
Ugn9EMNfSXdR11V9L5whdbPFRC6sHccfeTg5y6HWCzJsnPXCJB3/oteIhn3ws8Cr
AqBwQ0/t3Nc8M06s+A1V/0EsB7jwQFg6HYv3xOCQjrFgvnf2Xl4iPaewAAnrA4iY
CLauM/XYRhAz7IIWIbY6fSGZ6A4zTq7dUr2sxWPLbuBUZISddVCgOkXMl+WjF5Wq
4YRQwc5RyA+6e+j3z4oqgvvd/pygk1TXvvkc1Spn74AL1wNrbrO0teRy6wIDAQAB
o4ICSDCCAkQwHQYDVR0OBBYEFBbHIQukEHr9tfvX2yawsGcOYcOzMB8GA1UdIwQY
MBaAFM/qznFMKVaO8ZcAexQdEnWMxBXVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvei1yT2NVd3BWbzd4bHdCN0ZCMFNkWXpFRmRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9mYzFiZWYtZTcyYi00YTQ1LTk0NjMt
OGZkMzk0YjUzNTdjLzEvRnNjaEM2UVFldjIxLTlmYkpyQ3dadzVodzdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9mYzFiZWYtZTcyYi00YTQ1LTk0NjMtOGZkMzk0YjUzNTdj
LzEvei1yT2NVd3BWbzd4bHdCN0ZCMFNkWXpFRmRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF4GCCsGAQUFBwEHAQH/BE8wTTAeBAIAATAYAwQCLYnQAwQE
UcnQAwQCuTjUAwQCuXJoMCsEAgACMCUDBQMqAOkAAwUAKgFEAAMFACoCUSAwDgMF
ByoL/YADBQAqC/2CMA0GCSqGSIb3DQEBCwUAA4IBAQBUZtpKepYs6zufEJIVfXBF
+p8WQ++r/A7AOLKSC/QDhVc4w5w93TT0WB+jDi8oPgv7aOC0mwE6n7X5eCb+BaOG
G3gg9Uq1F/8iwJkNvvMOj0ABb+2lEsrWCdXwGWVFk8Z4DqwSlPlCE5qGwuL7bryW
5PGRM3bUBkSvImdezV2zvQJErbH4PXOf0BPrFqYWSw4pBwYqwSDvVbiaXMBpDZr6
LX9QyDw9dPoiNjZG8TNed3+bzdi250x0fxx6Bmt5nlq2T7PjR42BXYfScxGBdDGv
0+06T4KbdjIxw/cA2TaAU5rOGLQwWbUDjeWYKnVxgflsIY3e7jNa8JbFX5L6m2hG
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:45 2023 by rpki-client on console.sobornost.net