Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/a9GxIQIC-wIKmAMxrSs6iDYgDP4.roa
File: a9GxIQIC-wIKmAMxrSs6iDYgDP4.roa (raw, json)
Hash identifier: 2kqNyTROn4UM/rKScbZByj4g5MwnvRMp90VMW7I054Y=
Subject key identifier: 6B:D1:B1:21:02:02:FB:02:0A:98:03:31:AD:2B:3A:88:36:20:0C:FE
Certificate issuer: /CN=cfeace714c29568ef197007b141d12758cc415d5
Certificate serial: 018A211B6F23400B428FE1F523C6DA88282D
Authority key identifier: CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/a9GxIQIC-wIKmAMxrSs6iDYgDP4.roa
Signing time: Wed 23 Aug 2023 06:36:00 +0000
ROA not before: Wed 23 Aug 2023 06:36:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1257
IP address blocks: 188.65.152.0/21 maxlen: 24
185.57.168.0/22 maxlen: 24
185.56.212.0/22 maxlen: 24
193.254.192.0/23 maxlen: 24
193.138.74.0/24 maxlen: 24
2a01:4400::/32 maxlen: 48
2a02:5120::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:21:1b:6f:23:40:0b:42:8f:e1:f5:23:c6:da:88:28:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfeace714c29568ef197007b141d12758cc415d5
Validity
Not Before: Aug 23 06:36:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6bd1b1210202fb020a980331ad2b3a8836200cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4f:3d:54:b4:f7:ea:33:47:ab:d7:f6:b9:06:
42:dd:81:52:c1:e2:87:5c:3b:f3:80:9b:6e:a8:2d:
af:04:c1:78:5e:0c:b4:bb:a3:bb:4f:c0:d1:c8:a6:
f0:ba:92:d0:94:e1:a3:a4:29:fa:dc:21:50:e1:ce:
cc:00:f3:78:aa:0c:c1:90:e6:05:1d:12:b6:85:d6:
f9:b3:4a:01:c9:55:69:85:ad:cf:45:f7:7d:a3:21:
e9:c5:7d:95:f3:80:5c:74:c8:ad:30:86:4a:37:03:
a5:ff:93:29:0b:ef:3c:5d:f7:f7:41:a6:fa:db:32:
68:9e:23:d2:44:3f:23:a0:ff:df:f9:78:31:f9:f4:
79:09:8e:da:62:ba:c1:5e:cb:ad:af:f2:d2:7b:2c:
2e:eb:16:a9:b3:38:be:c5:73:39:65:ea:e5:f3:87:
08:ee:42:5e:50:ee:25:e3:c8:2f:54:c3:15:91:68:
26:2f:7f:ca:71:6b:96:fb:c4:88:da:e2:45:30:29:
7c:ee:28:fc:45:9b:76:b3:71:51:1d:9e:44:c9:5a:
40:28:b2:fc:1e:d4:00:d2:2f:4d:dd:70:fa:16:a5:
16:ae:e3:61:b1:b4:8d:09:aa:88:dc:f1:e5:b2:8e:
1d:ce:52:6b:ff:c5:12:cf:77:ab:67:2c:a5:a8:d0:
a8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D1:B1:21:02:02:FB:02:0A:98:03:31:AD:2B:3A:88:36:20:0C:FE
X509v3 Authority Key Identifier:
keyid:CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/a9GxIQIC-wIKmAMxrSs6iDYgDP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.56.212.0/22
185.57.168.0/22
188.65.152.0/21
193.138.74.0/24
193.254.192.0/23
IPv6:
2a01:4400::/32
2a02:5120::/32
Signature Algorithm: sha256WithRSAEncryption
75:8d:da:ba:c5:a4:56:0f:9c:4e:9e:7b:2b:35:29:7e:f9:14:
84:7f:7e:cc:2b:21:92:87:07:62:22:9a:19:44:3c:d4:cf:95:
d1:28:39:7f:fe:1b:fe:c1:47:af:30:ab:a4:7b:23:72:8a:2b:
76:90:d7:b0:63:96:4f:b6:b4:f5:19:16:79:f9:ea:44:69:fd:
fa:4c:0b:ac:c0:d4:87:5f:67:8f:99:5c:6d:61:05:2d:38:e7:
31:b8:bf:3a:f4:1d:e8:81:d9:ee:e4:f7:19:7d:38:b6:a7:32:
43:b5:6c:a3:2a:65:5d:8c:7d:25:aa:80:15:8c:eb:2a:d8:1b:
33:e6:ef:ce:39:11:89:2c:d6:8d:b1:e6:4a:35:a6:d7:49:8c:
87:d7:5a:d5:08:19:ff:cb:ae:4a:8a:08:22:5d:94:7e:cf:af:
36:1d:c4:04:e3:f6:9c:d6:ab:dd:5e:45:42:df:0c:8e:f4:11:
2a:3b:5d:52:bf:ae:02:64:5b:30:a8:95:91:68:f3:4d:a6:68:
e5:02:66:86:b2:22:3a:83:05:3f:b3:0c:2b:63:00:a0:2a:87:
89:fe:37:15:65:3b:e9:4f:93:05:04:6f:7b:66:a2:a2:83:66:
ac:65:bf:8a:54:38:a6:17:21:8c:c2:54:f8:cd:fa:65:4a:ed:
95:1e:43:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:45 2023 by rpki-client on console.sobornost.net