Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/vpfQuPshTmO9xOyh1zfIXFGiK-w.roa
File: vpfQuPshTmO9xOyh1zfIXFGiK-w.roa (raw, json)
Hash identifier: 1X4GcLCHd1JZCWNYJn2Vb577y6tY+UnY5BbN0L+v/Kw=
Subject key identifier: BE:97:D0:B8:FB:21:4E:63:BD:C4:EC:A1:D7:37:C8:5C:51:A2:2B:EC
Certificate issuer: /CN=7e080bab55bf3473188c20c7366a6cb044c7195c
Certificate serial: 018A3FC91E15AB14477F50C7E9C1EE7B51C0
Authority key identifier: 7E:08:0B:AB:55:BF:34:73:18:8C:20:C7:36:6A:6C:B0:44:C7:19:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fggLq1W_NHMYjCDHNmpssETHGVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/vpfQuPshTmO9xOyh1zfIXFGiK-w.roa
Signing time: Tue 29 Aug 2023 05:34:19 +0000
ROA not before: Tue 29 Aug 2023 05:34:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39563
IP address blocks: 185.231.16.0/24 maxlen: 24
185.231.17.0/24 maxlen: 24
185.231.18.0/24 maxlen: 24
185.231.19.0/24 maxlen: 24
85.8.131.0/24 maxlen: 24
2a0c:3900::/29 maxlen: 36
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3f:c9:1e:15:ab:14:47:7f:50:c7:e9:c1:ee:7b:51:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e080bab55bf3473188c20c7366a6cb044c7195c
Validity
Not Before: Aug 29 05:34:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be97d0b8fb214e63bdc4eca1d737c85c51a22bec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f9:b0:3e:e6:58:a5:07:3c:3b:8d:1a:bf:95:
07:0b:f9:c6:fa:50:cf:f5:2c:96:41:bb:e3:2e:cf:
75:98:35:9b:b7:ce:f0:ba:49:da:7f:6b:71:9a:ae:
b0:75:fe:eb:75:80:4b:e0:0a:cf:7d:86:d4:b8:58:
57:70:62:dd:3a:91:0c:60:12:55:f6:fb:82:23:d2:
ef:7c:09:25:e9:66:1b:d3:47:2e:c5:c1:93:cc:82:
6e:0b:36:75:f5:be:c7:cf:f0:57:df:5d:3b:7a:99:
9c:6c:23:f3:76:f5:4b:97:f4:8e:87:9a:39:12:7d:
a7:ad:0f:5e:97:ba:f7:79:50:6e:0a:ea:37:04:09:
69:87:e7:e4:1c:0b:60:f7:ad:d6:f7:08:be:76:23:
25:d1:4d:3b:12:c5:db:bc:40:dc:b7:19:b2:b9:4b:
8a:ba:a1:68:1f:11:32:bd:9d:64:7c:f9:3d:c7:8d:
e6:1f:64:de:66:7f:6d:ec:e8:dd:d7:11:48:a1:a2:
dc:43:8b:02:da:69:54:d4:5f:c5:2a:6d:e3:ce:31:
86:58:c1:e9:7b:c9:9b:3b:48:fb:7f:92:3a:15:33:
96:13:c8:d1:4f:61:32:0a:8b:ce:74:d0:e6:19:96:
bf:c9:43:ae:a3:85:dd:da:18:71:f6:52:04:00:16:
6d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:97:D0:B8:FB:21:4E:63:BD:C4:EC:A1:D7:37:C8:5C:51:A2:2B:EC
X509v3 Authority Key Identifier:
keyid:7E:08:0B:AB:55:BF:34:73:18:8C:20:C7:36:6A:6C:B0:44:C7:19:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fggLq1W_NHMYjCDHNmpssETHGVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/vpfQuPshTmO9xOyh1zfIXFGiK-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/fggLq1W_NHMYjCDHNmpssETHGVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.8.131.0/24
185.231.16.0/22
IPv6:
2a0c:3900::/29
Signature Algorithm: sha256WithRSAEncryption
3e:53:84:06:f7:5d:03:c6:79:37:e7:ab:da:1b:87:71:1b:18:
a8:7f:f9:c3:d9:e7:f5:34:e5:4c:2b:dc:a6:ef:c1:cf:5d:ce:
78:cb:14:48:2a:08:35:79:ae:72:90:6c:50:0c:ae:7b:59:7d:
9f:f4:60:dc:1f:7c:f5:b2:d9:ea:03:ff:73:28:75:5e:c7:c1:
49:d5:c3:dc:b5:db:0a:02:b3:6d:a5:29:3b:f2:81:33:3c:9e:
48:8e:4a:10:49:ee:d0:0c:42:f7:4d:c7:0b:17:20:ed:19:34:
81:fd:87:6b:b3:6a:37:30:a3:5c:58:9c:4e:09:1c:82:3a:6e:
c3:bd:aa:37:43:18:c7:72:c8:c1:ce:48:f8:13:ed:2e:be:fc:
12:38:ea:c8:39:da:85:18:df:f8:10:c5:9b:36:bd:90:1c:b6:
37:3e:14:d0:df:a7:70:da:dc:60:a9:dd:d9:d4:fb:d0:45:e9:
38:2c:58:63:80:cf:85:7a:49:73:75:d5:f7:e3:82:71:8a:15:
86:f0:e8:f5:22:15:11:c9:62:6a:a5:d1:71:3a:6e:f8:7f:51:
49:3a:eb:4c:0e:fd:f2:f4:d2:48:8f:3c:f5:56:75:c0:8f:61:
6c:b7:87:3f:5f:92:5e:e4:06:cf:08:81:a6:03:44:37:22:ab:
76:dc:12:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:21 2023 by rpki-client on console.sobornost.net