Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/fqiiF7XEnwbDTcD9QnJ7J08t7KU.roa
File: fqiiF7XEnwbDTcD9QnJ7J08t7KU.roa (raw, json)
Hash identifier: Dj902IWTOjknmkOfstcokS6CGG4oIpq8jBAlL61AIXA=
Subject key identifier: 7E:A8:A2:17:B5:C4:9F:06:C3:4D:C0:FD:42:72:7B:27:4F:2D:EC:A5
Certificate issuer: /CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Certificate serial: 018CB4A89D31FA9277874F97E8A11402CE7D
Authority key identifier: 69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/fqiiF7XEnwbDTcD9QnJ7J08t7KU.roa
Signing time: Fri 29 Dec 2023 08:19:58 +0000
ROA not before: Fri 29 Dec 2023 08:19:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59711
IP address blocks: 185.80.54.0/23 maxlen: 23
185.174.133.0/24 maxlen: 24
185.80.52.0/23 maxlen: 23
185.174.135.0/24 maxlen: 24
91.193.18.0/24 maxlen: 24
185.117.88.0/23 maxlen: 23
185.117.90.0/23 maxlen: 23
77.83.197.0/24 maxlen: 24
77.83.196.0/24 maxlen: 24
77.83.198.0/24 maxlen: 24
195.95.155.0/24 maxlen: 24
185.235.137.0/24 maxlen: 24
185.235.138.0/24 maxlen: 24
79.141.174.0/23 maxlen: 23
89.150.57.0/24 maxlen: 24
185.104.192.0/24 maxlen: 24
185.104.194.0/24 maxlen: 24
185.104.193.0/24 maxlen: 24
193.42.36.0/24 maxlen: 24
193.42.39.0/24 maxlen: 24
5.149.248.0/23 maxlen: 23
5.149.254.0/23 maxlen: 23
79.141.164.0/23 maxlen: 23
79.141.172.0/24 maxlen: 24
185.81.114.0/23 maxlen: 23
185.81.114.0/24 maxlen: 24
185.81.115.0/24 maxlen: 24
2a01:8640:12::/48 maxlen: 48
2a01:8640:6::/48 maxlen: 48
2a01:8640:f::/48 maxlen: 48
2a01:8640:a::/48 maxlen: 48
2a01:8640::/48 maxlen: 48
2a01:8640:2::/48 maxlen: 48
2a01:8640:11::/48 maxlen: 48
2a01:8640:13::/48 maxlen: 48
2a01:8640:9::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b4:a8:9d:31:fa:92:77:87:4f:97:e8:a1:14:02:ce:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Validity
Not Before: Dec 29 08:19:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ea8a217b5c49f06c34dc0fd42727b274f2deca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:d2:56:2f:a4:30:ed:a2:76:4d:b8:48:ba:4d:
9e:46:4c:f0:2a:32:d0:06:ae:9c:e9:f5:d1:49:7f:
8c:41:23:ef:70:f0:4d:47:b8:64:80:53:18:2f:4b:
89:13:fd:ae:fc:6b:81:f5:0d:e4:08:79:11:f4:9a:
ee:01:49:5c:4e:36:9f:ee:60:61:3f:69:ff:e1:fc:
ac:a2:b9:da:90:f2:88:d9:bd:64:68:31:e1:96:0f:
8b:72:8c:0e:1b:09:c0:56:a6:22:09:26:7b:fa:7c:
27:5c:46:72:81:19:39:67:9f:17:95:4e:ff:46:01:
0e:10:d2:20:0b:a3:6b:67:e7:98:2e:af:a8:fb:bf:
57:a6:4a:35:78:56:20:f0:76:55:96:df:95:ed:a1:
69:71:63:4b:a0:a0:17:65:5b:a7:1f:47:df:0d:90:
48:d8:2a:d5:6b:57:83:13:fb:dc:df:d6:02:39:6d:
68:eb:2e:ca:02:3a:a2:a9:e2:b8:c8:12:6a:2b:56:
d2:9c:53:5e:25:42:d2:09:09:13:d9:a7:07:2a:48:
84:76:7c:71:d4:3a:bf:62:28:68:7a:cb:40:68:ed:
e1:39:f2:7f:42:94:ab:17:fb:f3:73:40:d8:ae:8f:
8a:c1:3d:ed:3e:fb:57:5d:33:5b:a6:8a:34:3d:9f:
cb:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A8:A2:17:B5:C4:9F:06:C3:4D:C0:FD:42:72:7B:27:4F:2D:EC:A5
X509v3 Authority Key Identifier:
keyid:69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/fqiiF7XEnwbDTcD9QnJ7J08t7KU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.248.0/23
5.149.254.0/23
77.83.196.0-77.83.198.255
79.141.164.0/23
79.141.172.0/24
79.141.174.0/23
89.150.57.0/24
91.193.18.0/24
185.80.52.0/22
185.81.114.0/23
185.104.192.0-185.104.194.255
185.117.88.0/22
185.174.133.0/24
185.174.135.0/24
185.235.137.0-185.235.138.255
193.42.36.0/24
193.42.39.0/24
195.95.155.0/24
IPv6:
2a01:8640::/48
2a01:8640:2::/48
2a01:8640:6::/48
2a01:8640:9::-2a01:8640:a:ffff:ffff:ffff:ffff:ffff
2a01:8640:f::/48
2a01:8640:11::-2a01:8640:13:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
30:2f:8b:70:06:2d:2c:fc:0d:1a:ef:9a:e2:82:11:ec:6b:b0:
a5:15:63:12:14:13:35:c0:96:af:a2:06:6d:a5:5d:a8:87:b6:
58:54:ec:d0:39:e2:35:94:df:9f:a0:61:17:82:75:e9:70:3a:
8b:d8:d6:67:a1:ee:03:82:12:c1:65:52:0e:b6:84:92:54:c6:
e8:78:dc:aa:b1:72:7e:d4:23:6e:c2:ec:c4:5e:6b:3f:c8:1c:
31:d7:de:af:9e:d8:4a:01:35:63:ee:9d:90:41:51:b3:b8:ba:
2b:6d:ca:8b:b2:e1:ea:9c:28:de:41:ce:2f:9c:0c:98:37:ae:
9b:ce:b0:e1:ca:9a:46:77:7a:05:fe:fb:05:72:33:d3:24:37:
f6:0d:36:4a:53:73:4e:77:23:92:23:a2:83:18:7e:3c:28:63:
24:1f:4d:68:df:73:46:c6:f0:01:ee:d5:dc:21:c0:ac:ad:c3:
f4:59:d5:32:ea:4f:0e:8d:60:1a:5f:f6:6a:da:34:91:c0:6b:
e1:4f:84:17:17:69:59:62:09:fa:a7:e3:09:6c:6e:dd:3c:4e:
1a:52:cc:05:ac:8b:9b:92:67:9f:24:45:1b:6e:87:8f:54:ad:
24:3d:f7:8c:c2:5f:47:f2:92:db:5c:d5:15:44:2c:55:76:59:
62:bb:47:0a
-----BEGIN CERTIFICATE-----
MIIF1DCCBLygAwIBAgISAYy0qJ0x+pJ3h0+X6KEUAs59MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5MTI0MmMzM2JjMmUyZTllNDU4NTBhMGZjNjRhYjJjNzUw
NmE0YjgwHhcNMjMxMjI5MDgxOTU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZWE4YTIxN2I1YzQ5ZjA2YzM0ZGMwZmQ0MjcyN2IyNzRmMmRlY2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9tJWL6Qw7aJ2TbhIuk2eRkzwKjLQ
Bq6c6fXRSX+MQSPvcPBNR7hkgFMYL0uJE/2u/GuB9Q3kCHkR9JruAUlcTjaf7mBh
P2n/4fysornakPKI2b1kaDHhlg+LcowOGwnAVqYiCSZ7+nwnXEZygRk5Z58XlU7/
RgEOENIgC6NrZ+eYLq+o+79Xpko1eFYg8HZVlt+V7aFpcWNLoKAXZVunH0ffDZBI
2CrVa1eDE/vc39YCOW1o6y7KAjqiqeK4yBJqK1bSnFNeJULSCQkT2acHKkiEdnxx
1Dq/YihoestAaO3hOfJ/QpSrF/vzc0DYro+KwT3tPvtXXTNbpoo0PZ/L9QIDAQAB
o4IC4DCCAtwwHQYDVR0OBBYEFH6oohe1xJ8Gw03A/UJyeydPLeylMB8GA1UdIwQY
MBaAFGkSQsM7wuLp5FhQoPxkqyx1BqS4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVJKQ3d6dkM0dW5rV0ZDZ19HU3JMSFVHcExnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82MzU2YjktYzQ5Zi00YjRkLThlMjkt
MzYyZmZlOGVlMjcwLzEvZnFpaUY3WEVud2JEVGNEOVFuSjdKMDh0N0tVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy82MzU2YjktYzQ5Zi00YjRkLThlMjktMzYyZmZlOGVlMjcw
LzEvYVJKQ3d6dkM0dW5rV0ZDZ19HU3JMSFVHcExnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIH1BggrBgEFBQcBBwEB/wSB5TCB4jCBiwQCAAEwgYQDBAEF
lfgDBAEFlf4wDAMEAk1TxAMEAE1TxgMEAU+NpAMEAE+NrAMEAU+NrgMEAFmWOQME
AFvBEgMEArlQNAMEAblRcjAMAwQGuWjAAwQAuWjCAwQCuXVYAwQAua6FAwQAua6H
MAwDBAC564kDBAC564oDBADBKiQDBADBKicDBADDX5swUgQCAAIwTAMHACoBhkAA
AAMHACoBhkAAAgMHACoBhkAABjASAwcAKgGGQAAJAwcAKgGGQAAKAwcAKgGGQAAP
MBIDBwAqAYZAABEDBwIqAYZAABAwDQYJKoZIhvcNAQELBQADggEBADAvi3AGLSz8
DRrvmuKCEexrsKUVYxIUEzXAlq+iBm2lXaiHtlhU7NA54jWU35+gYReCdelwOovY
1meh7gOCEsFlUg62hJJUxuh43Kqxcn7UI27C7MReaz/IHDHX3q+e2EoBNWPunZBB
UbO4uittyouy4eqcKN5Bzi+cDJg3rpvOsOHKmkZ3egX++wVyM9MkN/YNNkpTc053
I5IjooMYfjwoYyQfTWjfc0bG8AHu1dwhwKytw/RZ1TLqTw6NYBpf9mraNJHAa+FP
hBcXaVliCfqn4wlsbt08ThpSzAWsi5uSZ58kRRtuh49UrSQ994zCX0fykttc1RVE
LFV2WWK7Rwo=
-----END CERTIFICATE-----
Generated at Tue Jan 2 14:15:01 2024 by rpki-client on console.sobornost.net