Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/1-u7LZh3hFyR7a3F-a-eZJsqUnPw.roa
File: 1-u7LZh3hFyR7a3F-a-eZJsqUnPw.roa (raw, json)
Hash identifier: /JzvqyU5HnTrJmC7CWrOxBG9Z2g/dfu2z/AyIkbo5wA=
Subject key identifier: FA:EE:CB:66:1D:E1:17:24:7B:6B:71:7E:6B:E7:99:26:CA:94:9C:FC
Certificate issuer: /CN=99e7209a8c9b176fbf623edf3ee0b82007fc2c40
Certificate serial: 018572E81EEFCA96653F7CBEAC58152FF468
Authority key identifier: 99:E7:20:9A:8C:9B:17:6F:BF:62:3E:DF:3E:E0:B8:20:07:FC:2C:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mecgmoybF2-_Yj7fPuC4IAf8LEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/1-u7LZh3hFyR7a3F-a-eZJsqUnPw.roa
Signing time: Mon 02 Jan 2023 14:34:52 +0000
ROA not before: Mon 02 Jan 2023 14:34:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43612
IP address blocks: 146.255.94.0/23 maxlen: 23
31.11.64.0/21 maxlen: 21
217.16.88.0/22 maxlen: 22
217.16.94.0/24 maxlen: 24
217.16.92.0/23 maxlen: 23
31.11.80.0/21 maxlen: 21
212.110.92.0/23 maxlen: 23
146.255.75.0/24 maxlen: 24
146.255.73.0/24 maxlen: 24
146.255.74.0/24 maxlen: 24
94.100.96.0/20 maxlen: 20
185.80.164.0/22 maxlen: 22
185.100.245.0/24 maxlen: 24
185.100.244.0/24 maxlen: 24
185.5.4.0/22 maxlen: 22
217.196.192.0/20 maxlen: 20
31.11.120.0/21 maxlen: 21
188.44.2.0/24 maxlen: 24
188.44.7.0/24 maxlen: 24
188.44.6.0/24 maxlen: 24
78.157.0.0/19 maxlen: 22
31.3.94.0/24 maxlen: 24
31.3.93.0/24 maxlen: 24
109.69.40.0/21 maxlen: 21
178.249.112.0/21 maxlen: 21
185.89.246.0/23 maxlen: 24
185.89.244.0/22 maxlen: 22
92.53.0.0/18 maxlen: 23
78.157.16.0/22 maxlen: 22
2a01:b780::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:e8:1e:ef:ca:96:65:3f:7c:be:ac:58:15:2f:f4:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99e7209a8c9b176fbf623edf3ee0b82007fc2c40
Validity
Not Before: Jan 2 14:34:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=faeecb661de117247b6b717e6be79926ca949cfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e2:31:e2:27:df:9b:a4:e4:f2:f2:0b:2a:c7:
31:d4:20:93:b7:5a:70:3c:8a:c0:f2:85:61:3f:92:
67:e2:17:4b:4e:6b:1e:a5:49:8a:32:55:c5:f0:48:
85:0f:d8:c7:f7:a6:04:d1:7f:96:22:b1:4d:cf:83:
eb:6c:bd:fa:ad:a4:58:0d:98:b0:5f:e0:1c:6f:1e:
b8:f5:d6:60:e5:07:d4:fe:e5:f6:2c:4e:31:26:61:
25:4c:4d:7e:ef:63:34:e1:e8:b2:eb:08:2d:b4:2e:
41:0e:e4:70:83:92:6a:5e:a3:14:21:60:e6:ed:75:
18:70:d6:9d:af:48:ff:58:f6:e7:b6:d2:44:47:60:
50:c5:21:0d:51:14:ce:ef:14:c7:ab:4c:69:e3:c5:
88:59:a2:06:8a:c1:f1:84:a9:2d:6d:a6:9e:28:14:
d6:82:fc:8b:ec:2b:e2:eb:fc:e2:d7:1b:c0:7f:65:
3d:04:9b:c5:bf:b7:65:a4:bf:b7:0d:51:f1:38:22:
4a:2c:d0:94:19:01:61:c5:d7:57:e9:7d:59:18:63:
43:86:12:da:99:2f:fc:a6:26:87:22:a0:e0:2e:9c:
17:ee:6d:92:3d:ed:6c:9d:46:d9:aa:a4:1f:08:c1:
4c:64:f0:e4:27:31:7f:77:79:d8:4a:63:47:93:42:
45:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:EE:CB:66:1D:E1:17:24:7B:6B:71:7E:6B:E7:99:26:CA:94:9C:FC
X509v3 Authority Key Identifier:
keyid:99:E7:20:9A:8C:9B:17:6F:BF:62:3E:DF:3E:E0:B8:20:07:FC:2C:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mecgmoybF2-_Yj7fPuC4IAf8LEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/1-u7LZh3hFyR7a3F-a-eZJsqUnPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/mecgmoybF2-_Yj7fPuC4IAf8LEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.3.93.0-31.3.94.255
31.11.64.0/21
31.11.80.0/21
31.11.120.0/21
78.157.0.0/19
92.53.0.0/18
94.100.96.0/20
109.69.40.0/21
146.255.73.0-146.255.75.255
146.255.94.0/23
178.249.112.0/21
185.5.4.0/22
185.80.164.0/22
185.89.244.0/22
185.100.244.0/23
188.44.2.0/24
188.44.6.0/23
212.110.92.0/23
217.16.88.0-217.16.94.255
217.196.192.0/20
IPv6:
2a01:b780::/32
Signature Algorithm: sha256WithRSAEncryption
94:bf:c1:9a:75:36:ee:68:b3:a7:45:84:5d:7d:aa:62:81:26:
cc:ba:34:b9:7d:55:2e:22:c8:da:5a:c8:f0:9d:c6:f6:f1:e1:
45:38:0a:7a:85:4e:8d:13:08:91:7f:c9:64:bb:58:b5:34:b9:
38:23:da:98:cd:1d:6c:b0:39:cc:8e:b8:e4:30:2f:17:8a:01:
a2:8a:a5:74:47:bf:93:d7:e3:c0:41:30:b1:5a:17:96:8c:09:
ca:d6:a2:3e:94:8b:af:c8:d9:a3:54:d3:5f:78:87:65:de:dc:
cf:fe:5c:f0:24:09:00:0a:4e:89:06:35:14:d1:58:85:d2:0d:
47:1b:01:d6:48:3d:55:07:cf:01:ff:bf:90:ca:fc:29:22:db:
ad:e9:50:c7:5b:91:a2:c5:42:34:5e:c2:10:01:dc:eb:23:35:
30:10:d4:bf:5a:88:13:83:84:8b:84:d6:7c:84:9e:61:87:87:
cc:be:77:9a:76:3c:f5:fd:32:56:e6:62:c0:ea:e8:d6:40:57:
d8:9e:01:d5:26:0c:1b:fb:f0:37:04:a9:f5:98:27:39:42:93:
3c:e9:d7:37:58:b3:c9:6b:14:db:82:65:d0:e6:a0:8d:3c:a7:
14:f8:59:03:db:d1:7c:69:87:d6:89:7c:9b:b3:41:a2:6c:7f:
4c:b9:f0:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 18:00:51 2024 by rpki-client on console.sobornost.net