Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/X9yd2wnUWVFQ2OUvivZSPSbiViI.roa
File: X9yd2wnUWVFQ2OUvivZSPSbiViI.roa (raw, json)
Hash identifier: S8Nyz01fa8ScpBFBQv3dxrL5xypQUdWKIKbDtHmuUP0=
Subject key identifier: 5F:DC:9D:DB:09:D4:59:51:50:D8:E5:2F:8A:F6:52:3D:26:E2:56:22
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 018709FBC8C529BD80FE2F10005AD0AD9EF7
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/X9yd2wnUWVFQ2OUvivZSPSbiViI.roa
Signing time: Wed 22 Mar 2023 15:41:48 +0000
ROA not before: Wed 22 Mar 2023 15:41:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211936
IP address blocks: 46.243.76.0/22 maxlen: 22
92.119.164.0/22 maxlen: 22
193.42.60.0/22 maxlen: 22
77.83.32.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:09:fb:c8:c5:29:bd:80:fe:2f:10:00:5a:d0:ad:9e:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Mar 22 15:41:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5fdc9ddb09d4595150d8e52f8af6523d26e25622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e1:79:17:5e:40:07:d1:e9:bd:41:41:a2:35:
ed:3f:9c:78:22:84:ff:3c:94:28:b2:bc:c8:4e:78:
df:1f:fb:dd:6f:4e:6c:6f:db:df:c3:42:82:4b:7b:
0d:98:fa:e7:62:50:04:56:82:06:00:26:9a:57:a4:
f3:31:a6:e1:8d:48:64:10:70:70:59:3f:7c:b6:f6:
13:06:91:4f:c2:49:39:e2:85:09:18:15:1b:5a:c3:
ae:2b:fe:34:41:6a:28:1b:8f:4f:93:96:c2:7b:44:
b2:0c:0a:da:03:09:40:56:a2:d3:51:58:67:c0:60:
82:32:03:0a:6a:d8:8c:92:dc:9c:56:f1:14:9c:83:
0d:a8:46:c3:00:8e:dc:6c:9d:df:31:fb:d8:9e:88:
79:95:3a:a3:77:99:90:a0:8d:9f:68:4f:1d:51:54:
8e:c0:9d:b8:e7:bc:a1:11:4c:12:6f:e8:56:28:e0:
89:93:6f:04:ec:8c:58:35:20:74:60:f4:95:a9:dd:
f3:df:50:e2:52:e9:e2:3f:44:fb:e1:de:59:37:06:
d7:8a:d7:eb:dd:25:3e:b3:af:48:b6:a8:ed:ad:82:
fe:69:70:db:20:3e:56:62:1f:41:50:8b:49:58:cc:
e8:41:e3:66:c0:70:44:32:b4:7d:87:e0:3f:6f:07:
06:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:DC:9D:DB:09:D4:59:51:50:D8:E5:2F:8A:F6:52:3D:26:E2:56:22
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/X9yd2wnUWVFQ2OUvivZSPSbiViI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.76.0/22
77.83.32.0/22
92.119.164.0/22
193.42.60.0/22
Signature Algorithm: sha256WithRSAEncryption
50:df:ac:20:8a:6f:97:30:89:a1:b1:d8:f9:42:54:00:d8:72:
ab:b5:a5:15:4f:b2:27:a4:7c:ba:c1:b5:ee:a9:b6:de:a5:85:
a0:db:d3:81:fb:af:a0:b0:c7:9a:e9:2b:ba:5b:01:f7:2c:68:
c2:7a:4a:12:8f:5e:c3:3d:58:f3:3b:f9:9f:b8:a6:7f:1f:95:
4c:ab:cf:0d:e8:53:83:2a:49:c8:e3:5b:11:96:e7:fd:03:72:
29:8c:17:a6:ea:46:ba:42:71:32:1b:4a:e0:f0:d1:3b:0d:ea:
bf:e5:43:db:09:a2:3f:89:83:4a:49:ec:e9:80:c8:42:23:37:
0d:0c:24:a2:bb:4f:0d:7a:1c:5f:f0:c4:aa:0c:41:85:32:da:
2b:80:30:da:69:78:d1:1d:29:0f:0e:46:70:48:a9:e9:34:0b:
c2:65:60:80:bd:65:42:52:de:c5:0c:f4:9b:a2:0d:bc:c8:f6:
5c:73:55:85:01:d1:ef:e0:14:66:f0:25:cf:dd:74:54:27:d6:
34:cd:a7:2f:72:02:37:aa:70:80:8b:b2:d4:8a:03:a5:a6:63:
16:83:b0:23:c2:96:aa:08:d0:c0:10:22:3a:16:a9:b5:e4:53:
e0:8f:f4:c6:90:dd:f7:7c:a1:a1:2a:70:27:53:0a:46:b7:66:
58:96:f0:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 2 09:25:18 2023 by rpki-client on console-fra.rpki-client.org