Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/rGDAApylj4vqPI_eVHz4xRvUtxM.roa
File: rGDAApylj4vqPI_eVHz4xRvUtxM.roa (raw, json)
Hash identifier: 6X/YPdrXDIpjof8K4Cjt2tOnfx9xj34xZ/n2RQeIFUY=
Subject key identifier: AC:60:C0:02:9C:A5:8F:8B:EA:3C:8F:DE:54:7C:F8:C5:1B:D4:B7:13
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0186929C51ECA4CFE285B5B7C4F89BEB71F9
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/rGDAApylj4vqPI_eVHz4xRvUtxM.roa
Signing time: Mon 27 Feb 2023 11:22:43 +0000
ROA not before: Mon 27 Feb 2023 11:22:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49870
IP address blocks: 194.87.220.0/24 maxlen: 24
193.124.45.0/24 maxlen: 24
194.58.58.0/24 maxlen: 24
193.124.94.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:92:9c:51:ec:a4:cf:e2:85:b5:b7:c4:f8:9b:eb:71:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Feb 27 11:22:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ac60c0029ca58f8bea3c8fde547cf8c51bd4b713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:28:7f:da:b7:a4:79:be:01:75:a1:d4:63:2b:
25:df:94:b6:6d:2e:87:4b:38:3e:81:43:eb:b1:6c:
90:f4:f7:28:b4:4c:1c:20:32:e2:79:90:cb:a2:7d:
d5:25:41:d2:88:29:7a:b0:fc:52:e6:53:84:eb:d5:
42:d6:57:68:99:b9:b3:fc:65:f4:0f:96:fc:80:b2:
db:75:af:47:24:b1:aa:cd:36:ce:64:b3:1f:53:ae:
ad:48:d5:dc:28:b8:05:90:5b:25:de:3b:69:8e:e3:
cb:f5:5e:84:c5:fe:6a:f8:43:49:64:bf:f5:24:78:
77:ca:03:d9:22:27:1b:ef:51:e8:21:e6:ea:99:c6:
9d:76:dc:84:a9:8e:bb:01:6b:a5:84:9f:44:95:ec:
16:f6:26:80:c2:03:95:1c:19:8a:f6:a8:66:d1:ee:
b5:a3:88:aa:1b:b8:86:18:91:58:11:f0:18:5e:eb:
cd:31:f5:03:90:9c:6f:5a:22:52:67:f0:4d:54:40:
1a:dd:18:bf:bc:d8:a1:e2:9f:64:f8:b6:4d:34:8f:
99:c8:04:2e:ae:90:f7:07:e5:8a:44:e4:f6:e9:3e:
04:9a:4a:99:b0:b5:52:10:c3:8b:f1:f0:b9:54:37:
4e:6a:43:2f:2f:fe:77:bc:07:59:93:8b:4c:48:b6:
f3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:60:C0:02:9C:A5:8F:8B:EA:3C:8F:DE:54:7C:F8:C5:1B:D4:B7:13
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/rGDAApylj4vqPI_eVHz4xRvUtxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.45.0/24
193.124.94.0/24
194.58.58.0/24
194.87.220.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:52:24:7c:14:31:6b:3b:ce:a3:8f:14:01:97:e4:ab:35:e1:
a9:6c:fe:53:c8:ed:79:b1:12:67:14:5a:cb:a7:bf:19:5d:43:
c4:a2:1d:82:ad:03:3a:80:d2:fe:4b:22:12:66:0b:cd:85:f8:
21:aa:9b:56:2e:20:1a:04:25:1c:bc:bd:6a:fd:54:32:5c:be:
ea:98:07:c9:46:4c:94:11:d2:14:5a:9a:3a:d4:d6:2c:07:06:
93:1b:71:1e:d3:8e:55:da:ea:94:b7:5d:de:ba:03:15:df:06:
2c:e4:10:f2:2e:83:e4:af:06:e0:d8:3d:f7:98:29:12:bb:07:
62:77:cd:92:b9:ad:83:c5:d9:f3:9c:a7:5d:86:06:55:1f:47:
78:b2:b5:65:27:d2:a3:ea:ad:0a:e4:bc:c5:41:2b:b8:01:3b:
dd:21:5a:04:aa:52:92:a9:e9:c4:45:e5:d2:31:bf:62:04:47:
3f:d8:91:02:2c:f9:39:94:82:a1:d8:d0:89:c6:75:47:8a:e5:
07:0e:c1:a0:5f:83:40:b1:69:ee:3d:65:2d:bc:a7:c6:7a:f6:
0a:ff:6f:cc:ca:4c:ad:74:f1:7b:78:77:be:3b:af:fc:28:fc:
7c:cb:58:0e:c1:97:b2:78:94:5b:fd:d0:03:68:d3:f1:0d:9d:
bc:6d:4e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:06 2023 by rpki-client on console-ams.rpki-client.org