Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/lv6Gvkvn2CXIz95OSuNf0jsh9M4.roa
File: lv6Gvkvn2CXIz95OSuNf0jsh9M4.roa (raw, json)
Hash identifier: B6KaOH91iAs+sDVsIzR8PZmDGgviJ6WtBvPOKYBMpDE=
Subject key identifier: 96:FE:86:BE:4B:E7:D8:25:C8:CF:DE:4E:4A:E3:5F:D2:3B:21:F4:CE
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018756118B94ADD2DA911E1E20D1A87E3153
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/lv6Gvkvn2CXIz95OSuNf0jsh9M4.roa
Signing time: Thu 06 Apr 2023 10:16:42 +0000
ROA not before: Thu 06 Apr 2023 10:16:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3507
IP address blocks: 87.121.45.0/24 maxlen: 24
85.208.139.0/24 maxlen: 24
194.59.31.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:56:11:8b:94:ad:d2:da:91:1e:1e:20:d1:a8:7e:31:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 6 10:16:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=96fe86be4be7d825c8cfde4e4ae35fd23b21f4ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ca:a9:ec:af:1c:e4:36:cf:37:bf:b5:6c:df:
e9:ed:08:78:0c:c8:c2:d0:c9:ce:ec:4d:04:8f:a0:
79:6f:4c:79:aa:54:3f:4f:4c:1a:c9:14:86:9d:81:
b0:b0:3c:0b:22:be:7d:2a:ea:d0:a9:42:0a:ba:df:
d7:ff:5a:07:28:5b:2a:7b:df:5a:eb:97:2b:ec:f5:
75:65:26:9b:58:ee:1b:87:69:a2:c9:65:6a:56:6d:
7f:80:08:c8:c1:b9:3a:6d:3e:70:89:84:17:17:9c:
dc:a2:5c:4e:d0:0f:61:6d:40:bc:f9:4a:0e:d7:e0:
bc:99:be:2a:1a:05:7c:c8:86:a1:9b:6c:47:42:c7:
2e:ea:1e:f0:6f:87:80:c1:18:89:51:30:be:af:58:
65:08:b7:4f:32:41:de:18:4e:0c:b6:b0:80:e4:37:
5d:ed:9a:75:59:c1:73:f4:18:a3:05:62:54:d5:48:
fa:9f:4f:49:51:8d:43:39:5a:dd:b0:e5:94:e9:ba:
20:77:65:b3:28:e9:3a:59:68:20:62:f5:97:92:70:
7f:1d:ef:fa:ae:28:c5:d5:b7:09:e5:9d:91:58:a5:
fe:3c:ae:ea:b1:98:ff:d3:4b:75:30:90:c0:44:75:
42:cd:d7:79:55:8f:de:40:ae:5c:c0:ed:3c:ed:94:
38:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:FE:86:BE:4B:E7:D8:25:C8:CF:DE:4E:4A:E3:5F:D2:3B:21:F4:CE
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/lv6Gvkvn2CXIz95OSuNf0jsh9M4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.139.0/24
87.121.45.0/24
194.59.31.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:a6:5e:be:20:e4:e9:aa:39:f8:62:32:70:1a:29:23:8f:b3:
d1:6f:b0:e3:34:0a:b9:6d:18:be:67:2a:92:1c:ed:18:59:54:
99:9c:09:03:67:92:63:7f:d7:53:0a:65:59:52:88:da:56:a6:
b1:e1:78:4d:f0:c3:68:e9:64:1b:69:5f:73:ea:93:d9:dc:db:
bf:ca:a6:23:20:37:8b:2c:44:ad:15:61:62:1e:c2:df:5e:ce:
56:c8:af:25:34:47:b8:ff:3d:6c:b3:48:93:08:24:63:2c:74:
47:3d:be:30:f0:2e:25:cf:e5:94:50:fc:43:d5:97:ef:5e:be:
f3:c8:42:ea:02:32:2a:1c:71:9c:a4:85:e2:fa:dc:fa:36:8f:
6d:64:ec:d5:97:46:05:cd:a9:98:42:34:72:87:3d:c8:12:9d:
86:bf:0f:00:70:72:82:9f:70:fb:32:2c:a7:f6:52:ea:7c:d8:
80:6a:7a:c9:11:4d:f7:09:1f:e2:24:58:e3:a1:cf:8a:5e:fd:
0d:91:2a:24:29:d0:a7:77:c9:67:42:ba:1b:e5:8a:80:7a:6b:
cd:14:d5:78:b8:1a:a2:fc:db:9c:c5:8e:a2:22:4e:c6:7c:63:
3d:fb:be:f9:78:65:81:5c:7d:c7:1e:89:ae:b1:b0:d2:74:8b:
1c:05:04:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:41 2023 by rpki-client on console-ams.rpki-client.org