Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/moB5jCqrayIJTV7_1YQuq8TY8TU.roa
File: moB5jCqrayIJTV7_1YQuq8TY8TU.roa (raw, json)
Hash identifier: l4mGN+Y9CsNmEgWfjKoseErDYiRJfaoafsE2seQ6Khg=
Subject key identifier: 9A:80:79:8C:2A:AB:6B:22:09:4D:5E:FF:D5:84:2E:AB:C4:D8:F1:35
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018949A49BDCD46ECDB6BDF1D0FC6A585B3A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/moB5jCqrayIJTV7_1YQuq8TY8TU.roa
Signing time: Wed 12 Jul 2023 10:27:51 +0000
ROA not before: Wed 12 Jul 2023 10:27:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202685
IP address blocks: 84.54.51.0/24 maxlen: 24
94.103.124.0/24 maxlen: 24
31.13.211.0/24 maxlen: 24
45.128.232.0/24 maxlen: 24
193.35.18.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:49:a4:9b:dc:d4:6e:cd:b6:bd:f1:d0:fc:6a:58:5b:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 12 10:27:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9a80798c2aab6b22094d5effd5842eabc4d8f135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b9:e3:6c:86:de:d0:36:f4:3d:31:30:44:31:
89:2f:de:f1:84:2f:69:1d:73:81:39:26:19:8d:31:
11:7a:f6:39:8a:ad:27:88:8f:b3:96:3c:87:05:a4:
de:f0:7b:4c:6c:83:b1:d3:9e:f6:53:f1:f6:d2:1a:
85:ec:73:43:37:42:fa:5a:3f:a9:94:29:f4:02:64:
f8:71:9e:44:42:d3:4b:0c:b3:b9:64:8a:b7:a1:46:
95:0f:8b:b5:47:37:8b:25:db:e5:32:af:17:64:6b:
7c:3b:45:d4:1d:3f:23:1d:92:6b:df:d6:c6:57:dc:
3f:44:eb:31:0f:fc:82:04:ef:01:0e:0a:7c:2c:2d:
20:fd:7d:2c:8c:8a:52:62:e6:8b:69:c8:7a:28:93:
72:d0:dc:30:16:cd:ba:36:48:df:24:88:46:c4:60:
77:b3:2c:e9:fc:fd:5a:80:7e:64:50:5c:d2:80:a4:
4f:64:1e:05:c2:7d:c0:83:99:9e:05:9b:7f:8d:26:
9f:59:de:23:86:a7:79:77:ec:2b:92:15:85:19:5f:
46:92:14:e3:fc:cf:aa:09:3e:8c:b8:9f:f6:ea:a3:
3f:61:b7:03:e4:64:74:39:e6:78:6d:88:87:4c:8a:
d2:0d:7a:c8:67:c4:0c:08:f1:4e:e3:a7:a8:f9:44:
da:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:80:79:8C:2A:AB:6B:22:09:4D:5E:FF:D5:84:2E:AB:C4:D8:F1:35
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/moB5jCqrayIJTV7_1YQuq8TY8TU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.211.0/24
45.128.232.0/24
84.54.51.0/24
94.103.124.0/24
193.35.18.0/24
Signature Algorithm: sha256WithRSAEncryption
82:52:6b:d3:cd:98:1e:5d:b6:a4:80:00:f1:bf:8e:c7:15:bb:
22:9b:f5:fe:87:34:2d:11:89:d0:cc:7f:8d:c7:86:76:fc:89:
5f:ab:af:84:11:94:10:23:a7:7f:eb:89:f5:fd:2e:f0:a7:f9:
a8:5d:6d:b8:56:94:83:6f:90:6c:80:7c:b1:76:a6:f3:8d:a8:
66:2b:f3:f8:87:45:60:3a:77:15:77:e7:7e:2e:fa:6b:bd:cc:
b5:1f:7b:4b:68:3f:4c:ec:54:f9:e6:76:57:32:7f:ad:51:04:
e6:ef:71:04:8d:7b:50:1b:19:c0:cc:db:c4:94:bd:7e:78:a2:
56:10:0c:54:bd:81:d4:ae:86:e3:d8:7d:89:20:55:f4:c9:bd:
e0:83:f6:bd:b6:7f:0c:b6:d9:70:b7:7c:c7:87:3f:db:0b:f9:
d8:9b:fc:93:ab:e7:d8:9a:99:d0:2b:f8:6b:67:96:38:90:b1:
51:16:6d:f1:15:90:57:e2:34:67:65:c5:cc:ef:b1:09:fb:06:
52:59:79:23:3b:10:f4:9b:81:27:06:32:de:94:19:72:5a:10:
19:73:23:1d:bf:5d:ae:23:0d:ab:f9:94:1c:f8:2e:b8:65:bd:
eb:aa:5b:db:82:2c:2c:0c:f4:40:71:0e:60:8b:e9:29:51:e6:
ff:f9:72:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:42 2023 by rpki-client on console-ams.rpki-client.org