Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vJ0bE1SS8hklobQHVwzTRiIkqpU.roa
File: vJ0bE1SS8hklobQHVwzTRiIkqpU.roa (raw, json)
Hash identifier: 3PwCHqZg76ocPjPYvdkbXECITJP8JCyB/kZ9tRrUlEU=
Subject key identifier: BC:9D:1B:13:54:92:F2:19:25:A1:B4:07:57:0C:D3:46:22:24:AA:95
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0188BF98895B1D3D34915F2465A5404A1C33
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vJ0bE1SS8hklobQHVwzTRiIkqpU.roa
Signing time: Thu 15 Jun 2023 15:07:04 +0000
ROA not before: Thu 15 Jun 2023 15:07:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 11938
IP address blocks: 94.156.6.0/24 maxlen: 24
79.110.48.0/24 maxlen: 24
87.121.3.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:bf:98:89:5b:1d:3d:34:91:5f:24:65:a5:40:4a:1c:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 15 15:07:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bc9d1b135492f21925a1b407570cd3462224aa95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6e:ed:da:bb:e8:47:66:2d:30:94:82:ec:67:
5c:a0:b9:59:5f:2f:15:af:49:a8:59:c4:b9:96:d8:
89:2e:ed:bb:4c:4a:99:ec:08:e5:65:2d:d9:22:3c:
20:90:b4:38:f4:10:5a:01:c4:fd:47:d2:07:48:7f:
9b:1c:c5:01:26:1b:40:ce:01:26:54:1d:ac:99:cd:
57:86:e7:13:9b:46:0d:99:5b:1f:a8:08:7f:be:ca:
02:85:4b:19:fc:72:08:a6:f8:62:a9:68:04:30:cd:
3a:0e:c8:45:b6:b5:cc:62:fd:87:6b:97:26:3d:b6:
a1:ad:5c:25:2a:e3:7c:b2:39:80:1d:d1:60:c0:01:
8a:9e:a8:82:ea:02:6f:78:ac:87:e3:5b:ff:3a:a8:
c7:2b:9b:2e:7b:06:57:95:9a:fc:49:9d:be:9f:06:
a5:c8:b2:30:3d:dd:64:dd:9a:89:d1:0a:38:fe:36:
34:63:ee:19:fe:4c:2c:7d:36:5d:72:6e:0b:53:2b:
e2:ee:c7:fc:78:d3:8e:1e:f4:db:5f:f6:cf:3a:db:
d0:ea:73:a8:02:55:38:16:1a:a8:14:d9:e3:31:3d:
c2:b0:39:aa:04:1b:f2:f3:7e:13:38:89:2a:71:91:
ab:dc:e7:bd:56:6c:9a:53:80:28:57:c2:87:4c:9c:
e4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:9D:1B:13:54:92:F2:19:25:A1:B4:07:57:0C:D3:46:22:24:AA:95
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vJ0bE1SS8hklobQHVwzTRiIkqpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.48.0/24
87.121.3.0/24
94.156.6.0/24
Signature Algorithm: sha256WithRSAEncryption
47:b9:a4:5a:5f:50:dc:78:4d:29:33:af:75:47:6e:4b:23:4a:
80:4d:73:3a:dd:2c:bc:89:d8:88:49:bf:c1:f1:90:1d:30:3e:
d7:93:f3:df:b5:fc:b4:01:a1:cc:43:a9:14:27:2a:79:50:4a:
d2:c3:bd:f6:61:72:ed:d3:87:67:89:eb:cd:e3:b4:4f:c6:53:
79:9d:28:7e:9f:99:90:ab:f9:6f:50:89:33:13:ea:93:d0:a5:
22:23:b8:ce:1f:d3:cc:57:e6:db:71:24:dd:d6:96:49:58:e3:
66:d9:33:13:d4:ba:7d:98:42:11:b3:81:ed:0b:86:c9:4c:2e:
17:0b:c3:9c:5a:88:b8:92:48:aa:d6:b5:73:e1:bd:7d:76:f0:
3a:5d:51:2f:4a:33:e8:25:cb:03:98:af:bc:42:ac:26:08:a5:
e6:4d:61:27:1a:f2:1e:92:17:98:10:4c:8b:90:a2:d4:37:52:
49:7d:3c:4c:3f:af:8e:80:04:f9:39:49:05:a2:7c:5c:0d:5a:
e6:5e:15:81:21:da:e1:cd:2f:4f:cb:10:f6:99:3f:e7:c3:41:
25:fc:4d:51:83:74:7e:d1:4f:e9:24:ab:f0:6d:3d:8c:bf:67:
06:ca:85:cf:64:9c:27:fa:39:c9:c6:93:5b:8a:71:17:d6:66:
d5:91:75:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 28 13:10:21 2023 by rpki-client on console-ams.rpki-client.org