Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/W3OLxtUMyf8C8yw8lg7VDcThs9A.roa
File: W3OLxtUMyf8C8yw8lg7VDcThs9A.roa (raw, json)
Hash identifier: PDoIZg3nWo6aJG4RxR/i6yc7qdrahOUqQz/ePkst/CA=
Subject key identifier: 5B:73:8B:C6:D5:0C:C9:FF:02:F3:2C:3C:96:0E:D5:0D:C4:E1:B3:D0
Certificate issuer: /CN=790d1ca78761310ac39a714ff62f3b92b2e77d8a
Certificate serial: 01856E142D934F8E67BC204E9330D34597BC
Authority key identifier: 79:0D:1C:A7:87:61:31:0A:C3:9A:71:4F:F6:2F:3B:92:B2:E7:7D:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/W3OLxtUMyf8C8yw8lg7VDcThs9A.roa
Signing time: Sun 01 Jan 2023 16:04:54 +0000
ROA not before: Sun 01 Jan 2023 16:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15830
IP address blocks: 85.119.0.0/21 maxlen: 21
178.250.56.0/21 maxlen: 21
185.172.92.0/22 maxlen: 22
2a03:bd80::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:14:2d:93:4f:8e:67:bc:20:4e:93:30:d3:45:97:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=790d1ca78761310ac39a714ff62f3b92b2e77d8a
Validity
Not Before: Jan 1 16:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b738bc6d50cc9ff02f32c3c960ed50dc4e1b3d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e4:ab:c1:91:c7:86:e6:71:9d:ac:4e:70:8a:
a6:20:02:d5:3a:5c:2c:9e:3d:25:7b:0f:3b:9c:c7:
0a:1a:e9:b1:72:9b:f2:b5:40:52:78:a3:55:d8:cc:
f4:7e:1b:b0:b8:2e:3e:ad:2a:18:76:0d:69:47:d5:
a6:60:ba:27:40:06:7f:fd:d8:f1:6e:9f:1e:92:bb:
7a:8a:c1:bd:78:10:09:6c:7a:98:74:53:50:4a:ed:
13:9c:77:57:a2:57:f9:ad:93:dc:da:d3:dd:1d:1f:
93:12:a5:63:d9:cb:ca:48:66:d5:c6:58:ab:5f:72:
42:ae:c9:c3:90:f2:14:a2:ae:68:e1:db:33:cb:50:
2c:d8:5f:5c:62:0f:dd:52:5c:89:8d:0a:3f:b1:09:
ae:ff:a2:cd:a5:2b:cb:d1:eb:c7:a7:63:5c:89:0d:
08:65:e4:50:e3:21:10:42:fc:aa:92:60:64:5f:17:
84:3c:56:11:34:33:fd:60:d3:c2:a3:46:22:d6:26:
dc:3f:d0:56:6e:a1:0c:78:ac:04:8a:44:17:22:33:
4d:f8:48:b4:7e:97:b3:8a:20:fe:cc:fc:d3:ca:63:
76:9b:ce:23:a6:e0:4f:00:95:27:89:9a:6b:77:17:
54:4e:cd:69:d2:bb:9d:22:b6:e6:b2:c1:b9:50:e9:
7e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:73:8B:C6:D5:0C:C9:FF:02:F3:2C:3C:96:0E:D5:0D:C4:E1:B3:D0
X509v3 Authority Key Identifier:
keyid:79:0D:1C:A7:87:61:31:0A:C3:9A:71:4F:F6:2F:3B:92:B2:E7:7D:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/W3OLxtUMyf8C8yw8lg7VDcThs9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.119.0.0/21
178.250.56.0/21
185.172.92.0/22
IPv6:
2a03:bd80::/32
Signature Algorithm: sha256WithRSAEncryption
a7:2b:06:78:7f:8d:4a:f1:60:ed:f3:76:b5:54:4c:66:01:8f:
4b:24:ab:92:f0:56:0a:be:5c:ab:80:3e:76:41:0e:40:a9:0c:
fc:13:6b:25:13:56:f8:88:1e:c7:3f:04:a3:eb:56:2f:37:3d:
06:a7:97:9b:10:90:58:db:82:9f:95:7c:aa:1b:58:12:79:1e:
69:6d:60:7c:b7:71:ed:07:f0:dc:54:2e:83:ad:3e:56:eb:aa:
67:63:75:03:a9:30:e5:49:bc:b7:f9:63:d8:ae:e7:6d:fb:27:
1d:c9:9d:34:63:87:44:6c:fb:67:20:7c:0d:17:00:4b:20:0a:
45:da:c7:12:18:57:62:eb:89:88:9f:ff:a3:3f:8b:e6:0f:5e:
7f:37:2a:28:4d:7c:24:89:b5:9a:b3:b2:d5:64:7a:7b:0b:4a:
87:18:42:24:68:2a:7a:1f:32:12:4b:8c:e0:29:88:be:e6:60:
32:f3:6a:62:eb:7b:9e:ea:42:12:d8:cb:e6:ec:ea:3e:83:42:
4f:05:8c:7b:79:fd:b5:b3:11:88:63:dc:df:0c:c9:5e:03:49:
61:91:26:09:86:58:24:7b:bd:72:42:b7:39:e6:a5:af:2e:a8:
4d:09:2c:83:e2:d8:40:31:0f:ec:b8:39:17:11:c6:14:6b:da:
f0:50:82:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 22 15:48:00 2023 by rpki-client on console-ams.rpki-client.org