Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/hcV3TKEkP1nb4tHRYZFlMQJpQvg.roa
File: hcV3TKEkP1nb4tHRYZFlMQJpQvg.roa (raw, json)
Hash identifier: GkfNBWJsyWabXpLk7H403tm8X5kmRSGOiEfvlknEKkQ=
Subject key identifier: 85:C5:77:4C:A1:24:3F:59:DB:E2:D1:D1:61:91:65:31:02:69:42:F8
Certificate issuer: /CN=3ecd53c66424c3f369ca88ee7af76adb25e18451
Certificate serial: 018572558C4E12627D3D4B8A013D570940CC
Authority key identifier: 3E:CD:53:C6:64:24:C3:F3:69:CA:88:EE:7A:F7:6A:DB:25:E1:84:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/hcV3TKEkP1nb4tHRYZFlMQJpQvg.roa
Signing time: Mon 02 Jan 2023 11:54:47 +0000
ROA not before: Mon 02 Jan 2023 11:54:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59437
IP address blocks: 87.121.28.0/22 maxlen: 22
176.56.192.0/19 maxlen: 19
94.156.254.0/23 maxlen: 23
87.120.208.0/21 maxlen: 21
185.159.86.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 14:34:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:55:8c:4e:12:62:7d:3d:4b:8a:01:3d:57:09:40:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ecd53c66424c3f369ca88ee7af76adb25e18451
Validity
Not Before: Jan 2 11:54:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=85c5774ca1243f59dbe2d1d161916531026942f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:68:a4:db:41:3c:90:ac:e9:ac:86:2f:69:d1:
ca:07:b9:67:da:af:3e:8f:13:f3:02:62:f3:b8:7f:
91:53:ae:7f:d3:13:76:75:65:a4:fd:1f:3e:5c:95:
3f:04:27:f6:11:c5:68:dd:95:2c:24:4b:bb:42:3e:
36:cf:06:03:55:12:73:7c:d9:14:ed:67:d9:a0:36:
18:0e:50:4b:92:19:a1:21:af:28:cf:a7:fe:54:3b:
fa:54:2c:3e:e8:6e:74:96:31:d8:ed:e4:84:63:e0:
07:2b:4f:69:77:a0:28:f6:75:52:71:cd:41:16:a4:
cf:e3:5e:6f:c1:d2:8b:0d:29:ef:b1:50:18:bb:20:
10:00:e8:f6:7b:60:cc:5d:4d:23:3d:e8:c6:67:6c:
d7:97:7e:30:1e:09:d8:6d:5b:39:3e:88:6d:52:4d:
7c:da:01:52:6b:e9:f8:97:0f:e5:4a:63:c3:73:b8:
90:5f:72:25:b1:1e:6b:1c:3f:60:a0:c5:37:2a:a6:
65:12:6d:22:6a:c6:dd:61:0f:c6:3f:f0:01:d5:09:
74:72:25:b7:61:de:36:34:c0:bd:99:f1:b2:af:16:
df:81:5e:af:22:d4:3e:18:b3:65:8f:d2:5c:ec:d7:
45:08:7c:b3:5d:b9:b6:0d:6e:89:4f:4f:95:a1:bf:
c1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C5:77:4C:A1:24:3F:59:DB:E2:D1:D1:61:91:65:31:02:69:42:F8
X509v3 Authority Key Identifier:
keyid:3E:CD:53:C6:64:24:C3:F3:69:CA:88:EE:7A:F7:6A:DB:25:E1:84:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/hcV3TKEkP1nb4tHRYZFlMQJpQvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.208.0/21
87.121.28.0/22
94.156.254.0/23
176.56.192.0/19
185.159.86.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:cb:d8:25:7d:11:8b:7e:a8:3c:39:5c:62:a1:e1:57:7a:ef:
c8:21:04:45:3b:bc:b7:c5:ae:5f:e8:d7:1b:16:4a:7b:49:85:
3f:93:25:88:03:20:c2:cc:36:0d:08:ce:8b:ef:e3:96:b1:1a:
4a:e7:d5:62:1f:e4:49:ae:a1:cb:91:8d:98:3c:fa:56:09:61:
ce:04:8f:30:bc:95:cf:d0:d0:84:a8:49:46:ca:63:73:bf:93:
56:a0:2c:74:f7:95:4d:6a:a3:12:63:cb:46:a5:9e:8d:70:1c:
84:bd:82:31:99:32:eb:26:2a:9e:5e:66:82:95:04:66:fb:ac:
88:82:63:62:98:43:fa:a9:9c:e9:46:a4:14:1c:de:80:e4:8b:
4a:4c:fa:84:d2:97:c9:da:b4:16:0d:6f:d7:f8:45:44:c5:c9:
ac:4c:ca:99:1c:f0:30:a2:76:3a:f2:d6:56:59:1c:6b:6f:b5:
af:ae:fb:18:07:33:ba:fa:6b:b0:10:70:d1:75:31:b0:69:e5:
09:23:9b:57:36:a5:a8:70:d8:86:3c:ae:dc:e0:62:85:01:28:
40:fc:0e:e5:99:ba:e9:b3:82:9a:9b:82:58:f5:4b:f7:73:fa:
bd:e2:e6:f8:9c:fb:c4:be:a5:dc:f1:eb:c0:59:44:6f:b9:70:
d6:ab:6c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:11 2024 by rpki-client on console-fra.rpki-client.org