Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/J5OHL8ggvtl295lKCV3tUKUHZME.roa
File: J5OHL8ggvtl295lKCV3tUKUHZME.roa (raw, json)
Hash identifier: HWAbx122E2RQFBzk/LsyGQwC+C6dQU85ewL7k86kLLE=
Subject key identifier: 27:93:87:2F:C8:20:BE:D9:76:F7:99:4A:09:5D:ED:50:A5:07:64:C1
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 01856F024BC6EE06E3A9EF9B96EDF77B515B
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/J5OHL8ggvtl295lKCV3tUKUHZME.roa
Signing time: Sun 01 Jan 2023 20:24:59 +0000
ROA not before: Sun 01 Jan 2023 20:24:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200709
IP address blocks: 85.254.72.0/24 maxlen: 24
159.148.186.0/24 maxlen: 24
2a02:610:fffa::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:4b:c6:ee:06:e3:a9:ef:9b:96:ed:f7:7b:51:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 1 20:24:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2793872fc820bed976f7994a095ded50a50764c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:01:cf:fb:2e:4a:b4:c8:b1:7b:30:de:e9:3f:
d8:a9:91:85:84:a3:c5:1c:52:5f:03:46:6f:cc:55:
46:bb:5e:c3:84:ae:93:06:95:8d:05:e4:63:08:1d:
69:b5:9a:b8:b9:b9:39:fa:dd:7a:12:d7:af:d4:10:
cc:8f:18:3c:7b:db:26:b8:8d:34:1e:cf:3f:ca:39:
5e:1a:35:73:11:50:a4:8a:2d:5a:f4:c8:d0:cf:ba:
07:bf:51:50:a1:f6:7f:e1:cd:22:04:1f:ba:b6:6e:
d5:64:83:1e:7f:44:5e:be:5e:65:45:7c:9e:4f:68:
cf:72:9b:5b:cb:dd:f4:d1:94:23:99:f4:dc:0b:65:
5e:a4:e8:3c:2c:94:53:f2:f7:a5:9e:0f:7f:dd:72:
13:27:0a:b8:c0:0f:26:1b:11:30:05:14:0b:6b:e7:
e3:a1:da:35:a8:ab:2c:b3:69:6b:bc:46:67:20:83:
73:87:da:c1:32:86:c3:48:21:36:74:f9:48:62:fa:
7c:46:46:ec:cd:b2:ca:0f:aa:08:4b:ce:ea:5a:02:
a4:c7:de:c3:dc:b4:dd:a2:85:89:a1:f0:a7:81:9e:
a8:be:69:2d:25:28:69:9f:ec:de:37:a4:44:bd:ab:
c0:b2:3b:0d:6a:d0:ba:78:7f:35:0a:6c:59:43:2f:
0c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:93:87:2F:C8:20:BE:D9:76:F7:99:4A:09:5D:ED:50:A5:07:64:C1
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/J5OHL8ggvtl295lKCV3tUKUHZME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.254.72.0/24
159.148.186.0/24
IPv6:
2a02:610:fffa::/48
Signature Algorithm: sha256WithRSAEncryption
06:45:9c:cf:9a:2a:8a:d1:1a:2d:6f:94:47:0c:77:13:15:f2:
7c:e1:8c:c9:bb:5c:ea:37:5c:ed:d2:e6:9a:40:3e:c8:e7:ce:
94:6f:76:03:9f:92:aa:57:e6:2e:3a:8c:7e:17:4e:42:ed:64:
7c:75:c3:bc:e0:f9:4f:8f:bb:5b:df:06:f1:6f:2f:57:e0:4e:
38:3a:12:43:b8:60:8c:ea:62:77:91:67:ba:9f:6d:fc:84:c3:
85:9d:a1:5e:6e:f8:36:e9:26:ba:7e:6d:71:73:67:ac:86:b0:
42:b1:65:6e:c9:03:27:f7:ed:02:f1:5a:f8:70:df:10:4b:c9:
74:6d:28:e6:6a:82:f5:f9:ea:96:a8:9d:00:d2:22:cf:54:75:
a4:69:da:0f:78:e8:0c:40:69:5e:2f:e6:70:c8:fb:ac:01:3b:
7d:d6:d5:58:19:d3:05:0c:d7:8d:ab:50:e7:ec:54:b3:a4:a5:
b4:dd:a0:d0:5b:2b:a1:28:63:a3:45:79:7d:a9:b8:1b:d5:5e:
9e:70:de:3d:aa:ac:05:ca:80:1f:a2:11:50:72:5a:31:0c:35:
30:91:69:7d:a1:8c:15:63:a8:9f:96:4b:72:4a:32:42:f9:de:
46:bf:ea:35:99:ff:bd:fd:9a:2d:8c:2c:12:1b:2e:dd:74:27:
2c:bf:d2:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 12 09:13:37 2023 by rpki-client on console-fra.rpki-client.org