Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/eLTDTl6wFivMHXNkqIt592JdD7k.roa
File: eLTDTl6wFivMHXNkqIt592JdD7k.roa (raw, json)
Hash identifier: naHs8qXgnpL08idtz1ENabdFvh0b0Txp7T0Jf8Xn3zI=
Subject key identifier: 78:B4:C3:4E:5E:B0:16:2B:CC:1D:73:64:A8:8B:79:F7:62:5D:0F:B9
Certificate issuer: /CN=c950d7b1975a3703ae27b31ad2f932ae46a4cc94
Certificate serial: 01856F42E633512BCCC5C21A106FC7A22BCA
Authority key identifier: C9:50:D7:B1:97:5A:37:03:AE:27:B3:1A:D2:F9:32:AE:46:A4:CC:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/eLTDTl6wFivMHXNkqIt592JdD7k.roa
Signing time: Sun 01 Jan 2023 21:35:33 +0000
ROA not before: Sun 01 Jan 2023 21:35:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2119
IP address blocks: 185.136.128.0/22 maxlen: 24
2a03:a4e0::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:e6:33:51:2b:cc:c5:c2:1a:10:6f:c7:a2:2b:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c950d7b1975a3703ae27b31ad2f932ae46a4cc94
Validity
Not Before: Jan 1 21:35:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=78b4c34e5eb0162bcc1d7364a88b79f7625d0fb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:45:fa:23:2d:2d:cf:44:f0:5c:99:dd:1e:78:
f5:7c:63:0e:44:6a:5f:87:a2:8f:2a:0d:55:63:04:
5d:26:1a:c7:53:4d:54:63:ef:d5:9f:58:66:9d:86:
29:c1:da:8c:a6:7b:9d:ba:d0:64:6f:f5:18:10:45:
ef:9c:cf:83:c6:a3:26:e9:13:17:f8:24:03:64:4c:
04:33:6d:5c:2c:84:d0:09:a5:e6:cd:be:8a:6b:25:
ad:bd:5f:60:e1:38:e2:19:d2:8b:ae:e0:3d:a6:a0:
97:82:bc:3d:80:eb:ee:09:5f:98:fa:05:8e:7d:d3:
35:93:81:2f:9b:ed:c9:c7:d0:59:6c:d2:63:18:e8:
65:1c:b9:4d:d3:26:06:e8:d4:f2:25:cf:e1:e2:34:
f7:e8:7b:c0:66:25:90:5e:b3:de:55:c4:65:46:9e:
df:cc:5f:e3:a7:a2:91:27:d1:1f:62:90:0c:30:c2:
98:27:b0:cf:74:24:61:30:28:50:73:29:e8:4f:d3:
58:8b:ab:07:e0:aa:6b:e8:a7:36:ec:7b:b2:b1:f2:
50:03:29:34:57:2a:05:c7:5f:1d:25:46:8c:5e:30:
31:49:81:e2:32:fa:f0:22:fe:a5:c3:19:10:7f:49:
72:be:73:47:a9:8b:b8:83:3b:3a:8a:61:35:6b:00:
41:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B4:C3:4E:5E:B0:16:2B:CC:1D:73:64:A8:8B:79:F7:62:5D:0F:B9
X509v3 Authority Key Identifier:
keyid:C9:50:D7:B1:97:5A:37:03:AE:27:B3:1A:D2:F9:32:AE:46:A4:CC:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/eLTDTl6wFivMHXNkqIt592JdD7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.128.0/22
IPv6:
2a03:a4e0::/32
Signature Algorithm: sha256WithRSAEncryption
4f:89:31:f2:6b:66:73:e0:cf:4f:e5:d3:69:8f:96:ce:c1:33:
48:f3:bf:df:61:f6:e5:37:e6:19:1e:60:30:d1:f2:03:1b:af:
73:ed:c4:28:a0:cd:29:68:30:38:1e:d6:7f:2d:98:a4:df:a3:
b4:71:12:f4:da:9d:ee:3c:54:37:57:fe:74:2f:f0:5a:5e:f3:
9c:13:6b:fb:24:e8:dd:8e:04:e7:d5:ea:68:6c:bf:71:81:12:
bb:a5:9c:6a:43:74:2a:7a:77:c8:8f:c8:54:42:68:57:cc:e6:
d0:53:35:69:ec:9b:a7:d8:83:1c:54:d3:1f:1d:e5:c5:ef:42:
e8:dc:16:58:c4:c2:b5:8e:8e:bb:b0:6f:26:f6:d6:2d:d5:e7:
21:28:83:16:61:bc:d2:e6:c8:3e:54:f5:d9:71:1b:45:0d:dc:
6d:b7:27:79:30:c6:4a:5b:5c:6c:d8:bf:5f:bc:3b:a1:b3:4a:
29:e0:27:fe:5d:17:97:16:b8:0d:4d:45:45:e9:dc:d1:e1:0e:
19:7d:0e:31:56:6e:15:34:fe:99:45:6c:7f:78:45:a8:4c:f4:
84:94:1b:c0:62:f1:f5:c0:58:db:1e:57:d0:96:95:dd:ac:ec:
1a:c1:76:b3:29:07:8f:35:40:5e:d9:c2:34:e6:e8:f8:e8:92:
c5:03:ce:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:18:55 2024 by rpki-client on console-fra.rpki-client.org