Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/O7urVI72hD3AmUaiRTWnoaE_uk4.roa
File: O7urVI72hD3AmUaiRTWnoaE_uk4.roa (raw, json)
Hash identifier: As11MhUoJVw9coByHbe3dD68fSULkA4kMcCaD1sUNPk=
Subject key identifier: 3B:BB:AB:54:8E:F6:84:3D:C0:99:46:A2:45:35:A7:A1:A1:3F:BA:4E
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01856F150690F1AC0DA9D3D1D35660822869
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/O7urVI72hD3AmUaiRTWnoaE_uk4.roa
Signing time: Sun 01 Jan 2023 20:45:26 +0000
ROA not before: Sun 01 Jan 2023 20:45:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60909
IP address blocks: 85.120.92.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:15:06:90:f1:ac:0d:a9:d3:d1:d3:56:60:82:28:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 20:45:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3bbbab548ef6843dc09946a24535a7a1a13fba4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:d7:97:e1:31:21:48:2b:3e:62:c4:ee:2d:dc:
95:60:74:7a:0b:4c:05:23:7e:38:b8:fd:49:ab:66:
16:eb:b4:2e:56:33:a8:02:a2:d3:cf:d8:91:84:e2:
56:8f:0d:c0:c2:d4:f3:51:00:df:53:64:d9:f0:75:
e2:f5:49:da:18:95:3f:5b:d1:5a:33:cf:2d:35:79:
35:8a:ae:15:4e:05:16:6b:97:95:55:62:18:41:7d:
e6:eb:5a:8e:74:33:d3:9f:6a:46:b6:fe:c0:6d:d0:
bf:ac:1b:6b:4a:93:84:ae:71:46:16:de:10:29:c1:
c0:29:0f:fb:86:3e:2f:09:c5:7f:d2:a0:c4:aa:69:
22:a7:b6:e6:46:50:75:69:c4:5c:2b:84:1a:00:25:
d5:b1:17:90:d9:56:60:2c:84:71:e0:52:89:b6:f3:
59:02:f9:43:90:96:ff:58:3d:94:14:29:55:f6:94:
bf:20:2a:5e:ed:cb:b1:ff:ea:d6:d2:55:92:7a:ab:
e7:5d:8f:b2:b2:29:06:1b:59:ba:58:2f:27:6c:99:
a7:76:07:c9:c4:62:45:5f:98:fc:ee:11:de:37:57:
89:0c:09:39:de:71:56:7c:11:ec:7e:15:84:39:26:
22:0f:e4:02:dc:3f:99:d9:ba:d3:7e:1a:2d:4b:47:
b9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:BB:AB:54:8E:F6:84:3D:C0:99:46:A2:45:35:A7:A1:A1:3F:BA:4E
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/O7urVI72hD3AmUaiRTWnoaE_uk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.120.92.0/23
Signature Algorithm: sha256WithRSAEncryption
14:22:b1:17:45:66:b1:c3:bf:63:08:a0:c8:f0:71:d8:16:6e:
54:e5:8c:93:ea:b6:c1:9b:74:f7:e1:28:17:13:24:1e:f4:08:
84:04:c0:3f:3c:9c:40:f9:36:19:65:fd:af:0b:0d:da:24:eb:
dc:88:b2:5a:d2:10:ff:dd:b2:c9:ba:a8:60:f0:71:a8:9e:cf:
9a:fd:64:19:ea:50:2e:ca:b9:28:28:32:cf:8f:f3:50:1d:d7:
83:90:12:11:47:ab:7b:40:61:b1:3a:ab:d9:55:0a:75:64:f4:
dd:35:58:d8:28:f6:3d:19:a9:c9:98:d8:f0:8b:ff:35:23:c9:
21:12:83:58:f3:cb:09:ef:2d:b1:cd:da:2d:6a:e1:2e:44:b9:
2c:5b:11:f8:c0:c2:ad:87:91:6c:90:50:3f:1d:17:b8:eb:b1:
fd:67:81:84:1c:d5:c1:a9:15:9b:8e:0e:0a:de:7f:8c:03:af:
ac:0d:06:40:f7:27:0b:1a:3f:c0:33:51:8c:d6:76:4b:72:ec:
b0:49:9b:16:ff:4f:fe:44:77:4a:34:73:58:c5:87:0b:1e:d0:
39:3e:77:f1:66:6f:ba:a8:8d:39:1b:f6:6b:0f:52:41:c4:03:
c1:21:9c:84:e9:18:20:ff:71:45:d2:c8:c0:f4:f1:2a:16:19:
a8:59:4c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:18:48 2024 by rpki-client on console-ams.rpki-client.org