Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/gQpxUe1Fqg3_L9wGHMAl_rZXmSQ.roa
File: gQpxUe1Fqg3_L9wGHMAl_rZXmSQ.roa (raw, json)
Hash identifier: ByCr8RhamZkoTS5HOqJAPsa4Fb+vlENQ4HIVpOBm06w=
Subject key identifier: 81:0A:71:51:ED:45:AA:0D:FF:2F:DC:06:1C:C0:25:FE:B6:57:99:24
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 0188F3D2C8B5475C9E0BB80545E73E754477
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/gQpxUe1Fqg3_L9wGHMAl_rZXmSQ.roa
Signing time: Sun 25 Jun 2023 18:30:57 +0000
ROA not before: Sun 25 Jun 2023 18:30:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25369
IP address blocks: 85.122.112.0/23 maxlen: 24
85.121.148.0/23 maxlen: 24
85.120.12.0/23 maxlen: 24
217.156.84.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:f3:d2:c8:b5:47:5c:9e:0b:b8:05:45:e7:3e:75:44:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jun 25 18:30:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=810a7151ed45aa0dff2fdc061cc025feb6579924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d2:76:94:e5:b6:5c:1a:73:3b:b6:f5:da:20:
a7:92:62:2f:82:b6:00:10:4e:48:2e:53:b4:ff:06:
15:9d:c2:4b:1f:17:ca:b6:cd:e7:9e:cf:df:32:77:
4e:79:ff:3d:80:86:22:e3:12:31:51:58:aa:d4:44:
4c:eb:d9:cc:1a:a7:97:e8:04:8e:71:f6:c2:8a:7d:
8d:73:ce:85:82:ba:58:f1:d1:a2:46:b3:a3:eb:ca:
8a:4e:27:89:18:ac:a5:4e:f3:15:bb:7e:e2:e1:a8:
7e:d3:86:59:a3:9f:30:c7:36:34:e0:31:91:70:20:
b9:19:1d:f6:00:22:92:7d:d8:79:7a:08:9b:93:06:
0d:57:55:ca:ed:f4:c5:96:82:38:fd:02:5d:63:b0:
c0:02:1b:52:ea:c6:56:fa:38:eb:1d:eb:d4:f3:94:
af:b6:78:c4:e8:a6:46:7d:99:eb:82:43:a3:25:fb:
32:a3:68:f2:55:14:c5:aa:4e:d7:e7:8d:97:89:2c:
ff:52:75:7a:05:67:75:df:8b:2a:6e:41:3d:fa:fe:
4f:25:c8:19:0b:c4:2c:3e:b2:b4:8d:30:49:b6:70:
5a:8c:b3:8b:a2:f7:ba:65:6e:84:5f:3c:1e:77:47:
aa:8f:99:55:1e:8d:6e:95:ec:7f:29:3f:6c:8b:31:
42:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:0A:71:51:ED:45:AA:0D:FF:2F:DC:06:1C:C0:25:FE:B6:57:99:24
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/gQpxUe1Fqg3_L9wGHMAl_rZXmSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.120.12.0/23
85.121.148.0/23
85.122.112.0/23
217.156.84.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:5a:8a:79:de:72:e4:b9:47:ad:cc:93:6a:cc:a8:96:55:47:
3b:f0:bd:32:7f:c8:de:ef:d7:b7:44:1b:44:d2:2e:82:86:8b:
fa:ab:fb:68:df:84:be:e1:5c:d0:50:55:61:10:49:bc:e3:a8:
2a:71:cf:bb:01:11:aa:3f:a9:de:81:d7:66:ea:50:fc:cc:f9:
55:b8:1e:5c:31:8d:56:68:e0:cc:26:09:b6:60:83:c9:14:f1:
15:3b:a6:5d:5e:46:4a:34:00:f0:af:4e:d6:af:07:cc:03:fd:
a2:b2:20:2e:cb:ca:28:62:6d:aa:4b:f8:6a:9c:be:ff:b5:bd:
e2:94:5b:d5:a4:83:fc:0b:19:b6:3d:88:41:6a:39:30:63:b1:
96:0c:0d:24:67:a5:af:bc:82:65:a2:4f:f2:54:8e:c4:2c:e9:
e9:79:8d:01:7d:db:9f:55:0c:9c:25:eb:dd:d2:49:b3:27:c7:
33:6b:a8:87:f7:48:2e:33:21:17:75:ea:7a:32:52:a6:b8:b3:
c2:f5:06:7f:78:d3:bf:ba:c3:53:3f:44:32:c7:45:94:e6:19:
fb:73:4e:26:c6:02:6f:08:a9:a0:38:92:24:9d:ab:93:4a:20:
bf:e6:8b:54:25:63:94:e6:b2:61:a6:9c:fc:7f:f9:85:c6:8c:
13:9c:fb:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 5 12:07:44 2023 by rpki-client on console-fra.rpki-client.org