Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/a25eWYfMVG-qA_1ak0DIPDCZjsg.roa
File: a25eWYfMVG-qA_1ak0DIPDCZjsg.roa (raw, json)
Hash identifier: 3GL1H0/VDmpGQ0MdYzswn/yO1h+SPDBFd/zdsvpeskw=
Subject key identifier: 6B:6E:5E:59:87:CC:54:6F:AA:03:FD:5A:93:40:C8:3C:30:99:8E:C8
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 01887446BAC7E58D6927B807EFCAFA9570F2
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/a25eWYfMVG-qA_1ak0DIPDCZjsg.roa
Signing time: Thu 01 Jun 2023 00:06:12 +0000
ROA not before: Thu 01 Jun 2023 00:06:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3280
IP address blocks: 2.56.166.0/24 maxlen: 24
78.108.217.0/24 maxlen: 24
2a0b:b86::/40 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:74:46:ba:c7:e5:8d:69:27:b8:07:ef:ca:fa:95:70:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jun 1 00:06:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b6e5e5987cc546faa03fd5a9340c83c30998ec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:05:53:2c:7b:a0:4a:43:5c:a6:ec:d1:29:90:
4e:49:59:1d:29:77:3a:8a:86:fd:40:d5:5a:09:38:
41:31:e1:11:10:69:a3:e4:9e:ed:c3:52:ca:fd:26:
34:6d:cb:00:f3:b4:de:fb:f6:f6:3c:c5:9a:4e:c7:
26:db:f4:40:04:d2:1e:ef:a4:29:30:b4:f0:a6:aa:
87:d4:d6:82:c4:aa:44:0b:2f:6c:84:a1:b1:cb:ed:
d6:d8:3f:87:3c:66:ac:a1:95:bb:a7:77:02:a0:22:
6d:fa:dc:68:0a:0c:f5:27:29:71:96:45:fd:35:0f:
f2:ec:2f:28:60:79:21:f7:ab:9f:76:a8:ed:f8:f9:
8d:fe:84:28:f9:bb:a3:72:18:5e:19:6a:1b:7c:eb:
80:67:b8:af:8c:11:b4:ad:bf:03:51:24:36:1a:1e:
88:1b:8d:d3:91:69:bf:e1:0f:47:9d:73:cc:09:09:
86:5d:dc:a0:4b:84:a6:d4:fa:19:28:15:7b:2e:0a:
d1:09:d8:21:ca:63:c3:f8:e0:bf:dc:23:53:26:7e:
45:6f:65:48:fc:d3:8c:bd:fe:81:3c:bb:b4:c7:38:
aa:67:21:e6:ef:27:82:d9:e8:87:ae:51:bf:80:74:
3a:bc:ce:27:ed:df:94:e1:85:18:e8:2d:de:75:eb:
dd:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:6E:5E:59:87:CC:54:6F:AA:03:FD:5A:93:40:C8:3C:30:99:8E:C8
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/a25eWYfMVG-qA_1ak0DIPDCZjsg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.166.0/24
78.108.217.0/24
IPv6:
2a0b:b86::/40
Signature Algorithm: sha256WithRSAEncryption
c1:ae:13:94:44:84:54:07:c1:f7:38:08:31:ba:0f:ed:c9:61:
63:13:d2:1d:f9:e5:7f:98:9c:7b:0b:c5:22:20:ea:7c:84:2f:
e7:ab:39:09:9d:c5:dd:f8:82:0e:f3:fd:ba:fe:b0:41:0c:e3:
a3:94:76:1b:a7:ed:2f:e1:a4:84:e1:69:24:e3:ac:7c:ff:44:
43:ab:a2:08:2a:e3:65:07:0e:c4:c9:c7:1d:22:10:9f:3b:43:
db:30:98:b3:1a:a3:08:db:1a:2e:92:82:72:02:36:7e:b7:e0:
6d:83:58:40:bf:96:92:42:e7:60:11:00:91:90:4f:be:b9:70:
c6:54:ee:3d:87:ad:a6:c2:a5:1e:70:ac:c0:03:8b:74:7a:3a:
56:10:7f:6c:a2:52:f0:b1:bd:29:71:73:bb:f1:de:7a:ef:ad:
fc:12:42:bb:7a:e4:d6:f0:7f:f7:dc:19:ef:fa:18:a3:f9:a1:
7a:89:2a:26:fc:21:15:2e:c4:f1:55:ec:75:ed:a8:52:36:dd:
af:1e:ef:65:9b:9d:c0:7c:5b:ed:16:ac:f4:15:a6:cb:78:4f:
e9:04:2b:d9:d5:7c:cd:a7:4e:68:6b:2d:4f:7e:2e:43:dd:6a:
69:d9:f2:5f:8a:0b:b9:01:45:8a:6a:63:e0:a9:d3:9a:70:3b:
3e:9f:91:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:39 2023 by rpki-client on console-fra.rpki-client.org