Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/Aa2g3x_LNZnYZburcFQ9QsSd8WQ.roa
File: Aa2g3x_LNZnYZburcFQ9QsSd8WQ.roa (raw, json)
Hash identifier: U+2yhZ2mLlAEWjGGlKkieHosY1Xw8zoj34zODV9uCZI=
Subject key identifier: 01:AD:A0:DF:1F:CB:35:99:D8:65:BB:AB:70:54:3D:42:C4:9D:F1:64
Certificate issuer: /CN=d36bfd928bccb42ad9c468a552ab7393fdd87095
Certificate serial: 018B1418A018E0CDF69F7AA29841F982C94E
Authority key identifier: D3:6B:FD:92:8B:CC:B4:2A:D9:C4:68:A5:52:AB:73:93:FD:D8:70:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02v9kovMtCrZxGilUqtzk_3YcJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/Aa2g3x_LNZnYZburcFQ9QsSd8WQ.roa
Signing time: Mon 09 Oct 2023 11:00:40 +0000
ROA not before: Mon 09 Oct 2023 11:00:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198949
IP address blocks: 83.138.0.0/21 maxlen: 24
212.25.208.0/23 maxlen: 24
212.25.212.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:14:18:a0:18:e0:cd:f6:9f:7a:a2:98:41:f9:82:c9:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d36bfd928bccb42ad9c468a552ab7393fdd87095
Validity
Not Before: Oct 9 11:00:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=01ada0df1fcb3599d865bbab70543d42c49df164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a4:fa:02:98:0f:cd:ed:0b:f0:93:b5:7f:94:
f5:e5:f8:81:4b:95:d2:be:09:75:28:97:35:a3:1b:
1f:b6:58:8d:5a:1b:06:8f:c6:a0:68:4b:58:6a:75:
26:7f:7f:56:e5:60:fa:26:86:82:99:f9:5f:8c:72:
73:69:e7:79:96:99:d5:22:e5:81:d4:8d:e8:92:8b:
ed:d2:bd:06:d4:7b:5e:1a:26:6e:6c:98:36:60:8a:
2f:c9:84:8c:b2:6f:4e:b6:fd:67:d4:6a:db:ed:8d:
6b:d7:1c:7a:15:22:21:bc:80:41:c5:fa:89:04:eb:
b8:19:d4:13:42:c2:60:06:ba:6b:24:a9:ff:cd:be:
88:b9:42:27:2e:23:d5:cc:5a:7f:9e:b6:fb:d8:f5:
58:55:3d:52:a5:ba:ff:5c:16:6c:79:1b:dd:4d:21:
fc:b8:54:dc:09:7f:f0:23:d1:d0:a1:a8:02:06:34:
73:18:55:23:e2:3f:46:82:b0:56:76:a6:9e:b0:d0:
fb:dc:f9:b6:e3:d7:1b:3a:32:58:c5:07:a2:e8:10:
4e:43:f6:e4:87:af:58:3c:b3:4c:b9:c1:b3:e5:c9:
17:db:3d:9a:2f:fd:44:bb:38:ce:28:d4:09:b3:49:
0b:b5:a4:22:04:68:10:43:f0:73:c5:c5:23:4d:07:
7b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:AD:A0:DF:1F:CB:35:99:D8:65:BB:AB:70:54:3D:42:C4:9D:F1:64
X509v3 Authority Key Identifier:
keyid:D3:6B:FD:92:8B:CC:B4:2A:D9:C4:68:A5:52:AB:73:93:FD:D8:70:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02v9kovMtCrZxGilUqtzk_3YcJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/Aa2g3x_LNZnYZburcFQ9QsSd8WQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.138.0.0/21
212.25.208.0/23
212.25.212.0/23
Signature Algorithm: sha256WithRSAEncryption
46:55:a9:71:e8:94:1c:3e:24:50:9c:54:b2:31:b5:8b:ca:3b:
cd:b1:ed:eb:43:07:2e:0f:8a:2e:10:6c:43:50:94:cf:5d:e3:
43:ec:77:ab:10:90:55:fc:db:90:89:52:2e:4b:1c:ec:f7:28:
df:75:5a:97:9f:0d:bb:49:51:ea:5a:7a:6c:4d:32:09:55:7f:
e0:ee:99:4e:53:57:db:2c:94:f7:3e:f8:2f:9b:06:66:9e:f8:
52:86:b0:65:2f:48:a7:b0:63:d7:3e:b4:0d:03:08:00:a9:dc:
87:93:4b:4b:bb:c0:4e:ea:34:bb:83:d1:8f:e7:7c:56:eb:cb:
58:97:f0:4a:73:02:61:5d:46:86:00:2d:40:44:e8:3f:63:ae:
9f:45:d1:50:a9:b9:d5:cf:d2:44:3f:c6:09:c3:c7:01:70:41:
60:1c:74:ea:40:b1:34:5e:53:02:e8:34:6f:ca:a0:96:23:e1:
f5:4f:a1:b7:78:a9:b3:d3:6c:20:53:88:7b:7d:e1:10:2a:fe:
42:8b:a2:0e:bb:92:b7:e8:1c:8a:71:79:c5:a4:9b:6a:5e:d9:
92:b4:1f:be:b3:75:38:e7:34:bc:66:21:aa:6c:04:c2:47:00:
09:7c:58:1b:36:8b:d2:6a:4e:03:88:55:87:a1:27:d8:24:bd:
2f:98:74:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 9 14:13:24 2023 by rpki-client on console-fra.rpki-client.org