Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/xcRgf3EirxooeYAbw7RVX95U5o0.roa
File: xcRgf3EirxooeYAbw7RVX95U5o0.roa (raw, json)
Hash identifier: efhDjTHsCIIDd+vwMYh6yhyhKO5U4IeUbwFY+o0J5jM=
Subject key identifier: C5:C4:60:7F:71:22:AF:1A:28:79:80:1B:C3:B4:55:5F:DE:54:E6:8D
Certificate issuer: /CN=d36bfd928bccb42ad9c468a552ab7393fdd87095
Certificate serial: 0189923536FA33DD967A446EC74B092F557C
Authority key identifier: D3:6B:FD:92:8B:CC:B4:2A:D9:C4:68:A5:52:AB:73:93:FD:D8:70:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02v9kovMtCrZxGilUqtzk_3YcJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/xcRgf3EirxooeYAbw7RVX95U5o0.roa
Signing time: Wed 26 Jul 2023 12:38:28 +0000
ROA not before: Wed 26 Jul 2023 12:38:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198949
IP address blocks: 83.138.0.0/21 maxlen: 24
212.159.255.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:92:35:36:fa:33:dd:96:7a:44:6e:c7:4b:09:2f:55:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d36bfd928bccb42ad9c468a552ab7393fdd87095
Validity
Not Before: Jul 26 12:38:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c5c4607f7122af1a2879801bc3b4555fde54e68d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c0:8c:49:d8:42:93:cd:3b:f0:bd:ad:cd:7e:
d5:0d:56:32:03:77:97:2c:fd:3a:ef:be:c8:a5:68:
4d:2e:4b:f2:b3:b3:31:68:2a:84:02:c3:22:81:f4:
cd:c1:94:7c:7f:43:51:01:72:26:56:84:6f:4e:1f:
c7:67:08:6c:07:ae:47:6c:2b:1d:91:e0:ef:69:d8:
62:6b:4d:d5:99:56:05:65:a4:6e:e5:7c:c4:a5:f7:
4e:aa:df:5b:27:18:11:01:a7:33:b9:da:d1:f5:01:
35:2a:ed:51:a6:31:ad:aa:36:25:8f:3e:f2:e3:04:
eb:81:1f:c2:5d:6e:d9:5c:be:ef:aa:9a:bc:24:4c:
73:bd:5e:ff:fd:e1:c5:f9:16:5c:1a:ad:18:e2:12:
29:10:d4:a9:d2:5d:a2:be:d3:07:1a:9c:e4:8d:38:
c1:3a:a3:28:fa:5f:7a:0e:0f:2f:cc:d5:00:63:8c:
0f:8d:89:75:6a:ad:96:98:31:fd:e9:79:e6:28:e3:
6f:ae:b2:08:33:82:ed:27:34:2a:27:59:7e:58:0c:
bd:d2:32:80:d0:b4:7e:f7:12:4a:27:57:c3:d2:f8:
9d:28:5b:04:7d:9e:7b:cf:20:7a:5b:2e:2c:9e:c9:
01:9d:7f:7c:44:67:6d:09:03:e8:e0:9c:93:2d:df:
10:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C4:60:7F:71:22:AF:1A:28:79:80:1B:C3:B4:55:5F:DE:54:E6:8D
X509v3 Authority Key Identifier:
keyid:D3:6B:FD:92:8B:CC:B4:2A:D9:C4:68:A5:52:AB:73:93:FD:D8:70:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02v9kovMtCrZxGilUqtzk_3YcJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/xcRgf3EirxooeYAbw7RVX95U5o0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.138.0.0/21
212.159.255.0/24
Signature Algorithm: sha256WithRSAEncryption
18:c0:93:c9:58:23:71:39:a5:b9:49:94:65:20:5d:f4:47:78:
9b:3f:86:e8:92:4f:de:87:3b:1b:21:83:e4:49:5e:5b:35:a6:
00:43:be:17:91:66:db:f7:ec:50:0b:bc:13:74:a2:50:cb:be:
2a:d1:b0:5b:94:0c:7a:e1:d6:94:75:ac:af:9e:d7:e9:12:6d:
e8:2a:75:98:78:f9:9c:16:1a:3c:b4:cd:70:89:db:2f:f3:b7:
0a:cb:d5:79:b7:09:c7:e5:ab:a5:45:d9:e0:a6:84:30:17:85:
7e:63:93:d4:66:10:cb:d0:20:8f:5a:2a:19:73:c8:23:cf:65:
b8:4b:10:0e:12:ec:3b:16:e6:6d:91:6b:7d:84:d6:eb:a1:23:
f1:55:80:42:46:30:7f:c1:49:17:a5:0c:26:39:18:37:9f:0d:
14:c1:9d:7f:9f:3a:45:0e:ca:71:8b:f9:41:59:38:bd:07:1b:
ac:92:19:67:e9:b8:2f:d2:6b:d3:da:27:9b:26:35:e6:f2:af:
61:30:b5:d8:a1:5d:cd:43:c1:60:f2:2d:3f:dc:db:b7:38:2e:
03:d0:a8:77:1f:34:5b:31:78:1e:11:9a:58:75:34:bb:73:28:
79:53:e9:6e:91:d1:c3:37:8b:6d:98:ad:c6:99:2d:87:57:2c:
5f:46:a9:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 9 11:17:33 2023 by rpki-client on console-ams.rpki-client.org