Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/cFXD3r5WLtw9LL52D4ioWfVrC_Q.roa
File: cFXD3r5WLtw9LL52D4ioWfVrC_Q.roa (raw, json)
Hash identifier: IUu5jP9cC9XoHZ1/l/kowqrv2r7lGeRm44dUIXIQHUw=
Subject key identifier: 70:55:C3:DE:BE:56:2E:DC:3D:2C:BE:76:0F:88:A8:59:F5:6B:0B:F4
Certificate issuer: /CN=c784128505f7f99c7570442980adeb8af90cc270
Certificate serial: 0187A308956C03438154D23F8DF9C15DD601
Authority key identifier: C7:84:12:85:05:F7:F9:9C:75:70:44:29:80:AD:EB:8A:F9:0C:C2:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/cFXD3r5WLtw9LL52D4ioWfVrC_Q.roa
Signing time: Fri 21 Apr 2023 08:57:41 +0000
ROA not before: Fri 21 Apr 2023 08:57:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 396535
IP address blocks: 185.151.204.0/24 maxlen: 24
86.48.44.0/23 maxlen: 23
2a0b:14c0:3::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a3:08:95:6c:03:43:81:54:d2:3f:8d:f9:c1:5d:d6:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c784128505f7f99c7570442980adeb8af90cc270
Validity
Not Before: Apr 21 08:57:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7055c3debe562edc3d2cbe760f88a859f56b0bf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:f8:2f:9e:c5:5b:d4:a3:65:5b:fe:97:6e:c1:
aa:05:5b:3a:a1:a9:58:f4:ce:f4:4b:a7:47:5e:12:
f9:7f:97:aa:f5:55:5d:f0:6e:e6:f0:2f:68:24:2a:
e9:39:c8:2c:c1:71:d9:11:4b:26:c0:10:7a:41:24:
d0:dd:67:51:17:62:d5:4a:85:e4:5a:5e:6d:8f:e9:
42:d4:ba:1a:81:f1:50:a1:7e:97:d1:f8:ae:3b:8f:
3b:7e:7e:ad:e7:06:ae:10:ae:7f:f3:22:ca:e5:cb:
a6:e1:6d:74:77:6a:6c:fd:f0:14:2d:ee:17:05:3d:
a3:78:79:f7:e9:2a:88:bb:9f:3f:26:93:58:ae:86:
5c:8a:ee:1d:80:0a:db:11:ad:20:ab:20:f3:00:9b:
5f:bb:ad:53:96:10:03:72:c5:8a:61:19:60:c2:46:
ef:3a:2d:e8:04:bc:40:64:be:97:02:a1:2a:9d:2a:
f5:46:2c:f9:1e:5c:e3:c2:03:87:87:a7:a2:d1:c6:
c8:58:45:7d:1c:41:91:77:74:35:15:23:0f:f6:77:
16:cc:35:83:23:d1:01:10:85:ae:75:a5:41:f7:74:
64:72:2b:89:12:58:8c:44:30:bc:bd:d8:56:d5:a5:
43:bf:36:4d:fd:a8:7d:65:14:08:09:72:87:3c:93:
fb:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:55:C3:DE:BE:56:2E:DC:3D:2C:BE:76:0F:88:A8:59:F5:6B:0B:F4
X509v3 Authority Key Identifier:
keyid:C7:84:12:85:05:F7:F9:9C:75:70:44:29:80:AD:EB:8A:F9:0C:C2:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/cFXD3r5WLtw9LL52D4ioWfVrC_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.48.44.0/23
185.151.204.0/24
IPv6:
2a0b:14c0:3::/48
Signature Algorithm: sha256WithRSAEncryption
33:cf:8b:1c:75:25:59:f3:69:cc:00:ce:50:47:e0:5f:4e:c2:
3c:2b:fe:13:26:d8:1e:fc:76:94:74:ff:d5:8d:10:08:65:a2:
4d:b6:eb:c6:b5:d2:5d:6d:81:a7:12:3c:ca:88:fa:29:df:84:
02:c3:44:c9:21:78:6e:fc:03:2c:40:ff:e9:05:ea:dd:d2:01:
bc:de:25:70:43:a6:d0:68:82:9c:0a:a6:df:6c:92:8b:c2:b0:
75:1a:27:50:5a:85:53:9e:95:99:95:ac:bd:d2:c5:c6:61:b6:
9d:38:3c:c0:44:34:50:63:af:60:ba:fa:b1:0a:e7:e9:be:f9:
a8:5b:3e:3f:f4:56:0c:ee:de:1f:34:2d:dd:e0:e0:c8:28:8f:
7b:06:11:34:be:6f:3e:4b:0c:c4:08:83:3b:ec:7c:df:56:64:
02:95:ad:84:99:bb:39:06:b8:f8:fd:51:7c:f8:03:6b:d5:f2:
89:80:a2:bf:2e:89:52:66:30:34:c4:e0:52:ae:71:06:da:f1:
30:ad:16:98:48:6e:a6:6f:4a:ee:5d:56:9e:08:af:78:3b:19:
88:97:8b:2c:f3:3c:07:90:f4:2a:d6:c2:be:c0:06:d8:51:d5:
76:56:ff:4e:0e:55:fc:e6:93:4f:ba:d2:20:a8:ac:75:86:c1:
2d:61:31:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:08 2023 by rpki-client on console-ams.rpki-client.org