Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/SqcQ8CSRecIhqC1vJxhZidzPtHs.roa
File: SqcQ8CSRecIhqC1vJxhZidzPtHs.roa (raw, json)
Hash identifier: 5ETl6fjuVTfSOFJDs027S/WgQGXZRXtOiNpQkBcC2v4=
Subject key identifier: 4A:A7:10:F0:24:91:79:C2:21:A8:2D:6F:27:18:59:89:DC:CF:B4:7B
Certificate issuer: /CN=1c39d57936dd2d1521443e68dadd9d0949cde33f
Certificate serial: 01857183241049825602C7B32E8A11510E4E
Authority key identifier: 1C:39:D5:79:36:DD:2D:15:21:44:3E:68:DA:DD:9D:09:49:CD:E3:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDnVeTbdLRUhRD5o2t2dCUnN4z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/SqcQ8CSRecIhqC1vJxhZidzPtHs.roa
Signing time: Mon 02 Jan 2023 08:04:57 +0000
ROA not before: Mon 02 Jan 2023 08:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48284
IP address blocks: 94.125.72.0/21 maxlen: 21
130.255.104.0/21 maxlen: 21
109.70.192.0/21 maxlen: 21
185.35.208.0/22 maxlen: 22
88.133.240.0/21 maxlen: 30
109.235.224.0/21 maxlen: 21
5.199.176.0/21 maxlen: 21
212.237.168.0/21 maxlen: 21
2a02:778::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:83:24:10:49:82:56:02:c7:b3:2e:8a:11:51:0e:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c39d57936dd2d1521443e68dadd9d0949cde33f
Validity
Not Before: Jan 2 08:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4aa710f0249179c221a82d6f27185989dccfb47b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e3:35:2e:b9:bd:99:9b:22:91:d7:f8:c2:9f:
c2:ed:9d:6c:71:0f:70:39:4c:fd:60:75:df:45:31:
7d:8e:c4:86:3f:39:cd:40:55:cc:14:df:cb:f1:ea:
51:11:16:3c:f9:08:eb:ff:a2:f2:6b:97:12:53:9a:
d5:d7:ec:26:a0:25:b7:2d:89:c6:6e:b9:79:ef:0f:
d4:93:9a:7b:e7:1b:12:d7:13:70:f3:93:ba:35:e0:
9c:36:70:eb:62:74:19:56:05:27:10:99:6f:b0:69:
44:28:f6:c9:3b:df:50:a9:94:38:59:71:43:3c:0e:
75:2b:43:3d:30:84:79:c8:ff:94:e6:bf:73:b2:de:
b8:1e:5c:d3:b0:5e:82:ba:35:d1:5f:06:f3:07:9d:
49:90:b5:6a:42:a7:4f:94:e0:21:e6:68:bf:7a:fd:
91:75:85:e8:4f:94:2d:a4:32:92:37:9f:e3:ce:0f:
b5:94:09:9d:28:d9:17:d8:e3:3f:a6:51:01:d6:43:
be:c4:97:93:72:fc:98:2c:58:62:51:e4:bd:74:1e:
c9:ee:32:d5:a2:89:95:ca:02:71:ec:e7:ff:ad:1f:
2e:26:f6:67:02:3a:89:ef:45:a9:da:9f:89:d3:88:
5c:66:7f:98:7e:8e:df:39:e2:c0:57:3f:4e:98:40:
89:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A7:10:F0:24:91:79:C2:21:A8:2D:6F:27:18:59:89:DC:CF:B4:7B
X509v3 Authority Key Identifier:
keyid:1C:39:D5:79:36:DD:2D:15:21:44:3E:68:DA:DD:9D:09:49:CD:E3:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDnVeTbdLRUhRD5o2t2dCUnN4z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/SqcQ8CSRecIhqC1vJxhZidzPtHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/HDnVeTbdLRUhRD5o2t2dCUnN4z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.176.0/21
88.133.240.0/21
94.125.72.0/21
109.70.192.0/21
109.235.224.0/21
130.255.104.0/21
185.35.208.0/22
212.237.168.0/21
IPv6:
2a02:778::/32
Signature Algorithm: sha256WithRSAEncryption
76:be:22:b2:e7:d4:01:50:87:08:f5:fd:f4:69:d8:12:a2:88:
c6:23:7e:bf:19:ab:ad:c5:b4:be:fb:0e:be:3c:b2:94:4a:45:
ea:c6:9c:68:e5:80:04:0f:90:13:11:6c:a7:6b:a8:e4:e1:16:
c8:fa:e8:84:19:95:a5:a8:f0:8a:10:36:60:74:77:8a:80:be:
2d:d0:1e:98:c8:63:f0:1a:be:1e:44:5c:33:41:ad:79:69:c5:
6b:b6:b2:f3:68:65:55:ae:a8:94:e2:4b:99:60:03:4e:53:7d:
35:f9:88:9b:af:e2:02:a3:0e:8b:46:87:31:c6:ae:67:c0:bf:
ee:44:c6:59:f5:e2:ed:4a:8a:74:68:71:8a:16:b9:99:1b:4b:
84:16:d5:65:73:f9:df:67:bc:03:b9:f7:90:fe:ae:9e:89:dd:
bc:0d:cc:70:c4:bf:3b:89:96:ac:d1:ce:29:f4:63:fb:4f:06:
ca:30:98:5e:1c:77:a6:ea:5f:e3:90:9d:cc:25:fd:31:42:f1:
74:4e:1c:2f:3a:b4:a2:ed:7a:bd:54:3b:fe:e6:5e:aa:57:82:
38:dc:c5:e9:2e:3b:34:c5:5d:da:08:4c:d2:ed:2e:6e:65:bc:
1e:67:eb:90:f3:e5:e2:e2:52:82:02:ba:6a:c9:bd:0c:d0:99:
af:58:2d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:51 2024 by rpki-client on console-ams.rpki-client.org