Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/A8-36KIq2zUjjNqnoOlUMnw9zrY.roa
File: A8-36KIq2zUjjNqnoOlUMnw9zrY.roa (raw, json)
Hash identifier: YN+q5mEBTRc7SEXTC0uZ9g8eCrkjEvrvQ3ADzltAszo=
Subject key identifier: 03:CF:B7:E8:A2:2A:DB:35:23:8C:DA:A7:A0:E9:54:32:7C:3D:CE:B6
Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial: 0189229A15288010E73D65A8CA815A088E7D
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/A8-36KIq2zUjjNqnoOlUMnw9zrY.roa
Signing time: Tue 04 Jul 2023 20:31:10 +0000
ROA not before: Tue 04 Jul 2023 20:31:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 62.56.208.0/21 maxlen: 24
213.170.145.0/24 maxlen: 24
185.104.12.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:22:9a:15:28:80:10:e7:3d:65:a8:ca:81:5a:08:8e:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Validity
Not Before: Jul 4 20:31:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=03cfb7e8a22adb35238cdaa7a0e954327c3dceb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:de:30:0c:65:1e:6c:78:6f:80:db:fd:27:64:
72:ef:3d:bd:e3:32:f3:57:c0:3a:05:6c:9d:be:ee:
a3:b5:8f:12:e7:fd:55:ef:da:ae:76:2e:db:d1:70:
38:5a:8d:75:21:d4:59:fa:d4:cc:00:d1:4c:a3:51:
50:5a:5c:b5:dc:13:30:40:1a:cf:fd:ac:d6:3d:c2:
35:7f:75:67:ac:4c:e2:33:01:f3:b2:56:95:33:98:
ab:eb:1e:31:82:05:a3:ab:22:7b:be:c9:cf:a2:6f:
88:8b:66:7d:a8:9a:9e:7e:c4:52:5d:5d:06:99:73:
c7:9c:7f:07:08:20:1e:86:93:1d:7a:6b:5f:33:54:
05:4e:11:a6:4b:11:93:82:4e:03:b6:a1:db:5f:3d:
ad:be:7b:d9:cc:65:6e:bc:99:9d:0f:ae:86:16:14:
7d:2c:c0:f8:98:27:d1:a7:36:84:5c:5a:c1:fd:74:
7d:86:84:bd:f7:f1:59:9d:a6:59:fb:ee:18:39:02:
1d:d4:e1:23:2d:61:7b:26:ae:78:f4:17:4a:8e:eb:
4a:a9:92:23:bb:f1:60:22:30:8b:c1:27:66:bc:cd:
8d:36:0e:76:08:68:40:98:a0:a3:c2:b9:d3:26:8e:
29:cf:68:5d:fa:3d:88:db:9d:ce:e6:cc:63:3d:c9:
52:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:CF:B7:E8:A2:2A:DB:35:23:8C:DA:A7:A0:E9:54:32:7C:3D:CE:B6
X509v3 Authority Key Identifier:
keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/A8-36KIq2zUjjNqnoOlUMnw9zrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.56.208.0/21
185.104.12.0/22
213.170.145.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:3d:7e:28:22:7a:b9:96:f8:7d:fa:bf:f1:ca:2d:42:45:01:
b0:3d:2e:66:bf:20:65:4c:a5:95:bb:de:44:2e:46:f8:c9:42:
c3:fd:54:91:3f:0c:9e:85:89:e2:5d:a0:41:a2:c6:d9:5e:27:
d6:17:77:75:2e:ef:fb:1d:c4:6a:d9:2c:99:50:44:28:c8:b2:
ea:8c:b2:4e:13:69:fb:fb:19:d2:89:e2:fb:3c:10:a0:18:c0:
e2:71:ff:fe:12:84:9f:c2:af:69:f6:86:66:e4:8c:0d:8b:14:
01:66:2a:49:f6:b4:5b:a7:c1:db:e8:90:be:3c:7c:2c:f2:97:
f4:d3:3e:0f:e6:f5:a3:ec:d5:52:20:44:34:ed:bd:9b:3a:f0:
b9:3a:9f:4a:66:24:a8:25:6b:6e:97:4a:19:29:61:ef:fd:fa:
40:a5:e7:01:75:85:c8:d7:62:c6:9e:c5:19:b3:f8:ec:02:e6:
c8:fa:e0:f6:b6:70:36:64:62:29:5b:b8:8f:f3:f7:4b:80:48:
81:02:70:6f:fb:9b:05:c6:0a:bf:e6:9a:65:3e:d3:f9:c7:a8:
a1:4e:0e:83:43:29:32:3d:e1:b2:66:f5:e2:72:80:ff:a1:fd:
25:7b:7d:3b:36:6b:15:1e:39:91:28:fd:5c:f6:22:da:43:f6:
63:8d:86:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:06 2023 by rpki-client on console-fra.rpki-client.org