Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/oYi6wdIL9Urciuskldx7x0VazkI.roa
File: oYi6wdIL9Urciuskldx7x0VazkI.roa (raw, json)
Hash identifier: rblHF8wbXAJtCJppOLfHx7bENnb016BKJ6AWZJlmrGk=
Subject key identifier: A1:88:BA:C1:D2:0B:F5:4A:DC:8A:EB:24:95:DC:7B:C7:45:5A:CE:42
Certificate issuer: /CN=a57d4cfe60f8a30a4d0ff94b94ebadfc88c9ac11
Certificate serial: 0187E699E70E77268AA0D2B7DA5C9AAB0075
Authority key identifier: A5:7D:4C:FE:60:F8:A3:0A:4D:0F:F9:4B:94:EB:AD:FC:88:C9:AC:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pX1M_mD4owpND_lLlOut_IjJrBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/oYi6wdIL9Urciuskldx7x0VazkI.roa
Signing time: Thu 04 May 2023 11:50:58 +0000
ROA not before: Thu 04 May 2023 11:50:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28952
IP address blocks: 37.58.0.0/20 maxlen: 20
46.34.224.0/19 maxlen: 19
37.152.96.0/19 maxlen: 19
31.3.32.0/19 maxlen: 19
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e6:99:e7:0e:77:26:8a:a0:d2:b7:da:5c:9a:ab:00:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a57d4cfe60f8a30a4d0ff94b94ebadfc88c9ac11
Validity
Not Before: May 4 11:50:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a188bac1d20bf54adc8aeb2495dc7bc7455ace42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a3:b7:24:f5:65:8b:97:f7:06:a5:bd:94:d9:
e6:81:46:6b:c6:ab:8d:0e:45:4f:0b:6f:1e:5c:13:
f1:06:51:96:f5:69:ed:7e:d7:c2:37:44:8b:c0:64:
aa:41:a5:3b:78:14:de:c9:99:d7:cc:34:3a:06:a4:
88:0c:1d:08:67:c7:d5:51:41:d4:9d:ca:c2:b1:b5:
10:d7:83:81:60:a2:db:ca:93:bb:57:c5:90:40:87:
96:b3:7a:a4:a6:00:b2:c6:18:7f:6f:55:ba:1a:83:
a1:de:e1:03:3c:ea:4f:7c:b8:11:e3:0d:6a:27:44:
ef:c2:5c:b5:c6:09:18:a3:9c:47:35:6c:34:27:a6:
1f:03:5d:27:97:15:fb:2d:c3:31:58:ce:6e:ee:fb:
09:57:a4:ad:48:e8:2a:29:da:d0:c6:16:e1:c3:86:
a1:68:eb:5c:73:09:88:be:9d:57:55:d1:2f:d5:81:
be:fb:ea:4c:78:b2:20:96:a4:05:b7:ae:7f:43:4c:
ec:04:be:19:db:64:0e:32:17:c5:87:28:a8:58:48:
8d:05:4c:71:58:b0:f6:a5:a5:17:89:dc:7a:e2:45:
20:38:ce:d5:f0:65:8b:a3:98:a9:6a:6e:fb:8b:bd:
30:ab:5f:82:37:91:5a:91:6f:9b:82:96:d6:58:8c:
ca:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:88:BA:C1:D2:0B:F5:4A:DC:8A:EB:24:95:DC:7B:C7:45:5A:CE:42
X509v3 Authority Key Identifier:
keyid:A5:7D:4C:FE:60:F8:A3:0A:4D:0F:F9:4B:94:EB:AD:FC:88:C9:AC:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pX1M_mD4owpND_lLlOut_IjJrBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/oYi6wdIL9Urciuskldx7x0VazkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.3.32.0/19
37.58.0.0/20
37.152.96.0/19
46.34.224.0/19
Signature Algorithm: sha256WithRSAEncryption
1d:a9:04:ab:a6:1d:f3:8c:a6:0b:ff:6f:4f:81:cd:63:a3:87:
2a:4d:51:6a:0b:70:09:79:40:2f:83:b0:79:6e:6b:8e:e1:22:
0c:46:c3:fc:9f:c1:a4:12:96:0a:7f:8e:6b:c5:d1:13:e3:25:
17:15:31:cd:b9:a9:08:b2:bd:44:07:11:64:ae:31:27:a8:e0:
aa:1b:c1:ca:ca:81:06:6e:1b:a1:55:da:b7:55:4d:dd:81:2f:
58:47:ae:e0:40:a8:57:33:c0:45:1d:93:29:ea:63:47:a9:9e:
84:2c:a4:fb:2c:ba:d3:33:8f:a6:65:b0:b8:ba:fc:42:50:47:
05:f5:4c:b9:2a:6e:53:ef:e8:9b:58:cf:23:e7:19:cd:05:4f:
fc:a5:2b:4d:48:b5:7f:fc:03:0c:a1:24:f9:d9:bd:a8:4d:80:
08:04:83:74:e5:a6:a7:fb:4f:8b:60:7a:3a:1c:0f:65:54:c9:
d8:1e:60:a5:20:d0:c1:83:42:75:8c:d4:20:6b:82:9a:d0:9f:
50:ba:20:b1:e9:10:32:50:ed:8e:d9:ac:cb:55:d4:de:60:ba:
b6:63:63:1d:39:9a:74:74:f8:e6:a4:2f:71:e3:ac:3c:2f:b4:
02:ba:b7:3e:01:36:0f:3b:11:e0:e6:a8:99:65:8b:de:7a:8b:
de:0d:85:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:52 2023 by rpki-client on console-ams.rpki-client.org