Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/Iq6UtXSW121dFCzo6t8OsJnhWf4.roa
File: Iq6UtXSW121dFCzo6t8OsJnhWf4.roa (raw, json)
Hash identifier: g9+gFlA15oEjDf0gD7xtIWdwQsTsJIvoVNGaqF/Y6gM=
Subject key identifier: 22:AE:94:B5:74:96:D7:6D:5D:14:2C:E8:EA:DF:0E:B0:99:E1:59:FE
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 0189DB32D6D638407D59614FCEF3D9ED6C2D
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/Iq6UtXSW121dFCzo6t8OsJnhWf4.roa
Signing time: Wed 09 Aug 2023 16:48:09 +0000
ROA not before: Wed 09 Aug 2023 16:48:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 212.87.217.0/24 maxlen: 24
185.240.85.0/24 maxlen: 24
45.141.130.0/24 maxlen: 24
193.56.21.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:db:32:d6:d6:38:40:7d:59:61:4f:ce:f3:d9:ed:6c:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Aug 9 16:48:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=22ae94b57496d76d5d142ce8eadf0eb099e159fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e1:1e:b3:df:bf:f9:99:30:db:01:76:0d:46:
fc:31:9b:56:4b:21:12:66:0f:b8:40:d2:f9:4b:86:
ad:11:39:34:fe:b1:46:c8:91:37:6f:fb:89:54:ab:
f1:81:29:3c:95:4b:36:49:82:81:22:20:92:8f:83:
ce:55:a6:2d:e4:62:ab:43:84:b5:59:6c:c2:f9:fe:
fa:82:ba:fd:d1:5e:70:49:e5:ac:ca:67:8a:69:dd:
9c:cd:6b:d9:16:a4:9e:f0:3f:b5:03:43:d5:ae:0e:
69:1d:0a:d0:b2:1a:14:19:80:aa:f4:2f:6c:62:50:
ec:cf:65:2a:db:79:49:29:9b:f9:ce:9e:e0:87:c2:
f8:2c:4b:a3:b2:c5:2a:b3:76:a8:22:b6:71:eb:05:
1a:5d:6e:df:bf:02:db:3a:3e:ea:f7:3b:23:83:5c:
fd:39:79:e3:05:26:7b:43:dd:09:fa:15:9d:a9:4e:
43:9f:9d:b1:8f:e6:82:c2:5f:d1:ae:23:1e:d6:17:
48:f3:9a:0a:f4:70:92:1a:ef:e2:75:f9:71:2e:06:
fb:c5:9a:cf:2e:3a:f9:93:d4:9a:2a:c1:84:81:1c:
60:48:a6:8a:c8:a1:37:22:62:89:0b:d6:cd:65:32:
1b:0a:96:b9:b5:17:3d:3b:ba:bf:09:3a:2a:0e:69:
04:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:AE:94:B5:74:96:D7:6D:5D:14:2C:E8:EA:DF:0E:B0:99:E1:59:FE
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/Iq6UtXSW121dFCzo6t8OsJnhWf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.130.0/24
185.240.85.0/24
193.56.21.0/24
212.87.217.0/24
Signature Algorithm: sha256WithRSAEncryption
81:bf:f5:40:58:3d:77:b7:3d:5a:53:e0:2f:e2:a1:95:3e:58:
f3:fb:e6:9d:58:56:81:e8:93:0d:39:f6:3c:56:7a:65:5c:51:
50:bb:d5:62:43:fa:b2:b6:55:53:1d:0c:4f:97:69:ed:18:c7:
f3:30:af:7c:49:bb:3b:ae:ba:d6:cc:6d:95:5f:e6:c5:7c:a2:
58:95:e5:94:00:c1:16:a0:2a:71:4b:88:59:9d:87:b1:1c:e4:
2e:5c:79:a5:00:3c:0d:94:56:5d:c4:10:ed:21:07:df:7c:32:
53:8c:78:6e:d3:39:c8:23:9d:02:d3:90:bd:c5:ea:b9:4f:34:
9d:c0:3f:58:4f:06:a9:46:ae:70:c7:1c:7b:c1:1f:fc:81:21:
8a:9d:0c:62:d9:0c:6d:62:35:2a:87:4d:23:d6:13:bd:8d:f7:
0b:38:50:4c:41:df:66:d3:07:d1:1d:b7:3d:d5:7a:a5:40:15:
91:55:72:ed:8d:1f:39:14:bc:40:36:ff:a1:3a:4d:d2:27:71:
31:67:05:02:b4:7a:f3:54:b9:67:c3:09:b8:09:9d:a2:93:46:
68:69:14:3a:04:5a:de:8e:ee:2d:0b:bb:eb:f4:65:21:ee:3f:
50:e6:68:58:74:e3:8e:67:05:8e:dc:88:0a:ea:7d:7b:58:4e:
96:76:3d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:09:39 2024 by rpki-client on console-ams.rpki-client.org