Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/I1Yx3lriVcGKXEfKZzQ0cACYFHo.roa
File: I1Yx3lriVcGKXEfKZzQ0cACYFHo.roa (raw, json)
Hash identifier: RyDdPYZQDzF2jX2lQITphjmgq1rKu/cRP2h4u/4x29k=
Subject key identifier: 23:56:31:DE:5A:E2:55:C1:8A:5C:47:CA:67:34:34:70:00:98:14:7A
Certificate issuer: /CN=f875df13bf8c1ba8b10e2da480ae61a5348ab8e9
Certificate serial: 01856C6F0AC3A1A803CB0AFF153EC2E3A140
Authority key identifier: F8:75:DF:13:BF:8C:1B:A8:B1:0E:2D:A4:80:AE:61:A5:34:8A:B8:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/I1Yx3lriVcGKXEfKZzQ0cACYFHo.roa
Signing time: Sun 01 Jan 2023 08:24:54 +0000
ROA not before: Sun 01 Jan 2023 08:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50919
IP address blocks: 178.23.72.0/21 maxlen: 21
194.62.224.0/22 maxlen: 22
188.164.200.0/21 maxlen: 21
2a00:1f68::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:6f:0a:c3:a1:a8:03:cb:0a:ff:15:3e:c2:e3:a1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f875df13bf8c1ba8b10e2da480ae61a5348ab8e9
Validity
Not Before: Jan 1 08:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=235631de5ae255c18a5c47ca673434700098147a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:cc:b1:74:7e:3f:f4:d9:72:21:26:70:b8:5b:
ab:ce:61:47:c5:b1:21:fb:df:68:8a:41:a5:75:5f:
79:8e:b4:28:2c:cf:e0:83:a7:75:56:25:b1:a3:66:
f6:fd:be:2a:14:87:1f:41:9d:ef:9c:56:5d:b2:87:
ba:84:00:da:be:b7:39:0e:65:7c:4e:c9:ed:6e:c7:
cc:a4:76:76:72:af:18:5c:d2:28:19:6f:00:e4:56:
e8:f8:a8:66:70:c3:e1:97:72:67:4c:5a:f2:99:8e:
de:64:47:bd:97:c8:ea:12:14:df:cb:3b:66:fd:eb:
50:6b:35:09:50:7c:b1:56:61:19:e8:f6:8a:0a:19:
87:7a:a5:2e:2f:58:ae:6d:94:a9:c2:60:9e:03:48:
6f:5a:a7:9d:24:95:69:12:ad:f8:eb:27:f0:78:ce:
e9:53:f9:b8:9e:b9:05:b2:f0:14:9f:27:28:62:f2:
f1:eb:80:5a:85:6f:36:0b:a4:da:1c:14:c1:2c:86:
5d:5d:eb:c3:30:b5:da:5f:eb:73:0c:94:be:d7:04:
0d:52:06:b2:f8:78:3b:09:6a:ae:1f:94:3a:6e:cf:
0d:09:d4:3c:e5:f3:de:c1:bd:83:53:fe:0e:26:4f:
b8:0a:ad:eb:21:7a:bd:a8:e6:18:ea:6d:78:7d:a6:
7f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:56:31:DE:5A:E2:55:C1:8A:5C:47:CA:67:34:34:70:00:98:14:7A
X509v3 Authority Key Identifier:
keyid:F8:75:DF:13:BF:8C:1B:A8:B1:0E:2D:A4:80:AE:61:A5:34:8A:B8:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/I1Yx3lriVcGKXEfKZzQ0cACYFHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.23.72.0/21
188.164.200.0/21
194.62.224.0/22
IPv6:
2a00:1f68::/32
Signature Algorithm: sha256WithRSAEncryption
3f:bb:7c:6d:a6:7c:38:24:fa:23:7f:cc:26:e0:ea:c8:b5:40:
bb:b9:c7:c4:b4:e4:a4:a8:86:99:6e:8f:b5:6d:e0:93:01:27:
49:99:86:66:56:2f:b9:69:c9:20:9d:3e:04:9f:e6:3e:17:be:
95:89:35:7a:d2:dd:ab:ee:c4:61:5e:a9:dc:e2:7a:dc:b5:d5:
6f:04:6e:78:00:6d:6f:82:b4:00:8a:2c:b2:2a:25:e3:f1:cf:
25:92:c1:cc:13:8b:f9:1c:b9:a9:27:39:d8:e9:f1:93:94:91:
02:fa:de:e8:9d:15:15:2f:01:13:15:cd:46:96:50:75:fe:45:
a3:6a:8c:d4:10:47:97:bc:16:76:0c:b7:79:9f:ca:b7:3f:24:
72:8b:c7:b2:4e:5b:fb:d1:a4:0e:70:24:28:c2:3b:d6:24:3d:
1e:69:16:36:79:fc:2f:77:97:0b:74:c0:9e:ef:b0:08:19:f1:
8a:9a:f1:7e:02:4c:b1:4a:5e:70:e7:ef:c8:54:eb:c0:e4:2d:
a2:fa:83:35:b6:a4:0d:a8:75:45:00:ed:6a:fc:a2:38:c0:83:
43:e4:3f:47:a2:2d:86:84:4d:d0:67:58:09:7c:9b:68:f5:94:
00:7c:57:24:76:f4:ff:b3:34:c9:9c:57:ac:b0:ea:78:61:00:
8d:fa:31:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:34:10 2024 by rpki-client on console-fra.rpki-client.org