Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/kMTd0aeYedESJROkO4jlp36ig_o.roa
File: kMTd0aeYedESJROkO4jlp36ig_o.roa (raw, json)
Hash identifier: e10bvN2tkBipi7LTu2kCbmbzdpbei51jvAbl3g1xgbg=
Subject key identifier: 90:C4:DD:D1:A7:98:79:D1:12:25:13:A4:3B:88:E5:A7:7E:A2:83:FA
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 018571F0FD9BD3148F76914B76E74137DABF
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/kMTd0aeYedESJROkO4jlp36ig_o.roa
Signing time: Mon 02 Jan 2023 10:04:57 +0000
ROA not before: Mon 02 Jan 2023 10:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199770
IP address blocks: 84.232.62.0/24 maxlen: 24
88.148.16.0/24 maxlen: 24
88.148.14.0/24 maxlen: 24
88.148.29.0/24 maxlen: 24
84.232.108.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:f0:fd:9b:d3:14:8f:76:91:4b:76:e7:41:37:da:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jan 2 10:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=90c4ddd1a79879d1122513a43b88e5a77ea283fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:68:44:da:95:2e:c0:c3:2e:70:02:aa:28:5d:
ed:9c:be:55:52:62:52:c5:e6:31:a3:65:87:9f:3f:
8c:9b:72:5c:78:b6:1b:9b:8f:9d:3f:a5:77:55:c7:
14:88:f3:1b:af:e1:0c:0c:5f:15:3b:d1:26:9b:3f:
b5:95:40:26:9e:3e:f3:e9:44:3c:b1:33:d6:33:75:
68:39:33:95:b2:bf:b4:59:00:f5:cd:31:9d:7a:c7:
dc:30:45:55:9c:0a:68:d0:94:e1:f1:75:d0:d9:6e:
43:70:72:cd:5a:94:d4:30:1f:b3:0e:bb:f4:c3:07:
df:53:38:86:f4:91:b8:af:47:f8:e4:45:f2:61:f9:
1c:eb:ad:6e:9d:f7:a5:d7:3d:44:ed:ff:74:6b:f6:
9c:05:d1:fa:7e:e5:35:d4:ec:17:7c:a8:2f:53:e1:
c9:b1:58:3e:06:cc:84:19:7c:10:4c:3a:a5:ce:3c:
05:8a:3a:c8:0b:b1:96:38:a7:df:60:89:ef:8a:58:
86:da:23:6e:0a:c6:04:c4:93:83:e3:e2:b6:1a:f2:
c4:76:d4:b5:29:96:d5:fc:57:f4:ad:51:19:43:d1:
14:40:ee:8a:2b:9b:0f:b5:27:19:ef:a2:4e:de:51:
f8:cf:b9:22:17:1c:11:6b:d7:e3:f6:d8:e9:43:38:
22:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:C4:DD:D1:A7:98:79:D1:12:25:13:A4:3B:88:E5:A7:7E:A2:83:FA
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/kMTd0aeYedESJROkO4jlp36ig_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.232.62.0/24
84.232.108.0/23
88.148.14.0/24
88.148.16.0/24
88.148.29.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:0d:91:44:4a:02:df:3b:22:fe:64:4a:e7:5d:64:fa:a6:52:
e5:6c:e9:0e:d2:25:7e:bc:cc:5e:20:4d:b7:ac:d2:da:9f:6b:
3a:20:73:d9:40:4d:7b:73:84:5b:44:1e:e8:af:ee:5e:7f:d4:
a7:c3:4c:3f:72:5a:1b:fd:e2:0d:a3:0c:17:66:c3:26:44:ad:
33:fa:70:54:32:c7:8e:24:c4:e6:e4:52:a8:db:5e:27:dc:03:
31:e7:a1:b0:f6:cf:e3:41:20:d4:d8:2c:80:d8:42:84:fb:eb:
4e:64:36:49:8f:ff:78:3b:8f:07:b9:37:f0:c7:ef:5f:89:01:
b0:19:0c:de:85:01:30:5f:e6:d5:ce:bf:9b:9f:1b:19:46:ea:
2b:3f:95:7d:43:50:71:ac:af:0c:e8:1f:35:6e:2b:4a:a4:ef:
0e:d6:cc:6c:64:15:7f:df:fb:0b:e8:a2:6a:11:f7:8d:af:6b:
6e:6e:44:86:de:18:5c:6e:63:e8:f9:6c:23:c9:19:21:1b:8f:
35:07:fc:51:c4:9a:85:8e:7f:83:f0:be:be:99:70:23:88:c0:
0b:89:46:ed:6d:bf:7f:9a:da:78:4b:01:69:74:c9:00:ae:bb:
18:37:f2:8f:2d:fc:90:a3:41:08:67:19:12:17:07:a4:f8:98:
21:e2:2b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:02 2023 by rpki-client on console-ams.rpki-client.org