Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/62764b-9aa6-4f12-a71c-6bac34987019/1/dyArD7__0rqL1gEanPf1fa3eKlw.roa
File: dyArD7__0rqL1gEanPf1fa3eKlw.roa (raw, json)
Hash identifier: SMMKzXVduyGeNFK3hVH0CVhtFlo1ezxTvsPEbW1n+nI=
Subject key identifier: 77:20:2B:0F:BF:FF:D2:BA:8B:D6:01:1A:9C:F7:F5:7D:AD:DE:2A:5C
Certificate issuer: /CN=35c96065093998ba42cfba11bf0d17d3ac403d40
Certificate serial: 01865C0E7955CFF10F76E88A8CC209B81083
Authority key identifier: 35:C9:60:65:09:39:98:BA:42:CF:BA:11:BF:0D:17:D3:AC:40:3D:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NclgZQk5mLpCz7oRvw0X06xAPUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/62764b-9aa6-4f12-a71c-6bac34987019/1/dyArD7__0rqL1gEanPf1fa3eKlw.roa
Signing time: Thu 16 Feb 2023 21:08:17 +0000
ROA not before: Thu 16 Feb 2023 21:08:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211936
IP address blocks: 79.139.52.0/22 maxlen: 24
95.178.8.0/21 maxlen: 24
198.14.16.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:5c:0e:79:55:cf:f1:0f:76:e8:8a:8c:c2:09:b8:10:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35c96065093998ba42cfba11bf0d17d3ac403d40
Validity
Not Before: Feb 16 21:08:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=77202b0fbfffd2ba8bd6011a9cf7f57dadde2a5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:72:ee:88:be:d2:e5:8d:c4:d1:9f:d1:06:93:
7a:d3:30:e3:b6:41:c4:a4:a8:fc:0e:b0:ef:4a:6a:
b8:a1:c7:42:f8:13:be:ca:ad:60:e4:91:e1:b1:ea:
6c:3f:dd:be:e7:ef:6d:00:d0:bd:fa:f9:2f:e2:88:
b7:4b:80:a7:68:39:01:4b:48:ff:3f:2f:cc:16:37:
45:62:76:2c:d0:50:7a:e0:f1:4d:a4:a5:a4:71:d1:
24:39:1c:4a:34:86:a1:60:39:08:86:b6:5d:79:9f:
c1:27:a0:9b:5f:8e:d8:bd:c8:0d:7e:43:5d:72:b4:
8a:f2:5f:b6:65:7b:52:36:f0:bc:33:87:37:cf:7e:
92:a0:26:1c:e1:1e:c3:7f:e5:4e:ef:04:cd:92:6c:
76:d9:1d:22:ab:18:f3:10:71:20:76:ed:7e:7b:1c:
3d:41:a8:1e:1c:03:75:c2:39:4f:9b:8d:d4:2a:57:
7e:1a:24:2e:25:41:8f:64:bc:04:4d:e0:4d:30:34:
71:91:2e:ed:30:29:ca:7c:25:b6:33:26:fc:c5:62:
03:b5:79:1e:c3:be:f8:cf:3a:e7:1d:5f:5b:0e:63:
1b:ff:5c:84:bf:92:55:be:59:62:ba:ce:58:b4:fc:
ee:1c:7d:56:42:12:da:80:7f:74:53:fa:c0:bf:e7:
5f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:20:2B:0F:BF:FF:D2:BA:8B:D6:01:1A:9C:F7:F5:7D:AD:DE:2A:5C
X509v3 Authority Key Identifier:
keyid:35:C9:60:65:09:39:98:BA:42:CF:BA:11:BF:0D:17:D3:AC:40:3D:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NclgZQk5mLpCz7oRvw0X06xAPUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/62764b-9aa6-4f12-a71c-6bac34987019/1/dyArD7__0rqL1gEanPf1fa3eKlw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/62764b-9aa6-4f12-a71c-6bac34987019/1/NclgZQk5mLpCz7oRvw0X06xAPUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.139.52.0/22
95.178.8.0/21
198.14.16.0/20
Signature Algorithm: sha256WithRSAEncryption
51:f8:d5:55:37:90:62:24:e3:61:ce:5b:25:d9:9c:14:97:69:
de:8e:6a:b2:28:eb:6a:23:36:86:f6:cf:f8:be:51:98:19:9d:
8d:61:83:8a:9a:df:54:1e:bd:67:de:c1:8d:57:f4:d9:16:96:
25:ec:02:98:c0:30:b6:6a:03:d3:52:7e:0d:39:27:bf:34:5f:
18:e7:78:84:53:bc:0b:5b:5d:ba:5b:c2:5f:a1:e4:c4:99:57:
f2:47:68:cf:60:50:c3:6e:d4:6d:27:22:f2:e1:50:02:af:b5:
9a:9e:22:3e:3d:a0:31:c7:18:2d:68:fe:1f:b2:c0:0d:24:32:
af:97:99:f5:ff:dc:ae:04:c8:bf:ca:12:60:8f:ba:33:a5:e9:
6e:fe:51:ab:ae:70:d0:3b:8f:d1:e0:be:ee:91:b4:2a:9c:cb:
c4:d7:e1:30:0b:40:e1:0c:d3:73:ba:e1:81:e1:4f:b6:1e:be:
8a:3b:b4:4f:d4:e3:dd:b3:79:4d:7c:39:3c:6e:3d:09:e6:57:
c6:9e:67:60:ae:99:a0:5d:f9:1d:a5:a8:00:46:a5:3c:35:94:
77:60:6f:11:30:9e:8e:86:30:51:1d:d2:8e:a2:d8:cf:01:0a:
e4:4a:ab:f7:f6:17:84:df:7e:ff:38:eb:78:c1:84:bb:09:20:
f3:6d:79:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:41 2023 by rpki-client on console-fra.rpki-client.org