Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/dDWXRmnjAFPJquLJ2xAx8TxDQPY.roa
File: dDWXRmnjAFPJquLJ2xAx8TxDQPY.roa (raw, json)
Hash identifier: 1k9b/x3BjPnxvd4nsEOXj3GNiAI1PpCbuOMhFkrO8J4=
Subject key identifier: 74:35:97:46:69:E3:00:53:C9:AA:E2:C9:DB:10:31:F1:3C:43:40:F6
Certificate issuer: /CN=0866af425ab3d39d7337c2b125d39593ad91c1d1
Certificate serial: 01857042AABAE05A06D9C9A66184BC999ECE
Authority key identifier: 08:66:AF:42:5A:B3:D3:9D:73:37:C2:B1:25:D3:95:93:AD:91:C1:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGavQlqz051zN8KxJdOVk62RwdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/dDWXRmnjAFPJquLJ2xAx8TxDQPY.roa
Signing time: Mon 02 Jan 2023 02:14:55 +0000
ROA not before: Mon 02 Jan 2023 02:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205344
IP address blocks: 91.239.54.0/24 maxlen: 24
185.219.12.0/22 maxlen: 22
2a0c:bc00::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:42:aa:ba:e0:5a:06:d9:c9:a6:61:84:bc:99:9e:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0866af425ab3d39d7337c2b125d39593ad91c1d1
Validity
Not Before: Jan 2 02:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7435974669e30053c9aae2c9db1031f13c4340f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:51:d4:2e:c9:7b:34:f0:c3:bf:6f:c1:93:69:
de:7d:f2:89:6a:d7:29:8c:05:cd:87:19:18:dd:73:
01:ae:2f:75:e2:86:da:da:35:60:23:69:ec:92:13:
6a:5b:68:84:7e:c2:96:8a:c7:5c:e0:4e:d7:d4:52:
08:15:c4:12:db:e8:a4:6f:d9:19:aa:83:31:54:c6:
02:e5:9b:f7:48:25:47:3d:c1:a6:e2:22:97:1e:b4:
53:6a:de:64:24:85:08:86:4a:19:6f:67:d3:47:53:
64:ac:74:74:9d:50:23:34:0e:40:a9:a0:c7:21:40:
4b:76:55:4d:2c:2d:32:0a:08:09:dc:89:5b:8b:16:
0e:bc:a7:9c:fe:1d:44:b5:13:af:2b:03:a6:c4:23:
a2:c7:57:a5:6f:01:d8:ae:92:7c:e7:48:1c:3d:05:
c2:cd:80:7f:00:4f:f8:67:31:1c:c1:d2:df:3e:38:
bb:01:89:ae:06:a3:9a:40:5f:b7:3a:2b:e6:63:69:
64:50:44:03:d5:7d:0e:5e:a6:8d:70:04:3d:6f:72:
b0:db:2a:6f:67:29:e8:c7:f6:0d:0b:66:79:fc:0f:
8e:ba:33:64:01:5e:92:20:fb:27:26:df:0b:fc:c7:
88:28:73:53:2e:55:c7:f7:05:74:4c:f3:9a:0b:3e:
a4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:35:97:46:69:E3:00:53:C9:AA:E2:C9:DB:10:31:F1:3C:43:40:F6
X509v3 Authority Key Identifier:
keyid:08:66:AF:42:5A:B3:D3:9D:73:37:C2:B1:25:D3:95:93:AD:91:C1:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGavQlqz051zN8KxJdOVk62RwdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/dDWXRmnjAFPJquLJ2xAx8TxDQPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/CGavQlqz051zN8KxJdOVk62RwdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.54.0/24
185.219.12.0/22
IPv6:
2a0c:bc00::/29
Signature Algorithm: sha256WithRSAEncryption
31:ba:4d:a1:82:d5:36:47:f1:24:a4:e2:e6:e4:37:f7:48:da:
ff:f5:86:48:3e:b4:6a:b2:f8:bd:0f:bd:20:ed:12:d4:ff:46:
a8:7c:73:60:6d:65:e9:4e:50:4c:83:64:fd:4c:53:ae:16:fa:
75:15:1d:f4:e6:bd:42:e3:78:0e:00:2b:3a:e6:ac:a9:4d:1f:
32:0e:1f:89:be:d1:64:df:67:70:25:65:35:79:75:5e:4e:7d:
14:7e:f6:4b:9e:0d:3f:82:6a:84:ee:5a:49:9e:6e:8d:54:ab:
de:60:63:35:4d:37:23:20:3e:09:73:ef:21:e6:2e:0e:a2:b9:
dd:4b:ef:15:c4:9e:08:33:dc:fe:fb:76:c0:09:fa:7f:f0:67:
2d:fb:dc:48:65:a8:b6:e0:0e:05:b2:a8:f1:a2:fe:1b:1a:a6:
2c:d9:dc:5d:2f:07:51:19:dc:90:83:b5:f9:83:fe:63:51:26:
38:9e:b8:ff:af:02:f4:31:b7:86:34:b8:62:6a:8d:88:01:00:
e8:97:14:a8:5c:06:54:25:84:9f:5a:87:9f:ac:8c:fd:80:9b:
07:c2:cb:e2:a8:d8:66:9a:3f:b4:02:da:88:4a:38:dc:49:1c:
66:03:7f:72:7e:e2:73:52:5a:65:dc:9d:69:46:39:70:df:b7:
79:64:00:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 8 11:30:08 2023 by rpki-client on console-fra.rpki-client.org