Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/2XzV_atN8vEm2YKS6UK3Oa4ifyA.roa
File: 2XzV_atN8vEm2YKS6UK3Oa4ifyA.roa (raw, json)
Hash identifier: CkcB1OgBlpNyAn/sqnjH66vjzfVE8MXlBILctK5/D4Q=
Subject key identifier: D9:7C:D5:FD:AB:4D:F2:F1:26:D9:82:92:E9:42:B7:39:AE:22:7F:20
Certificate issuer: /CN=a74c6706e3fbebdff146a8a14ec2a3284a92ba62
Certificate serial: 01856C1CAD0F60E44C9E2B66F70F54EB5E3F
Authority key identifier: A7:4C:67:06:E3:FB:EB:DF:F1:46:A8:A1:4E:C2:A3:28:4A:92:BA:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/2XzV_atN8vEm2YKS6UK3Oa4ifyA.roa
Signing time: Sun 01 Jan 2023 06:54:56 +0000
ROA not before: Sun 01 Jan 2023 06:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12649
IP address blocks: 194.191.108.0/24 maxlen: 24
195.48.70.0/24 maxlen: 24
195.49.41.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:1c:ad:0f:60:e4:4c:9e:2b:66:f7:0f:54:eb:5e:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a74c6706e3fbebdff146a8a14ec2a3284a92ba62
Validity
Not Before: Jan 1 06:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d97cd5fdab4df2f126d98292e942b739ae227f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:76:d1:e8:26:0e:6d:d0:4e:58:f5:3f:a3:3d:
e1:e5:d8:c3:88:09:c3:cd:c4:7f:b4:30:65:6e:c9:
c2:92:d0:60:bc:d7:3e:3f:b4:a4:0e:ba:2a:f5:f0:
2e:4d:e9:56:ab:57:80:46:8a:71:f0:bf:1a:87:29:
d1:66:ee:fb:74:35:08:f1:7e:23:2d:f1:d6:99:68:
1d:06:93:17:e3:bf:be:fd:0e:6f:47:fe:80:44:ea:
f7:f4:7b:3e:42:39:1e:3b:56:4d:57:fd:0b:bc:7d:
7d:9c:2c:9a:29:33:8b:c1:ab:8e:fd:a4:13:db:cc:
87:f8:4d:f3:0d:20:bb:71:d5:f0:70:3b:0f:00:33:
46:fc:03:be:c2:90:54:a4:6e:98:c9:53:a3:08:78:
b0:8e:e7:7d:81:87:d8:58:51:91:85:4b:01:e3:03:
ee:4c:f0:25:01:28:51:4f:ed:d8:0d:7c:c1:b2:1a:
b2:3c:6b:0b:44:46:8d:15:d7:3c:82:5d:48:2b:93:
84:97:de:c9:b1:85:df:a1:cb:81:10:d7:8e:af:d0:
23:fd:a7:4b:2a:56:1a:e6:eb:b3:05:0a:79:7f:d5:
86:ce:de:e3:db:aa:12:ad:00:a9:ce:df:ee:a0:e5:
1e:a9:d4:8c:c1:52:3d:04:cb:19:d8:f5:e2:00:83:
c3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:7C:D5:FD:AB:4D:F2:F1:26:D9:82:92:E9:42:B7:39:AE:22:7F:20
X509v3 Authority Key Identifier:
keyid:A7:4C:67:06:E3:FB:EB:DF:F1:46:A8:A1:4E:C2:A3:28:4A:92:BA:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/2XzV_atN8vEm2YKS6UK3Oa4ifyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.191.108.0/24
195.48.70.0/24
195.49.41.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:3f:ec:b9:bf:4b:5c:61:2a:14:da:50:df:ac:e6:4b:a9:33:
1a:74:9d:a3:96:cd:53:3e:85:a6:17:bb:8e:82:0a:e8:30:8b:
db:ce:d5:6c:a4:f2:0e:07:69:b6:33:c9:99:9e:e7:95:34:7d:
33:a2:f2:de:9d:6c:8f:5b:ad:ec:ce:5d:41:f2:33:21:ea:7a:
76:13:ff:d5:63:a7:d8:d7:1f:5f:fb:a3:cd:bf:6d:02:0c:bd:
41:23:ce:00:94:96:94:ff:74:95:87:ae:d9:a6:7c:bd:18:c3:
cc:d2:11:35:a6:2b:25:d0:e8:2e:b7:19:53:45:fd:36:40:01:
1e:b9:76:54:d8:b9:6c:51:39:b7:c7:d7:f9:88:d0:e9:d9:1e:
fc:9a:01:e1:f6:50:5c:61:3d:b2:df:67:a4:e3:03:cc:bb:d6:
ee:ca:c4:8d:a9:98:03:f1:7c:b9:1f:79:25:f1:e4:65:b3:ab:
41:f5:f2:1c:0d:d1:4d:b2:bc:14:b4:48:ca:c8:28:0a:37:f2:
85:8c:3c:75:70:43:b0:6f:d1:c5:97:7a:c9:22:05:60:f4:09:
e9:39:0c:a3:9a:4c:6c:42:da:b8:39:49:1a:0f:b7:98:cf:75:
c0:57:66:25:fd:ff:ad:c0:dd:44:b5:5c:5b:35:fa:29:04:09:
96:73:4b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:14:04 2024 by rpki-client on console-ams.rpki-client.org