Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/ckVtauUWTS2oRpnbtG6ZrR0CIvM.roa
File: ckVtauUWTS2oRpnbtG6ZrR0CIvM.roa (raw, json)
Hash identifier: 02hXn/eFsIwYtZBV8QVmod15RpMj+aGDG02HlCh2MgM=
Subject key identifier: 72:45:6D:6A:E5:16:4D:2D:A8:46:99:DB:B4:6E:99:AD:1D:02:22:F3
Certificate issuer: /CN=e92c415d1775ae9993e900a7536b46ab144a9aa2
Certificate serial: 018C906E540BFA6216F4910B719735207BBB
Authority key identifier: E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/ckVtauUWTS2oRpnbtG6ZrR0CIvM.roa
Signing time: Fri 22 Dec 2023 07:29:58 +0000
ROA not before: Fri 22 Dec 2023 07:29:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43833
IP address blocks: 185.250.196.0/23 maxlen: 23
89.29.203.0/24 maxlen: 24
193.177.212.0/22 maxlen: 22
80.254.224.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:90:6e:54:0b:fa:62:16:f4:91:0b:71:97:35:20:7b:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e92c415d1775ae9993e900a7536b46ab144a9aa2
Validity
Not Before: Dec 22 07:29:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=72456d6ae5164d2da84699dbb46e99ad1d0222f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ab:4e:8e:9e:68:c4:25:75:38:6b:b5:ac:4f:
4d:6d:16:07:23:f4:64:27:76:d1:dc:40:cc:e5:85:
91:a2:a6:a9:4c:5d:d7:e3:aa:5a:72:13:21:aa:49:
f3:e8:2c:b3:af:9b:83:67:f1:74:64:43:7c:4b:9d:
27:f4:f7:24:99:46:a9:a3:23:1a:69:60:31:fd:4b:
7e:82:56:e7:f0:ab:dd:fc:d9:4b:3a:e6:72:16:d6:
ff:3e:7d:09:b9:cc:d6:2a:7e:92:a3:6e:70:b2:e8:
56:b8:21:a7:25:98:b9:fc:47:62:9f:7c:1c:67:51:
a3:0a:c4:b4:2e:10:6c:14:78:de:9d:0b:67:9d:01:
b5:26:ac:5e:42:cb:ab:40:06:a6:fe:be:5d:27:93:
e4:f5:5a:c6:2a:60:f3:9f:e3:6b:fd:f9:a9:60:6c:
b5:0a:3c:8d:b6:74:22:18:60:f3:a8:b2:36:07:f0:
5e:ba:1b:fa:01:c2:f1:24:5c:98:61:8e:97:41:89:
ca:81:ae:7d:04:91:3d:36:56:b0:5e:7c:ec:4e:18:
43:d5:15:43:4d:67:b2:e8:18:37:09:56:0c:2e:bd:
0e:5f:20:d9:85:26:5f:96:92:0e:0f:2d:12:f3:c5:
2f:51:1e:91:b7:03:b7:bf:19:3f:38:d4:6a:ac:65:
20:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:45:6D:6A:E5:16:4D:2D:A8:46:99:DB:B4:6E:99:AD:1D:02:22:F3
X509v3 Authority Key Identifier:
keyid:E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/ckVtauUWTS2oRpnbtG6ZrR0CIvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.254.224.0/22
89.29.203.0/24
185.250.196.0/23
193.177.212.0/22
Signature Algorithm: sha256WithRSAEncryption
83:c8:53:01:af:f4:9c:b5:a8:1e:8e:c7:ab:6a:77:96:d8:8a:
ed:ec:fb:da:b2:74:fd:16:d6:83:a9:f3:df:4c:7b:21:69:e7:
61:a8:10:12:80:52:20:ef:3d:70:f2:de:a6:4f:3d:5d:bd:df:
73:de:71:c7:24:db:50:c8:f6:a0:99:15:00:f2:e4:fb:bb:3e:
6f:e7:e7:86:be:db:ac:26:ae:82:6a:d4:06:1a:64:cb:ab:32:
6c:ea:9d:ae:c0:ae:3f:a0:0c:68:1d:5d:6d:2e:0f:ea:fa:68:
34:f7:62:3e:32:eb:13:34:d0:37:b1:45:8d:f7:b5:94:15:66:
a2:d1:e2:c7:4f:53:eb:b5:00:47:d3:20:69:e6:49:3c:6f:3f:
a1:0d:78:6d:42:59:9f:57:8d:1b:a1:01:de:6a:63:1d:3a:8e:
e6:17:d0:41:ef:0e:c8:19:23:04:cd:cc:93:b9:cd:4f:28:6c:
6b:c1:d1:bf:ea:c0:eb:c2:49:90:c3:65:3c:b1:09:1c:f6:72:
0b:45:1b:02:e1:92:96:f9:a6:06:ea:6e:c1:8c:4b:cc:8e:05:
7c:f9:c6:52:3a:42:bc:a5:d8:98:cb:76:41:e2:6c:e3:a7:03:
68:3c:82:00:ce:b4:76:c8:b1:97:7a:93:fa:fd:a8:a8:df:97:
44:d9:b4:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:14:05 2024 by rpki-client on console-ams.rpki-client.org