Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/jMwD8F84KahI_VnFOehKZ7xS1Rk.roa
File: jMwD8F84KahI_VnFOehKZ7xS1Rk.roa (raw, json)
Hash identifier: O3gFL7r/b4XxqF8ScXyfIUA5+n2LlVi5qgYXq8APjqg=
Subject key identifier: 8C:CC:03:F0:5F:38:29:A8:48:FD:59:C5:39:E8:4A:67:BC:52:D5:19
Certificate issuer: /CN=f6f18c02405742c25377d696cd2a69dcc974bff8
Certificate serial: 01856FA6FA9EA334CEF5195DE3DC33246C17
Authority key identifier: F6:F1:8C:02:40:57:42:C2:53:77:D6:96:CD:2A:69:DC:C9:74:BF:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/jMwD8F84KahI_VnFOehKZ7xS1Rk.roa
Signing time: Sun 01 Jan 2023 23:24:52 +0000
ROA not before: Sun 01 Jan 2023 23:24:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48919
IP address blocks: 95.215.92.0/22 maxlen: 22
31.128.160.0/19 maxlen: 19
2001:67c:19ac::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:a6:fa:9e:a3:34:ce:f5:19:5d:e3:dc:33:24:6c:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6f18c02405742c25377d696cd2a69dcc974bff8
Validity
Not Before: Jan 1 23:24:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ccc03f05f3829a848fd59c539e84a67bc52d519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5d:28:ec:0d:64:3c:46:09:9a:61:ba:9c:d5:
c4:4b:35:6e:d0:24:56:df:89:4b:64:d6:30:81:7f:
88:f1:ec:cc:dc:c5:48:c6:f1:39:25:d1:50:35:ef:
b1:ee:79:0f:55:2f:0d:27:fa:c3:39:dc:ba:3d:82:
cc:9e:de:39:ba:a0:ef:4c:fa:27:51:61:4f:e7:02:
74:62:0b:58:3c:11:3e:b7:0d:9d:f9:3e:a7:1c:27:
7e:73:9f:ad:1a:5d:d0:5a:00:58:12:e8:df:bf:3f:
e2:d5:7c:25:5f:a5:8d:38:39:09:be:3f:93:e7:5f:
98:ce:0c:03:73:49:76:99:0e:3e:31:24:0c:87:f6:
90:78:6f:77:dc:51:0f:74:78:a5:b1:e5:f8:22:92:
40:84:19:f3:75:fc:fe:33:f4:e5:6e:d3:bd:90:5d:
d9:ce:96:01:93:f4:85:7e:96:e0:ba:df:0e:96:1e:
98:11:0c:3e:8e:15:fc:37:77:60:a8:35:16:f5:f8:
b1:9e:dc:a8:c0:04:25:27:4f:a7:4a:cd:39:9c:bb:
d7:84:08:89:d5:42:99:0d:22:c1:39:36:33:d6:1c:
e4:9f:8e:d5:21:77:21:25:70:22:78:90:6d:50:8f:
f1:cc:e0:c4:4a:7c:18:03:5c:ff:8e:0b:6e:1b:c2:
9a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:CC:03:F0:5F:38:29:A8:48:FD:59:C5:39:E8:4A:67:BC:52:D5:19
X509v3 Authority Key Identifier:
keyid:F6:F1:8C:02:40:57:42:C2:53:77:D6:96:CD:2A:69:DC:C9:74:BF:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/jMwD8F84KahI_VnFOehKZ7xS1Rk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.128.160.0/19
95.215.92.0/22
IPv6:
2001:67c:19ac::/48
Signature Algorithm: sha256WithRSAEncryption
a4:6b:2d:d0:b5:25:2d:46:89:a6:73:ae:a2:43:ac:3f:ba:1a:
8e:ce:32:90:96:9b:06:89:47:ed:c1:d1:66:6e:c1:be:e3:d7:
94:5a:06:56:87:6c:e2:09:25:74:7a:e6:3a:b6:e5:61:ba:91:
7e:18:6e:d5:e8:a8:03:cf:c0:8c:ac:a2:f9:93:c3:73:89:82:
ad:43:e3:5c:46:8d:98:8c:8d:c2:22:6c:6b:8e:b6:6b:04:c7:
26:15:9e:28:b8:18:c8:c3:64:17:93:63:17:c5:6b:88:74:83:
96:57:3f:5f:b7:aa:68:65:69:da:a2:7c:f1:da:72:83:eb:fa:
23:37:16:e4:7f:28:54:a2:4c:3a:69:43:c0:ad:97:17:67:3b:
58:92:9e:3f:a4:cc:92:7f:50:cc:c1:0e:c9:c8:72:da:45:05:
ff:21:f6:73:64:57:85:f8:ce:f0:48:d8:f5:9b:68:53:3b:57:
4c:55:a2:ed:58:91:88:2e:3d:77:f7:b4:c3:b6:7f:ef:23:fa:
b4:b2:c3:47:8e:1c:3c:7e:4b:ed:f4:06:8c:ee:94:2c:a7:a3:
59:31:f4:80:f3:2e:19:84:0f:4d:6d:10:d3:ac:dd:ba:56:cd:
9b:f7:d7:c7:33:cd:65:db:5e:0f:26:40:49:c3:e0:6f:33:f6:
a0:3e:6a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:28 2023 by rpki-client on console-fra.rpki-client.org