Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/A8jgFpv_jpH0FiV1HCvKl-tC7r4.roa
File: A8jgFpv_jpH0FiV1HCvKl-tC7r4.roa (raw, json)
Hash identifier: ceMCEf6SQTjwJo5xZMnNvvBL5U4EAtusRb9PdFnca3U=
Subject key identifier: 03:C8:E0:16:9B:FF:8E:91:F4:16:25:75:1C:2B:CA:97:EB:42:EE:BE
Certificate issuer: /CN=fb486a0ba9b9b09f4de47962e2c2ae41fc557686
Certificate serial: 0188B03B6A34D45D04FC3915E569007D36CE
Authority key identifier: FB:48:6A:0B:A9:B9:B0:9F:4D:E4:79:62:E2:C2:AE:41:FC:55:76:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/A8jgFpv_jpH0FiV1HCvKl-tC7r4.roa
Signing time: Mon 12 Jun 2023 15:31:03 +0000
ROA not before: Mon 12 Jun 2023 15:31:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42487
IP address blocks: 46.235.176.0/21 maxlen: 24
185.55.244.0/22 maxlen: 22
85.95.192.0/19 maxlen: 24
2a03:d602::/31 maxlen: 31
2a03:d606::/31 maxlen: 31
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b0:3b:6a:34:d4:5d:04:fc:39:15:e5:69:00:7d:36:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb486a0ba9b9b09f4de47962e2c2ae41fc557686
Validity
Not Before: Jun 12 15:31:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=03c8e0169bff8e91f41625751c2bca97eb42eebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b3:b0:fb:b2:91:25:27:26:67:b1:f3:1f:67:
df:eb:e3:82:34:a4:cf:71:db:4b:16:74:5e:63:be:
3d:b7:47:1f:57:d3:34:03:f1:1f:2f:7d:13:d0:eb:
95:8c:34:06:e6:43:54:39:77:0e:2e:53:88:28:e1:
df:bc:88:f1:04:3f:39:d2:b0:88:d3:a7:2c:4b:3b:
e5:f0:81:f9:96:e9:44:09:68:b4:57:6b:4f:2f:9f:
1a:b5:7e:b8:21:3f:67:55:8f:99:e6:5e:a6:6b:74:
86:bc:37:ad:61:5b:d1:6a:bf:75:23:1e:8a:af:27:
70:cc:a6:b6:6d:7d:10:fc:9c:eb:2b:05:0e:bd:58:
a4:bc:68:5f:55:e8:d8:37:7c:ed:a0:a2:21:fd:d1:
c4:fe:85:d7:92:35:d5:5a:ac:57:6c:38:14:2b:b4:
f1:6b:d6:4c:48:cf:6a:bb:a0:ff:25:ab:b3:4f:ce:
b1:05:f9:88:51:35:25:d6:4f:91:55:37:0d:ad:5a:
ee:e6:c6:2f:ac:74:86:4a:a2:43:6e:01:70:ed:93:
37:97:b7:b0:6a:26:01:63:d8:e5:61:33:6a:67:b6:
71:b3:48:80:ba:c1:d4:c3:35:21:cc:8d:11:40:98:
ae:5a:ce:f6:fd:22:11:5c:02:ab:f5:93:ba:0c:f2:
a4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C8:E0:16:9B:FF:8E:91:F4:16:25:75:1C:2B:CA:97:EB:42:EE:BE
X509v3 Authority Key Identifier:
keyid:FB:48:6A:0B:A9:B9:B0:9F:4D:E4:79:62:E2:C2:AE:41:FC:55:76:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/A8jgFpv_jpH0FiV1HCvKl-tC7r4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.176.0/21
85.95.192.0/19
185.55.244.0/22
IPv6:
2a03:d602::/31
2a03:d606::/31
Signature Algorithm: sha256WithRSAEncryption
7e:dd:fc:c0:fb:36:b3:05:3a:7d:9f:e7:45:f4:af:f3:06:13:
ec:ab:8f:c7:79:24:4d:2c:9c:d9:30:cc:94:1f:72:9d:eb:ad:
b3:a6:61:d8:df:68:93:6d:2e:f5:5b:4d:0b:ab:b3:c9:ca:ba:
08:e4:d6:4d:4b:40:a2:31:48:b0:cd:81:57:34:11:70:e2:d7:
fb:64:08:ab:ab:69:92:68:bd:78:b6:9a:48:f9:9a:d7:d4:2c:
73:fa:d5:6d:3b:fa:57:8d:2f:24:18:c3:99:3b:86:5f:4c:06:
db:3a:51:d6:90:b8:2d:24:8b:18:03:2c:27:2c:6a:7f:13:a8:
d1:2d:a3:95:bf:4a:cf:7c:b0:37:35:27:b1:b6:d2:41:01:54:
6d:00:33:02:e0:ad:ed:2e:0c:d3:ea:cd:08:c1:75:ee:6a:b6:
2d:04:54:49:aa:29:04:93:9e:a3:bf:16:4e:1a:08:a8:61:5b:
a1:d2:07:90:d3:08:89:7c:60:ea:37:cb:bf:2a:b4:76:ab:7a:
57:8b:c0:db:76:e8:c3:fb:34:3b:6c:5f:e8:78:12:14:b3:37:
b6:28:fd:1a:5a:00:4b:d8:a1:74:2c:03:31:47:fa:1d:03:69:
f4:2b:bc:b3:a3:00:94:19:7a:c7:a1:7b:6a:6f:a7:bf:9a:53:
6a:81:a0:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:53:54 2024 by rpki-client on console-ams.rpki-client.org