Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/irdoZw20_G-qFIwgAI9z8lD2WCQ.roa
File: irdoZw20_G-qFIwgAI9z8lD2WCQ.roa (raw, json)
Hash identifier: 9bJlaMqGCVAwTBdaxlypOQtsyqLTPGn00o9nXCFlojI=
Subject key identifier: 8A:B7:68:67:0D:B4:FC:6F:AA:14:8C:20:00:8F:73:F2:50:F6:58:24
Certificate issuer: /CN=fb486a0ba9b9b09f4de47962e2c2ae41fc557686
Certificate serial: 01856F4B84C9CD76F696AD4875AF5FFB4809
Authority key identifier: FB:48:6A:0B:A9:B9:B0:9F:4D:E4:79:62:E2:C2:AE:41:FC:55:76:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/irdoZw20_G-qFIwgAI9z8lD2WCQ.roa
Signing time: Sun 01 Jan 2023 21:44:58 +0000
ROA not before: Sun 01 Jan 2023 21:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12727
IP address blocks: 185.39.140.0/22 maxlen: 24
213.166.192.0/19 maxlen: 21
130.185.184.0/21 maxlen: 24
188.64.240.0/21 maxlen: 21
2a03:d604::/31 maxlen: 31
2a03:d600::/31 maxlen: 31
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:84:c9:cd:76:f6:96:ad:48:75:af:5f:fb:48:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb486a0ba9b9b09f4de47962e2c2ae41fc557686
Validity
Not Before: Jan 1 21:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ab768670db4fc6faa148c20008f73f250f65824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a1:dc:f5:4b:73:4d:6c:6d:e8:2d:7b:e3:8b:
1b:21:10:b7:c6:38:88:8f:4a:ca:a7:cb:20:cc:21:
28:f8:31:15:96:3f:3e:8d:eb:18:72:1d:d6:1f:6e:
86:e4:95:d5:f6:9c:4f:8a:2f:84:8b:7f:7a:2f:00:
15:40:db:22:7c:ae:a5:1f:82:43:00:09:2d:9d:5d:
ef:21:eb:1b:33:b9:90:3a:a2:5e:08:39:5e:8f:a0:
a1:ee:b9:d1:32:9e:4d:b9:44:0a:db:b6:0f:07:00:
da:6c:bd:2b:69:40:2e:c9:ad:af:db:3a:a8:fd:75:
a4:ec:1d:d9:6e:0e:f5:06:11:44:08:57:04:57:04:
74:14:9f:f3:f3:ea:9d:4d:ce:a8:ed:c2:ab:ab:25:
67:91:35:a6:81:2f:81:e5:d0:50:0a:4e:84:03:f8:
07:46:d4:ef:4c:47:58:52:55:31:b7:e8:d0:78:00:
54:cc:5c:84:4f:f7:9b:8c:1e:3e:51:c9:8e:89:1a:
e2:48:cb:c4:6f:2c:80:6a:e7:df:9b:d8:73:47:d1:
68:c7:18:8b:f7:7b:e1:87:56:f5:0c:6f:16:ad:7a:
e7:bf:fd:ab:b8:7b:2d:01:cb:ce:9c:90:af:8f:88:
d7:13:cb:f8:0e:5e:3a:e1:9e:77:c7:5f:24:aa:dc:
7e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B7:68:67:0D:B4:FC:6F:AA:14:8C:20:00:8F:73:F2:50:F6:58:24
X509v3 Authority Key Identifier:
keyid:FB:48:6A:0B:A9:B9:B0:9F:4D:E4:79:62:E2:C2:AE:41:FC:55:76:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/irdoZw20_G-qFIwgAI9z8lD2WCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.185.184.0/21
185.39.140.0/22
188.64.240.0/21
213.166.192.0/19
IPv6:
2a03:d600::/31
2a03:d604::/31
Signature Algorithm: sha256WithRSAEncryption
29:e9:ef:27:5e:ba:e3:ac:e2:69:4f:9b:d4:1c:ce:ac:44:48:
23:ec:db:44:4e:53:8e:35:20:e0:4b:24:bd:4b:bc:98:f4:38:
25:a0:20:e7:f1:f4:85:0c:26:9b:07:62:ae:a1:61:77:99:f0:
2b:ba:ad:70:f3:d9:41:f2:c9:85:79:88:09:80:6f:8c:cd:4d:
dd:a0:a2:d9:aa:ac:df:e0:78:82:3f:67:50:45:aa:9b:0d:d9:
21:76:e4:0e:50:1d:60:cd:b5:c9:0f:9d:0d:4f:30:a5:0d:92:
34:85:61:27:ea:1b:cb:5e:c7:ea:cf:84:92:02:9f:48:5f:e8:
ef:e7:1b:30:c1:9c:2f:09:20:9a:11:3a:1d:4d:0c:4b:98:2e:
06:b0:e2:2f:2d:b5:5e:d8:91:44:bc:5c:70:1e:e9:eb:9d:7a:
62:05:cb:bd:f8:69:65:80:06:d1:2d:e4:59:76:3d:61:c1:8f:
75:01:89:62:d8:2a:5b:5e:48:90:0d:db:72:b9:43:67:ea:34:
77:37:cb:48:5a:b2:33:fa:8e:2e:c0:dc:f1:25:b6:ea:ff:55:
bb:80:2e:78:b3:91:28:ca:79:cb:a6:80:d3:1c:71:43:04:94:
37:de:4e:ab:a3:0a:fa:cd:ff:34:7d:13:08:43:e7:27:88:49:
ea:db:c9:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:39 2023 by rpki-client on console-fra.rpki-client.org