Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/pTZBuswq3ieuh4B9owdDzbXRVDg.roa
File: pTZBuswq3ieuh4B9owdDzbXRVDg.roa (raw, json)
Hash identifier: wtp+UV5dYhOsqOBvuC3W86JDLet83vUrL2/niAEYDUQ=
Subject key identifier: A5:36:41:BA:CC:2A:DE:27:AE:87:80:7D:A3:07:43:CD:B5:D1:54:38
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0189D58B4065CD71E7332CC199EC189ACC84
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/pTZBuswq3ieuh4B9owdDzbXRVDg.roa
Signing time: Tue 08 Aug 2023 14:27:00 +0000
ROA not before: Tue 08 Aug 2023 14:27:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59734
IP address blocks: 95.47.240.0/23 maxlen: 24
92.38.86.0/23 maxlen: 24
95.46.120.0/23 maxlen: 24
93.171.32.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d5:8b:40:65:cd:71:e7:33:2c:c1:99:ec:18:9a:cc:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Aug 8 14:27:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a53641bacc2ade27ae87807da30743cdb5d15438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:67:cf:8b:e4:3a:16:28:c2:f7:71:cc:35:76:
1c:9a:d4:4f:6d:3b:7f:2c:96:8b:30:a1:61:a1:8f:
10:e4:d2:cb:01:5e:40:e3:b4:a1:db:e6:ac:de:2f:
56:9b:2b:5c:ce:a0:ac:5f:a4:a2:48:1f:93:b3:7d:
ed:f9:38:35:44:23:12:76:de:f8:8b:b5:9c:8c:6f:
13:ab:0a:97:07:9e:a3:19:41:1f:ff:f4:5d:7b:76:
fc:cd:ae:cf:83:87:10:c3:55:1a:a2:13:78:25:ef:
76:4e:e6:f0:fa:bc:9a:1f:0c:f1:3f:fd:6f:ef:09:
f7:9c:64:f3:c8:98:a7:dd:75:2c:b8:0d:15:c9:26:
f8:5e:3c:e8:71:28:fd:91:53:cf:c5:33:b6:df:80:
81:97:41:c2:92:9c:8d:66:83:44:66:1c:0d:c4:ac:
c9:1e:57:12:e6:50:0d:d5:62:9e:a1:6d:74:0d:85:
6b:8a:67:90:64:d0:49:e2:0e:98:11:47:af:91:be:
bc:91:07:71:0c:d5:b5:a1:19:80:d3:2b:8d:b1:62:
ab:4d:75:69:39:11:44:51:40:43:c0:83:28:e0:c8:
91:87:82:b8:bc:bc:02:66:cc:d3:0c:f6:2f:8e:07:
1f:4a:e6:36:a4:7c:bc:a0:0f:85:28:1c:83:be:2e:
5a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:36:41:BA:CC:2A:DE:27:AE:87:80:7D:A3:07:43:CD:B5:D1:54:38
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/pTZBuswq3ieuh4B9owdDzbXRVDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.38.86.0/23
93.171.32.0/23
95.46.120.0/23
95.47.240.0/23
Signature Algorithm: sha256WithRSAEncryption
08:f7:11:56:00:ae:5e:ac:8e:6a:db:50:dc:10:45:44:1c:e3:
f7:db:51:69:91:fe:7c:70:a1:bb:2c:26:91:3d:67:90:8c:78:
de:49:cf:c3:8e:8b:df:eb:ba:c8:82:ac:f4:5a:92:71:fb:bf:
b3:d3:6e:d2:bf:e1:4d:d8:03:c4:9e:fc:e5:cf:ee:eb:38:52:
96:10:10:7f:a3:97:6a:38:bf:7a:79:24:c5:a1:a1:b0:f5:ce:
24:86:d3:06:19:72:d0:a0:82:df:1b:d6:09:bb:e7:65:b8:cc:
c7:05:d3:45:1f:33:d1:64:f6:c5:f2:1d:3f:b8:b0:41:e0:07:
f1:d0:ce:85:21:6f:bd:de:b3:36:ec:8e:44:71:e9:ec:e8:69:
d8:8e:73:81:86:eb:79:e7:66:53:a6:9a:ef:99:dd:a1:67:7f:
90:d3:4e:18:18:f3:0a:0c:78:90:78:86:b1:62:e1:c1:f2:ba:
e5:6d:99:f9:3a:f3:92:18:42:2a:7d:e1:d7:54:57:cc:60:83:
bc:a6:58:c6:0a:c1:0f:3a:b0:bd:3e:9a:31:a6:0a:a9:5b:20:
34:14:86:94:32:29:98:f1:1e:cb:1d:0d:82:61:07:29:f3:fa:
44:c2:9d:98:c9:f7:62:62:49:f8:26:fe:a2:89:03:69:1f:f4:
80:38:de:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 4 13:17:13 2023 by rpki-client on console-ams.rpki-client.org