Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/oec61yn0ETM7_Z0cUcVNmfL3PHw.roa
File: oec61yn0ETM7_Z0cUcVNmfL3PHw.roa (raw, json)
Hash identifier: xCtTNXzLbGloLvfdXuTgLaHiDgjUKYH83M2+LPou26s=
Subject key identifier: A1:E7:3A:D7:29:F4:11:33:3B:FD:9D:1C:51:C5:4D:99:F2:F7:3C:7C
Certificate issuer: /CN=26a5aa918cbfeb3e12997f33890feb258907b343
Certificate serial: 018570152E92BEDD5929C690CA5B1A0694F7
Authority key identifier: 26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/oec61yn0ETM7_Z0cUcVNmfL3PHw.roa
Signing time: Mon 02 Jan 2023 01:25:14 +0000
ROA not before: Mon 02 Jan 2023 01:25:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48760
IP address blocks: 185.84.136.0/22 maxlen: 24
195.62.12.0/23 maxlen: 24
2a07:1cc0::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:15:2e:92:be:dd:59:29:c6:90:ca:5b:1a:06:94:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a5aa918cbfeb3e12997f33890feb258907b343
Validity
Not Before: Jan 2 01:25:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a1e73ad729f411333bfd9d1c51c54d99f2f73c7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ae:a5:af:23:0e:fb:31:2a:28:6b:99:3e:2d:
5b:06:59:d4:24:b3:ec:d4:9f:b9:74:f0:0f:84:4b:
6a:a3:7f:bf:d8:87:7d:dd:fd:5f:46:7e:27:4b:12:
c4:02:ff:76:7d:11:68:53:e9:bb:a3:0a:f5:00:56:
8c:61:fb:8d:02:9f:ab:39:60:0b:3f:04:b5:3a:4d:
b6:64:26:9f:4e:52:3d:0f:4d:9c:ab:52:1b:8a:52:
18:aa:c8:9f:7c:cc:3e:23:56:e3:11:c0:87:4f:5d:
05:ba:e5:a8:64:29:da:0d:c7:c0:ac:42:7b:32:08:
75:22:28:82:b0:38:ba:1b:f6:3a:52:a2:a5:d0:22:
c1:a5:9a:cc:41:e0:f3:9b:d2:84:e6:cc:41:5e:67:
85:c0:e5:6c:ae:68:f6:0e:4e:cf:af:09:bb:22:d5:
7f:e1:aa:59:58:73:d1:0d:32:9c:2a:11:2a:56:b4:
de:d9:df:76:7c:38:48:80:c1:cc:4a:ef:13:09:ca:
c4:30:c5:0d:03:e8:50:82:29:cf:a5:21:dc:9e:6b:
33:89:d7:20:ef:c9:4c:f8:b0:4b:a8:ef:07:5c:af:
13:e9:90:73:3f:f7:97:4f:80:29:75:66:02:26:17:
24:f8:d6:b3:a9:09:b8:8d:98:93:da:c9:ee:f7:26:
08:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:E7:3A:D7:29:F4:11:33:3B:FD:9D:1C:51:C5:4D:99:F2:F7:3C:7C
X509v3 Authority Key Identifier:
keyid:26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/oec61yn0ETM7_Z0cUcVNmfL3PHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.136.0/22
195.62.12.0/23
IPv6:
2a07:1cc0::/29
Signature Algorithm: sha256WithRSAEncryption
2c:6c:ed:20:99:16:41:17:05:41:93:b2:97:b9:8b:d3:70:b0:
53:32:34:d7:f7:e5:dd:2e:cd:69:8e:b8:c4:74:0f:24:ac:1a:
da:87:b2:dc:fb:db:73:58:ea:6c:e8:39:bf:d0:40:9c:5d:e6:
ef:19:d1:ef:e9:56:7f:18:11:ee:fc:37:77:76:b4:3b:bf:b3:
9b:dd:29:3c:ab:15:15:74:5e:51:02:77:ae:fb:04:f9:21:a8:
60:2b:4a:e5:c9:34:48:38:89:ff:8c:9c:24:c4:31:7a:48:f0:
4c:b2:d6:db:3c:97:e5:78:a5:a1:a6:55:d1:87:60:95:b4:23:
c7:4e:94:4e:34:37:6d:37:b0:97:f2:5e:bd:9a:fc:db:5f:ea:
91:21:1e:bf:be:8c:45:fd:68:db:8c:4c:7c:e5:45:03:ba:07:
6b:69:a5:3f:37:d7:8e:fe:2f:58:75:a0:62:3e:b0:30:ec:87:
6b:c8:45:25:32:83:e0:31:d8:2c:dd:65:68:78:b0:f0:cc:ea:
ea:82:d9:e6:07:67:9f:ce:96:84:92:25:c3:0e:0a:99:29:b8:
07:10:05:12:f5:73:f8:26:ce:82:a5:04:4e:c3:18:13:f1:99:
63:b5:ae:f2:c7:ff:a5:c5:2e:03:1c:04:c3:f5:1a:cb:4b:d5:
cb:a8:eb:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:14:56 2024 by rpki-client on console-fra.rpki-client.org