Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/2IccxALZHpvmXZnOk3YACzIQA_Y.roa
File: 2IccxALZHpvmXZnOk3YACzIQA_Y.roa (raw, json)
Hash identifier: 3hoJ/qc8ZDqzWOv6Pdg0p6iZQKL9iSis/TAWk7ibbLY=
Subject key identifier: D8:87:1C:C4:02:D9:1E:9B:E6:5D:99:CE:93:76:00:0B:32:10:03:F6
Certificate issuer: /CN=048eefb5b26483561711c990f20ff552ac4e2c9c
Certificate serial: 01857094DE131A43DEC14425317735D8A3F6
Authority key identifier: 04:8E:EF:B5:B2:64:83:56:17:11:C9:90:F2:0F:F5:52:AC:4E:2C:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/2IccxALZHpvmXZnOk3YACzIQA_Y.roa
Signing time: Mon 02 Jan 2023 03:44:42 +0000
ROA not before: Mon 02 Jan 2023 03:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42082
IP address blocks: 91.151.128.0/20 maxlen: 24
185.146.176.0/22 maxlen: 24
2a03:3580::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:94:de:13:1a:43:de:c1:44:25:31:77:35:d8:a3:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048eefb5b26483561711c990f20ff552ac4e2c9c
Validity
Not Before: Jan 2 03:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d8871cc402d91e9be65d99ce9376000b321003f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:76:74:a1:57:2a:2f:2c:3a:29:93:87:fc:01:
f5:ac:91:2a:2f:6f:b1:88:d0:62:25:bd:89:f8:c5:
ad:20:9d:43:d9:23:1a:62:8e:d3:22:0f:61:06:da:
10:33:3f:57:84:11:38:22:52:ed:fc:03:f3:ab:5b:
11:91:92:56:e2:d8:28:9a:e8:b3:aa:57:37:91:17:
94:df:f8:73:d0:ca:33:c4:6a:b3:a7:d1:67:89:ef:
53:22:a2:0f:8e:eb:61:e6:5a:0e:e7:b3:2b:f5:ef:
ff:2a:21:05:ac:75:fa:dc:64:46:6e:0b:cc:04:c8:
45:7b:43:2f:9b:dd:2b:ba:e7:95:17:09:36:3d:fe:
99:5c:11:4b:0e:bc:e5:05:b7:4e:f9:6e:5b:14:68:
9c:0e:29:42:35:d7:40:67:35:90:df:f8:4d:9d:a8:
d0:d2:c7:3d:7d:62:2b:82:74:1b:65:11:2c:4d:bc:
5f:cf:ce:00:57:ad:7c:4d:fc:50:48:68:1c:08:81:
7e:e5:43:56:69:d3:bb:6d:60:19:f2:2f:a6:24:f3:
f6:60:5e:a3:a4:4d:86:4b:a5:bd:b6:12:1f:f9:c9:
26:44:9b:0d:07:7a:c4:ab:b4:64:5a:55:bd:23:9f:
7a:38:b5:87:5b:59:d3:5b:a5:f8:5d:2d:6d:de:d1:
62:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:87:1C:C4:02:D9:1E:9B:E6:5D:99:CE:93:76:00:0B:32:10:03:F6
X509v3 Authority Key Identifier:
keyid:04:8E:EF:B5:B2:64:83:56:17:11:C9:90:F2:0F:F5:52:AC:4E:2C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/2IccxALZHpvmXZnOk3YACzIQA_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.151.128.0/20
185.146.176.0/22
IPv6:
2a03:3580::/32
Signature Algorithm: sha256WithRSAEncryption
29:35:e4:d3:41:0b:32:d5:ae:3d:ee:3b:1c:55:c4:91:f3:2c:
c9:91:b8:6b:11:59:17:0e:12:73:13:2d:94:a3:aa:4d:ac:00:
fc:c6:71:e9:1d:e0:5e:7f:4a:b9:c9:35:ad:4f:05:2d:dc:d2:
41:c3:f9:29:ed:98:03:7b:67:90:2d:29:68:5c:cf:f1:2a:51:
8e:ea:38:da:b7:20:94:79:8b:eb:84:c9:e5:d3:88:5a:63:2e:
de:3c:bc:f9:37:57:57:17:85:fc:a8:ed:71:ec:37:5f:17:08:
26:b9:45:69:23:fe:01:10:40:6c:49:85:1c:6e:31:2c:e4:39:
77:bf:a6:96:dc:2e:25:c0:80:16:cf:4b:e3:c8:52:eb:8c:1a:
b2:ba:4c:7f:14:aa:83:2c:f0:99:57:ea:51:48:d7:e2:db:63:
b3:99:4d:4b:f9:9f:06:6d:bf:6e:96:c4:df:ea:96:83:94:8e:
32:45:e0:9e:7d:b3:0d:3f:7f:59:ca:94:ff:09:65:82:b8:99:
b6:55:ba:ae:fc:2d:78:f9:6d:6e:b5:70:e1:76:14:ca:32:e3:
63:69:45:dd:6f:0c:32:9d:8c:a2:5b:33:3f:fb:36:0b:a3:d9:
75:f1:5a:d7:40:7b:dc:af:48:f0:34:5f:f9:2c:fa:c3:9a:c4:
c1:02:c3:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:31:14 2024 by rpki-client on console-fra.rpki-client.org