Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/oPBvI6npnqvFVo7gWC0z96RR9-Y.roa
File: oPBvI6npnqvFVo7gWC0z96RR9-Y.roa (raw, json)
Hash identifier: XfT33dYEMsUQSmxri2GjmTxLKaGjyiY7LooLq6/3Do0=
Subject key identifier: A0:F0:6F:23:A9:E9:9E:AB:C5:56:8E:E0:58:2D:33:F7:A4:51:F7:E6
Certificate issuer: /CN=e4b1306101cc9ec9fce985280c1db0f37c135a3a
Certificate serial: 018570396CD007F1DCD0913F9A48061F1751
Authority key identifier: E4:B1:30:61:01:CC:9E:C9:FC:E9:85:28:0C:1D:B0:F3:7C:13:5A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/oPBvI6npnqvFVo7gWC0z96RR9-Y.roa
Signing time: Mon 02 Jan 2023 02:04:49 +0000
ROA not before: Mon 02 Jan 2023 02:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15870
IP address blocks: 178.74.109.0/24 maxlen: 24
176.62.76.0/24 maxlen: 24
176.62.80.0/24 maxlen: 24
109.120.21.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:6c:d0:07:f1:dc:d0:91:3f:9a:48:06:1f:17:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4b1306101cc9ec9fce985280c1db0f37c135a3a
Validity
Not Before: Jan 2 02:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a0f06f23a9e99eabc5568ee0582d33f7a451f7e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:2f:09:36:9e:bb:c8:a6:07:e9:ea:2f:2f:c0:
e2:60:8e:42:c8:92:64:95:72:f7:44:98:88:c3:f1:
89:36:9d:45:37:ee:c3:a8:86:80:32:5b:92:80:22:
8e:cb:95:78:c4:5a:8c:7f:0c:fd:a2:1a:fa:5a:ed:
ea:b5:2a:e6:32:86:40:c3:6d:c0:4b:e7:e0:61:af:
08:5d:49:a3:ec:72:14:3d:c8:38:8e:81:33:33:78:
e2:ae:5a:7a:c1:02:65:14:2d:99:fe:8f:64:69:f4:
82:4c:ea:38:23:17:f6:7b:9c:6a:c8:79:69:f2:d3:
10:64:b9:7d:c1:95:7b:9b:a6:f6:af:45:09:be:6a:
8b:fd:ab:61:9f:05:53:e9:9f:01:cb:0c:cd:3c:30:
da:0b:ec:54:4e:e5:ec:bc:37:18:b2:97:4c:16:e5:
4f:ad:cb:25:8c:12:87:a6:ec:03:39:c4:6c:5f:cb:
83:7f:f7:fe:50:be:7c:02:98:98:28:96:d3:69:20:
97:51:5b:b6:fc:16:8e:5c:8c:25:3f:7c:50:1a:75:
54:fc:51:6a:b3:e5:05:36:57:a8:7b:07:01:53:97:
25:18:8f:7f:38:35:66:b1:95:7e:62:8a:54:f6:24:
cc:d3:f6:f4:1f:61:e6:50:21:99:ea:b8:e2:08:81:
32:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F0:6F:23:A9:E9:9E:AB:C5:56:8E:E0:58:2D:33:F7:A4:51:F7:E6
X509v3 Authority Key Identifier:
keyid:E4:B1:30:61:01:CC:9E:C9:FC:E9:85:28:0C:1D:B0:F3:7C:13:5A:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/oPBvI6npnqvFVo7gWC0z96RR9-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.120.21.0/24
176.62.76.0/24
176.62.80.0/24
178.74.109.0/24
Signature Algorithm: sha256WithRSAEncryption
47:bd:fa:72:1d:17:4a:de:67:30:aa:39:63:50:fb:d2:a3:3b:
c0:c0:0e:0d:f0:bb:a0:fe:19:f0:ca:d4:8a:17:bf:7f:00:d1:
6a:d0:9f:12:49:48:c8:aa:c3:5e:97:f3:cd:97:85:b1:77:f5:
5b:d4:cc:bc:36:42:b9:8b:47:c4:d8:68:4d:15:9b:f5:d8:87:
a6:d9:68:a5:c3:47:2d:f0:3a:3f:44:f4:46:d4:b8:9c:87:be:
58:b7:6a:4e:88:c9:4d:4c:17:cd:f5:a6:26:82:fd:78:01:f4:
02:f2:7b:a6:1f:c2:68:60:81:d9:32:ea:78:60:37:fe:a4:bb:
61:0e:60:99:07:6d:63:42:fe:f3:cd:ae:61:7f:57:f1:bc:ca:
ea:c2:3c:3d:c5:e5:7f:6c:3d:16:ee:4b:77:9b:70:24:0a:d4:
56:ba:71:99:58:16:3e:9f:41:3a:e1:57:dd:07:f9:15:df:a3:
d8:ce:03:f5:66:9b:1b:97:30:e4:16:c3:12:46:69:01:1e:4d:
0d:c1:e8:40:06:d9:91:19:eb:c9:5e:cb:6f:a6:93:67:b4:c3:
46:d4:94:dc:58:34:6f:72:48:71:6b:52:f0:a4:9b:4e:06:49:
40:ca:25:7e:c6:e2:8b:30:55:c6:76:b1:98:1c:2e:94:d3:72:
f4:46:0c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:40 2024 by rpki-client on console-fra.rpki-client.org