Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/7dth3eRZ9FW0Zyshw5xcRrvJBso.roa
File: 7dth3eRZ9FW0Zyshw5xcRrvJBso.roa (raw, json)
Hash identifier: HYhWQO5lCRlDXa6fb0f1Ap7799R1sIK1N4SMynMXZoQ=
Subject key identifier: ED:DB:61:DD:E4:59:F4:55:B4:67:2B:21:C3:9C:5C:46:BB:C9:06:CA
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 01874BAD33536BC3A1CE1AAAB009246BA45E
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/7dth3eRZ9FW0Zyshw5xcRrvJBso.roa
Signing time: Tue 04 Apr 2023 09:50:54 +0000
ROA not before: Tue 04 Apr 2023 09:50:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197704
IP address blocks: 195.136.194.0/23 maxlen: 23
194.183.54.0/23 maxlen: 24
195.136.18.0/23 maxlen: 23
82.177.112.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4b:ad:33:53:6b:c3:a1:ce:1a:aa:b0:09:24:6b:a4:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Apr 4 09:50:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eddb61dde459f455b4672b21c39c5c46bbc906ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:15:7e:4a:c3:90:c6:20:d7:8a:f8:c2:c8:fb:
b9:a4:9b:c9:fb:08:8c:0b:4f:a0:e3:9d:4a:49:91:
d4:1e:a2:81:62:d6:37:b0:0c:5f:6e:da:89:3a:80:
51:f9:73:9d:6e:49:ab:bb:f7:59:7e:73:44:10:23:
87:8a:01:ea:de:13:04:cb:96:d0:40:0a:fb:62:4d:
78:5a:a9:e8:e9:c9:4f:d1:8e:75:53:6f:d1:cc:06:
03:10:cd:16:23:b5:75:3e:5b:5f:13:bd:cc:58:2f:
fd:1f:a2:71:32:e5:35:eb:24:b3:a8:e2:ca:ba:bd:
da:ae:20:09:c3:9a:89:82:9b:09:cb:02:9c:13:6f:
e3:a1:1d:f7:97:14:a1:43:ff:ed:a9:af:d7:26:f0:
bc:62:7f:db:f3:8c:67:2b:9e:71:9f:ae:16:98:25:
f3:61:70:e5:db:76:da:38:2d:3e:4b:46:48:81:ad:
c2:fd:7c:4c:e1:6b:19:e8:de:f3:b2:14:ad:e6:a7:
73:a6:28:60:96:c3:fa:3b:da:31:0d:94:c4:00:3c:
8a:c7:a3:eb:32:9f:2e:70:0d:33:79:cc:00:ec:84:
27:d1:62:53:61:17:10:67:d1:9c:73:21:c1:db:0c:
a7:ca:d1:04:9c:c6:26:18:f6:82:96:84:b8:39:69:
d3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:DB:61:DD:E4:59:F4:55:B4:67:2B:21:C3:9C:5C:46:BB:C9:06:CA
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/7dth3eRZ9FW0Zyshw5xcRrvJBso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.177.112.0/23
194.183.54.0/23
195.136.18.0/23
195.136.194.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:99:ea:a7:e0:2a:cf:f1:1c:72:7b:5a:32:43:ca:6e:70:27:
99:8d:ac:1d:c2:22:cd:f1:0c:c2:d8:72:a0:82:15:bf:da:22:
d9:b8:39:5d:a4:1b:b2:b8:4e:6b:c2:c7:d7:05:f4:39:a5:3f:
a9:20:1d:aa:bd:39:0b:86:20:ab:a2:5f:9c:de:a3:83:92:c7:
1b:01:dd:be:61:35:33:c9:92:c1:57:19:a2:32:1a:ee:5f:65:
8e:07:d9:38:b9:69:5a:00:f9:89:ad:f2:ee:f6:b4:94:6f:cb:
b8:09:19:49:78:fd:dd:a0:0c:1b:2c:1d:ef:3e:b1:a9:88:43:
57:69:f9:cb:fd:17:a5:33:89:06:8b:7c:6a:d7:c9:da:2e:08:
e0:68:2a:f9:ba:9a:7a:29:7e:0e:78:6f:ad:7f:5d:4f:4b:8d:
db:fa:43:8c:a0:9f:ad:c8:5f:d7:de:02:88:38:dc:c1:62:52:
65:6d:b2:0b:38:14:0d:d6:5a:d8:b1:7f:a6:1b:e5:13:ad:93:
40:dc:4f:79:7a:61:66:36:0e:ed:e5:9d:68:14:b7:c4:2a:ba:
db:e0:34:9d:e1:f1:c5:ce:e7:09:13:c1:aa:ca:48:17:74:b1:
13:a2:e1:bd:6e:06:ad:31:38:59:b3:1c:04:11:c6:67:93:86:
ab:11:c6:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:20 2024 by rpki-client on console-ams.rpki-client.org