Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/y4HzgSaZtvXfIjxsEohwt_mpqt4.roa
File: y4HzgSaZtvXfIjxsEohwt_mpqt4.roa (raw, json)
Hash identifier: MVfRUgvsHkTuOT+vYqKOxvALUG37Cbr1yvwOVwPg6VI=
Subject key identifier: CB:81:F3:81:26:99:B6:F5:DF:22:3C:6C:12:88:70:B7:F9:A9:AA:DE
Certificate issuer: /CN=029e98336f6a6cc9dbcf1ecb4895580f094e3e2b
Certificate serial: 01857355FF6F2FFF0E789BDB3DB4B03F8A24
Authority key identifier: 02:9E:98:33:6F:6A:6C:C9:DB:CF:1E:CB:48:95:58:0F:09:4E:3E:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ap6YM29qbMnbzx7LSJVYDwlOPis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/y4HzgSaZtvXfIjxsEohwt_mpqt4.roa
Signing time: Mon 02 Jan 2023 16:34:53 +0000
ROA not before: Mon 02 Jan 2023 16:34:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8697
IP address blocks: 212.34.0.0/19 maxlen: 24
213.139.32.0/19 maxlen: 24
2a00:18d8:2::/48 maxlen: 48
2a00:18d8::/32 maxlen: 64
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:55:ff:6f:2f:ff:0e:78:9b:db:3d:b4:b0:3f:8a:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=029e98336f6a6cc9dbcf1ecb4895580f094e3e2b
Validity
Not Before: Jan 2 16:34:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cb81f3812699b6f5df223c6c128870b7f9a9aade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:94:b3:e5:a6:b4:60:5d:80:f2:bc:b0:ee:a9:
dc:8e:dc:be:21:32:9e:3d:f6:a5:81:f9:1a:49:8b:
22:a4:80:49:53:6f:57:d8:8b:50:31:6c:70:b3:de:
19:a4:a7:94:3a:f0:b9:7d:8a:7c:dd:41:c6:41:e3:
be:23:67:24:96:f4:bf:d4:66:92:de:e9:bc:f1:50:
2d:e5:75:43:c7:b8:b6:8c:49:0b:33:6b:38:75:0e:
ab:82:b7:2e:26:e7:83:3e:5b:3b:36:c0:59:3c:6b:
9b:74:9a:d9:cd:b5:1b:99:b2:c7:ec:22:31:6d:54:
c3:9a:1e:81:d0:83:e8:4b:06:f6:39:41:33:04:85:
f2:a1:62:14:fa:19:6a:d0:c0:ce:19:57:5c:f9:6f:
3f:de:34:a3:4b:41:48:0d:f4:d5:33:c5:11:3c:71:
21:80:6a:d1:03:09:28:e4:7c:1d:58:6c:64:d2:eb:
eb:3a:31:28:25:1c:cd:6a:c3:92:27:47:0a:86:c7:
b1:2f:a4:5b:06:56:69:f8:b7:68:2f:24:a6:ac:c8:
ca:4c:75:6d:26:6a:58:d3:4b:c4:e5:5c:27:f2:56:
19:ce:b7:c9:b4:1e:ac:ff:c3:9e:ee:7f:25:2d:c7:
1c:ff:5d:2d:89:d9:1f:8c:e8:85:c6:9c:aa:b7:c8:
c7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:81:F3:81:26:99:B6:F5:DF:22:3C:6C:12:88:70:B7:F9:A9:AA:DE
X509v3 Authority Key Identifier:
keyid:02:9E:98:33:6F:6A:6C:C9:DB:CF:1E:CB:48:95:58:0F:09:4E:3E:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ap6YM29qbMnbzx7LSJVYDwlOPis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/y4HzgSaZtvXfIjxsEohwt_mpqt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.34.0.0/19
213.139.32.0/19
IPv6:
2a00:18d8::/32
Signature Algorithm: sha256WithRSAEncryption
3a:fd:7b:c7:ee:a5:1b:1e:a3:5b:29:d1:2e:bc:26:13:f5:46:
09:3f:54:ed:ec:fb:4a:70:a4:ae:e3:2e:20:08:85:16:fd:42:
f8:d3:41:f5:8d:6a:c8:9b:44:70:d6:14:ac:15:6c:ff:97:2f:
14:f0:5e:7b:2a:88:cd:c7:57:08:7a:d9:20:3b:8a:88:93:5e:
3c:6f:cf:b4:8f:f2:c8:f1:c5:66:9b:2a:fd:53:4d:87:0e:de:
c2:a8:b7:95:64:cf:70:e6:67:6a:c1:13:95:09:5c:b2:2a:31:
18:3a:32:b3:e7:cd:d1:0c:c4:72:67:9f:c3:e7:32:69:bd:86:
8b:98:43:06:d7:5f:55:7f:be:5b:2d:4b:7e:71:df:10:df:5f:
d6:30:79:13:29:61:f9:e6:4c:41:fa:ce:ed:b9:63:56:f9:7f:
5e:78:fd:29:48:d1:67:20:7b:6d:40:5f:54:4f:43:42:c1:30:
d4:7c:7a:97:ae:c9:44:7c:83:42:cc:99:61:c8:9f:6a:c1:9f:
81:3d:7a:85:2a:b1:5a:2d:75:17:42:ed:d6:f8:2b:5b:e9:b9:
5b:8c:46:6e:70:3a:b5:78:73:e4:ad:b2:15:d1:2a:94:19:d7:
c3:ad:ff:2a:2d:8a:ca:6e:b7:23:38:50:9e:9e:16:a2:f9:35:
ad:8a:00:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:27 2023 by rpki-client on console-fra.rpki-client.org