Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/o3GMqP9lYJfHZi89HJrAQqoS85A.roa
File: o3GMqP9lYJfHZi89HJrAQqoS85A.roa (raw, json)
Hash identifier: dZ+4vha4q0c1iaQyBmyGm7VNwBOek6PIAGedHreoiK4=
Subject key identifier: A3:71:8C:A8:FF:65:60:97:C7:66:2F:3D:1C:9A:C0:42:AA:12:F3:90
Certificate issuer: /CN=d833bfa014b9192f2700acaf6f279dbef8a0aff2
Certificate serial: 0185724C8F09470CCD4F4CC8F02E312A8C31
Authority key identifier: D8:33:BF:A0:14:B9:19:2F:27:00:AC:AF:6F:27:9D:BE:F8:A0:AF:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DO_oBS5GS8nAKyvbyedvvigr_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/o3GMqP9lYJfHZi89HJrAQqoS85A.roa
Signing time: Mon 02 Jan 2023 11:44:57 +0000
ROA not before: Mon 02 Jan 2023 11:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8943
IP address blocks: 212.13.192.0/19 maxlen: 19
185.73.44.0/22 maxlen: 22
194.33.11.0/24 maxlen: 24
2001:ba8::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:4c:8f:09:47:0c:cd:4f:4c:c8:f0:2e:31:2a:8c:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d833bfa014b9192f2700acaf6f279dbef8a0aff2
Validity
Not Before: Jan 2 11:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a3718ca8ff656097c7662f3d1c9ac042aa12f390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:eb:97:66:ec:f6:f8:e2:57:8f:43:d5:3c:e6:
6d:a9:4a:6e:b0:27:56:b7:d6:37:84:c9:d4:b1:b7:
12:80:15:d3:6f:5a:ac:30:23:a5:e0:f6:fc:16:dd:
25:39:f9:c1:1f:33:29:13:f9:d7:4b:a5:61:75:9d:
c0:59:4b:08:94:53:2e:d2:38:aa:2a:e7:7c:a3:ad:
0d:6a:e3:05:1f:ca:cf:af:97:07:4e:b0:b2:ab:54:
7d:97:f1:c2:db:80:48:84:48:cb:e3:21:58:15:f9:
ba:8b:a9:25:cf:42:22:c8:6a:e3:71:b1:c2:67:b8:
55:52:e2:6a:4b:66:f1:30:7b:5c:72:a4:3d:a9:cd:
67:0b:73:9e:ae:ab:61:de:73:06:4b:24:52:07:20:
1f:53:d4:5f:5b:ae:df:3a:3e:55:7b:9b:56:68:37:
ab:38:61:58:e1:e1:5a:04:f1:f9:02:55:dd:c1:3d:
e5:a1:e8:35:5f:45:32:b7:91:6c:c2:6d:fe:e4:9c:
73:2d:fa:31:db:15:1c:10:1a:62:f1:71:52:7d:97:
78:98:3a:03:08:10:e3:e5:a4:02:17:6d:ad:75:14:
8b:6f:6a:89:52:3f:06:8a:b5:75:5b:eb:dd:f6:2a:
fb:c8:0b:0f:39:7a:bc:50:25:e4:7b:a6:cc:7a:96:
b1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:71:8C:A8:FF:65:60:97:C7:66:2F:3D:1C:9A:C0:42:AA:12:F3:90
X509v3 Authority Key Identifier:
keyid:D8:33:BF:A0:14:B9:19:2F:27:00:AC:AF:6F:27:9D:BE:F8:A0:AF:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DO_oBS5GS8nAKyvbyedvvigr_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/o3GMqP9lYJfHZi89HJrAQqoS85A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.73.44.0/22
194.33.11.0/24
212.13.192.0/19
IPv6:
2001:ba8::/32
Signature Algorithm: sha256WithRSAEncryption
7b:d8:8b:42:9d:85:09:19:22:17:99:00:be:b9:2a:31:e0:1b:
cf:95:98:8d:22:b0:20:66:ad:e1:ca:4f:65:63:f8:09:9a:e4:
7e:12:79:c8:52:54:9b:34:d6:98:5b:35:09:4a:58:aa:89:fb:
24:26:20:23:78:0f:bd:0b:df:88:0e:74:7f:e7:ed:49:3a:e9:
4f:d2:40:ec:8b:06:a1:24:17:74:71:aa:1f:b0:cf:39:04:88:
77:19:65:3f:8c:1f:15:31:53:74:6f:da:8d:ab:96:de:0c:ba:
31:81:bf:e6:41:7f:45:02:bf:9e:dd:17:43:3f:aa:2c:e3:99:
3e:8d:e2:ec:9e:b7:ba:ba:76:46:ac:41:a0:e7:10:0e:dc:82:
81:8d:65:3e:eb:aa:b5:6a:81:98:c7:2b:e0:fc:59:3b:f0:d3:
76:fd:28:ad:ac:c8:a9:99:d7:20:ab:0d:4c:63:c2:ca:20:b0:
65:fe:ca:c8:46:a7:99:95:99:af:ab:23:af:83:bd:00:bb:02:
6b:1b:d3:a0:8e:b3:71:7d:ea:af:95:36:27:4a:47:81:09:98:
95:44:40:b8:a9:ab:29:b3:14:c5:35:c3:ba:ca:fa:bf:f5:5f:
6b:8e:55:1f:2a:07:76:e4:06:af:3f:58:50:cc:42:42:c2:0e:
76:72:b1:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 08:09:49 2024 by rpki-client on console-fra.rpki-client.org