Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/65pyKs2nTr5CKWpCBoExPQX60J4.roa
File: 65pyKs2nTr5CKWpCBoExPQX60J4.roa (raw, json)
Hash identifier: b1ZIY/iv7qXamtErsVisF3OVtMmMfNsikeyUJFIG8cg=
Subject key identifier: EB:9A:72:2A:CD:A7:4E:BE:42:29:6A:42:06:81:31:3D:05:FA:D0:9E
Certificate issuer: /CN=adac830ccaa74783dd961fab241a228d7cc6f808
Certificate serial: 018570705D3997C0E0EEE3C0B55F110B395E
Authority key identifier: AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/65pyKs2nTr5CKWpCBoExPQX60J4.roa
Signing time: Mon 02 Jan 2023 03:04:50 +0000
ROA not before: Mon 02 Jan 2023 03:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43782
IP address blocks: 109.74.208.0/20 maxlen: 32
185.43.84.0/23 maxlen: 32
164.177.176.0/21 maxlen: 32
46.226.240.0/21 maxlen: 32
79.132.96.0/19 maxlen: 32
2a00:1138::/32 maxlen: 128
Validation: Failed, certificate revoked on Tue 04 Apr 2023 06:12:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:5d:39:97:c0:e0:ee:e3:c0:b5:5f:11:0b:39:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adac830ccaa74783dd961fab241a228d7cc6f808
Validity
Not Before: Jan 2 03:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb9a722acda74ebe42296a420681313d05fad09e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1d:d5:ae:58:8c:b0:6e:56:67:0e:25:4e:f3:
f3:4f:08:28:9e:30:1b:f8:b9:fb:7d:ee:4e:54:86:
81:45:1b:b8:49:00:09:60:c2:81:57:b0:f4:8e:a5:
ea:b2:b3:4b:e8:76:34:c1:82:0d:f6:7c:fa:6f:a0:
89:20:03:4e:6a:c2:ef:80:20:56:59:cc:29:17:f5:
b9:b9:88:c8:0e:d4:20:87:0b:1f:50:2e:34:71:da:
b9:4d:e1:13:85:cd:ee:6d:62:5d:52:1b:15:40:42:
10:f1:ae:c8:b3:37:1e:17:f0:42:65:38:40:0d:01:
04:d1:72:b9:b7:88:94:2c:8c:41:cb:5b:89:e6:1d:
46:04:15:89:62:a0:f8:12:8a:d6:9f:a5:01:fd:80:
cf:91:25:9d:0a:51:71:a3:52:e8:fa:60:9a:07:9c:
25:37:b3:28:6b:5c:4d:04:60:af:09:03:1f:8c:c5:
e1:d3:e1:3f:81:c5:d1:04:c2:7e:46:5f:80:cf:44:
ac:e4:30:e7:a1:ce:93:aa:fc:2a:38:ea:cd:5f:79:
b4:4a:be:cc:1a:2c:90:76:b7:55:d0:e5:41:db:ca:
e3:a7:83:4f:00:4e:80:81:2c:b4:60:97:c3:83:80:
90:a5:26:6c:37:96:1d:62:79:3e:2d:b8:39:d4:4f:
2c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:9A:72:2A:CD:A7:4E:BE:42:29:6A:42:06:81:31:3D:05:FA:D0:9E
X509v3 Authority Key Identifier:
keyid:AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/65pyKs2nTr5CKWpCBoExPQX60J4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.226.240.0/21
79.132.96.0/19
109.74.208.0/20
164.177.176.0/21
185.43.84.0/23
IPv6:
2a00:1138::/32
Signature Algorithm: sha256WithRSAEncryption
8b:1e:11:34:b4:60:9b:e6:ff:1a:66:00:c6:ce:9f:5f:5d:94:
71:95:38:02:53:d0:59:45:ff:eb:6f:5f:d2:e9:09:0e:c7:d5:
a5:ff:17:16:37:7c:e3:61:61:1f:09:25:00:0d:1f:22:de:a4:
92:34:03:74:bb:7c:fc:90:45:f8:6a:55:6e:e1:9d:2b:e1:12:
45:aa:06:c7:00:59:a6:3c:0a:b3:46:ae:cb:a7:1b:57:b8:0b:
a4:e8:9d:ae:0f:da:0a:60:b8:32:d2:40:13:2f:8a:77:d1:42:
d9:9f:fd:98:69:93:01:94:a9:de:e7:c5:35:49:23:9c:3a:05:
6a:63:33:8b:57:da:99:34:8d:f9:a1:1b:55:ff:93:47:b4:f8:
99:9e:2b:10:44:37:19:e3:5e:45:14:47:69:a8:2f:68:d5:0f:
41:5b:c2:53:1a:6d:8b:a9:f8:f9:4b:70:e8:e2:8f:23:1c:fb:
7d:9b:bd:da:9c:e0:12:01:ff:ff:c7:ea:fd:a0:1e:f9:d0:2e:
81:15:69:5e:fd:70:60:45:a5:0f:40:83:87:14:5a:7a:bd:3d:
f0:dd:4b:5b:6a:a1:9f:9a:a0:75:51:5f:9b:0e:82:97:6c:aa:
96:46:e1:fb:74:e7:27:f2:d2:f5:a5:63:65:3d:49:5d:b2:5f:
9f:12:c5:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:08 2024 by rpki-client on console-fra.rpki-client.org