Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/xk4w0LRXvcw6F5IVFvFEWaNGK84.roa
File: xk4w0LRXvcw6F5IVFvFEWaNGK84.roa (raw, json)
Hash identifier: Heb5EZf5ZDIacyu58aaB6wyLnKQOnq3Y1gDlHQZw+d8=
Subject key identifier: C6:4E:30:D0:B4:57:BD:CC:3A:17:92:15:16:F1:44:59:A3:46:2B:CE
Certificate issuer: /CN=1cc451fbdfaa12efc352a59b007b0a8823b8e65d
Certificate serial: 01856C25D9196563CB3853D6980503E3E73F
Authority key identifier: 1C:C4:51:FB:DF:AA:12:EF:C3:52:A5:9B:00:7B:0A:88:23:B8:E6:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HMRR-9-qEu_DUqWbAHsKiCO45l0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/xk4w0LRXvcw6F5IVFvFEWaNGK84.roa
Signing time: Sun 01 Jan 2023 07:04:57 +0000
ROA not before: Sun 01 Jan 2023 07:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13041
IP address blocks: 193.242.98.0/24 maxlen: 24
192.94.163.0/24 maxlen: 24
84.88.0.0/15 maxlen: 18
2001:7f8:2a::/48 maxlen: 48
2001:40b0::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:25:d9:19:65:63:cb:38:53:d6:98:05:03:e3:e7:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cc451fbdfaa12efc352a59b007b0a8823b8e65d
Validity
Not Before: Jan 1 07:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c64e30d0b457bdcc3a17921516f14459a3462bce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f2:83:3d:92:20:c5:15:a0:b4:6b:01:f2:fe:
90:2c:36:5a:45:8f:18:3e:2e:1b:53:a7:f4:84:8b:
ed:e2:f9:b2:be:cd:c5:04:dc:69:b3:60:4c:ed:af:
ce:e7:89:53:6d:f2:14:c1:ff:c5:59:38:9f:72:3a:
68:be:ff:38:11:1d:aa:51:a3:eb:21:d6:fe:90:e3:
0c:bb:2e:4b:20:c0:cc:a7:de:30:05:df:50:1e:9d:
5f:5f:54:ce:10:50:57:36:57:ee:2d:71:86:eb:09:
be:3a:02:de:6f:83:ad:e9:b2:77:fd:f4:8c:c8:12:
a7:bf:e5:b7:06:6f:9a:6e:59:ac:c6:0e:42:ae:20:
46:47:98:c4:c2:ad:2d:13:77:ed:bf:72:38:b5:67:
08:36:cd:b4:40:21:2e:ec:2e:09:20:8b:c6:b1:1f:
a1:0b:d2:74:0b:97:9a:3d:8a:af:06:32:0c:74:a7:
ae:eb:bb:14:f8:6b:96:ed:b2:0a:b0:a6:e8:24:68:
f5:79:74:09:fc:e1:91:04:64:53:35:b8:a1:55:4b:
58:e6:e8:58:27:16:d6:44:fd:28:6c:bf:e1:ad:cc:
7e:b7:ad:80:eb:c5:11:ad:2b:5a:b7:b5:37:2d:df:
6f:b2:b0:35:f3:ee:03:ad:56:f8:46:0d:e4:78:09:
72:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:4E:30:D0:B4:57:BD:CC:3A:17:92:15:16:F1:44:59:A3:46:2B:CE
X509v3 Authority Key Identifier:
keyid:1C:C4:51:FB:DF:AA:12:EF:C3:52:A5:9B:00:7B:0A:88:23:B8:E6:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HMRR-9-qEu_DUqWbAHsKiCO45l0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/xk4w0LRXvcw6F5IVFvFEWaNGK84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/HMRR-9-qEu_DUqWbAHsKiCO45l0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.88.0.0/15
192.94.163.0/24
193.242.98.0/24
IPv6:
2001:7f8:2a::/48
2001:40b0::/32
Signature Algorithm: sha256WithRSAEncryption
6a:0b:49:dd:2d:e7:b3:6c:d9:06:fe:a6:71:d3:ca:d6:82:5a:
00:78:06:73:a1:94:b1:d2:93:33:e2:56:14:bf:23:ed:3d:b8:
fa:03:d5:29:d4:1b:1c:fa:71:05:e6:46:98:5c:ab:a7:98:d5:
ea:82:45:58:66:95:a9:88:51:3e:dc:62:4e:b2:f4:cb:bb:c2:
04:a7:77:98:b4:0b:9b:0c:2d:a6:b9:90:2a:7b:28:c6:35:d2:
69:93:09:7f:9d:1b:4a:a9:de:ca:b8:31:73:ab:4a:d7:9a:00:
8c:39:1f:41:af:e4:44:48:c7:c2:e6:83:4c:ec:4f:23:20:00:
10:21:27:d9:33:d3:1f:12:20:d2:e4:91:42:1b:5d:45:d0:93:
2f:0c:96:76:83:d2:95:73:84:87:c1:90:d1:b3:24:88:45:70:
d7:64:df:75:a9:c0:3d:f7:82:9b:d0:67:6c:aa:a8:47:bd:69:
39:09:6c:e9:9c:c0:83:27:4e:b0:1a:43:6c:77:41:ad:a0:5f:
63:60:d4:3d:40:8e:7f:95:bb:6c:bc:ae:0f:5d:fa:a3:e6:1f:
3d:87:93:91:36:22:15:81:d2:66:1d:e5:bb:98:0f:1c:30:7f:
a5:1d:97:dc:60:43:6a:bb:de:7c:d1:ed:b2:2a:51:70:7d:27:
d2:a3:8f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:01:17 2024 by rpki-client on console-ams.rpki-client.org