Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pOv7zvDqtf5QAi0lhd6u0DzYkqg.roa
File: pOv7zvDqtf5QAi0lhd6u0DzYkqg.roa (raw, json)
Hash identifier: zb0jmqy2w3FkjncyTfvewlDiixa1k1EGPKenmfnnKbk=
Subject key identifier: A4:EB:FB:CE:F0:EA:B5:FE:50:02:2D:25:85:DE:AE:D0:3C:D8:92:A8
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 018C8F03C59C2A7AC6D94667A62367FB2A94
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pOv7zvDqtf5QAi0lhd6u0DzYkqg.roa
Signing time: Fri 22 Dec 2023 00:53:58 +0000
ROA not before: Fri 22 Dec 2023 00:53:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 185.255.54.0/24 maxlen: 24
62.133.34.0/24 maxlen: 24
77.75.225.0/24 maxlen: 24
2a0b:4080::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8f:03:c5:9c:2a:7a:c6:d9:46:67:a6:23:67:fb:2a:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Dec 22 00:53:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a4ebfbcef0eab5fe50022d2585deaed03cd892a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:bb:8a:3b:8d:be:c5:a9:b6:af:a9:fd:2e:bb:
f4:b0:1b:b5:07:a0:45:9f:3e:4e:2e:84:ab:9e:e9:
77:5e:cf:03:a1:71:ea:4c:37:c8:3d:88:80:cf:85:
22:e6:3c:e7:ff:e7:74:d8:98:3b:1a:df:da:28:45:
a1:fa:4f:63:83:8b:9f:c2:eb:1b:51:cf:db:74:31:
c3:73:f5:ab:60:9d:0f:a8:77:49:43:bb:39:12:a6:
01:74:5f:a2:7c:68:21:53:0f:59:59:f6:3d:8a:72:
d8:80:38:6b:cd:b7:6e:11:4f:b6:57:60:c3:4b:66:
49:41:a2:d0:7c:61:c7:1f:15:00:28:79:df:7a:fe:
d6:84:98:af:d8:b0:6a:1e:ee:e0:84:e4:68:61:92:
a9:02:96:c1:31:c8:e7:93:b4:0e:a8:92:a3:15:e5:
2a:04:cd:ed:9b:00:a6:dc:56:6e:9a:92:8c:fb:3a:
cc:17:ae:c0:23:13:2a:64:5c:d7:3c:61:bc:a4:81:
e0:36:17:e8:b5:cd:0c:08:71:75:ca:0e:dc:b0:39:
83:02:1b:30:4c:1d:82:39:0f:78:04:b3:36:f9:39:
5d:68:01:df:d7:02:80:59:11:81:3d:8c:93:29:70:
76:80:64:38:6e:72:e9:be:c7:f5:6e:99:ed:9f:fe:
20:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:EB:FB:CE:F0:EA:B5:FE:50:02:2D:25:85:DE:AE:D0:3C:D8:92:A8
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pOv7zvDqtf5QAi0lhd6u0DzYkqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.133.34.0/24
77.75.225.0/24
185.255.54.0/24
IPv6:
2a0b:4080::/32
Signature Algorithm: sha256WithRSAEncryption
34:d9:c2:19:88:72:63:fd:e8:1f:ef:2c:d3:e2:2b:0b:fd:d5:
dd:23:3f:17:ba:16:30:18:aa:2b:06:bf:cf:8b:68:4c:0f:aa:
54:82:27:68:ff:8b:65:60:e2:87:1f:71:53:e0:71:ca:d0:5b:
e6:41:be:e2:16:87:ef:2b:fd:83:db:e5:e8:af:27:d4:3c:b4:
79:4d:e3:0c:eb:e0:cf:c1:2a:f6:8c:d5:b9:33:e1:11:b7:df:
2c:79:d0:6c:46:69:3a:79:77:2b:be:62:38:85:a8:03:ab:7c:
e5:0a:08:7c:a3:42:2f:bc:0b:e3:42:a2:86:92:a3:26:98:49:
6c:e0:f7:f4:a2:e1:99:42:73:8b:b4:27:e2:45:40:4f:4d:5c:
8b:9c:e0:5d:dd:41:cc:48:3a:b5:0d:b8:e2:31:0a:75:cf:80:
c5:66:bc:e2:72:0a:bd:59:f2:7c:27:a2:c3:11:fd:17:8f:56:
ed:cb:9d:b9:d9:2c:d4:38:67:41:83:29:84:02:1d:38:3c:8e:
4e:af:ec:6a:91:80:e7:a1:86:36:78:68:e0:e4:66:e7:db:96:
de:44:c5:e0:26:60:dd:0a:60:79:f2:e8:03:67:c8:8d:20:8f:
28:bb:40:33:5a:18:75:12:ed:0c:ba:f0:ef:cb:0c:d6:31:10:
29:70:d7:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:51:34 2024 by rpki-client on console-fra.rpki-client.org