Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/isdsoVTMQpIsVxOiMndOdaO-PJI.roa
File: isdsoVTMQpIsVxOiMndOdaO-PJI.roa (raw, json)
Hash identifier: ulM/SnVBT+Nr1YFvJmZld3sbSdrh0O5wUjLCu05tUm0=
Subject key identifier: 8A:C7:6C:A1:54:CC:42:92:2C:57:13:A2:32:77:4E:75:A3:BE:3C:92
Certificate issuer: /CN=bfd786b24b4b30275bcc8d5244e34ee00481d790
Certificate serial: 01856EA6A3E0F74E2F13D67522C4C677F1F3
Authority key identifier: BF:D7:86:B2:4B:4B:30:27:5B:CC:8D:52:44:E3:4E:E0:04:81:D7:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9eGsktLMCdbzI1SRONO4ASB15A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/isdsoVTMQpIsVxOiMndOdaO-PJI.roa
Signing time: Sun 01 Jan 2023 18:44:52 +0000
ROA not before: Sun 01 Jan 2023 18:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6831
IP address blocks: 188.94.190.0/24 maxlen: 24
195.178.28.0/23 maxlen: 24
193.238.100.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:a6:a3:e0:f7:4e:2f:13:d6:75:22:c4:c6:77:f1:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfd786b24b4b30275bcc8d5244e34ee00481d790
Validity
Not Before: Jan 1 18:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ac76ca154cc42922c5713a232774e75a3be3c92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:20:13:8e:ae:39:40:67:c8:4e:04:47:6c:eb:
48:48:3f:2a:dd:49:b3:13:bc:7f:31:9b:13:1e:9c:
4e:8f:a0:ee:8c:81:4e:41:69:06:d7:74:3a:6a:0b:
34:ca:ed:99:4e:0a:be:22:8a:8f:08:f0:90:b5:c2:
25:14:91:71:6c:e9:8d:5e:d7:cf:cd:a2:a6:17:64:
fa:5a:11:17:74:67:c6:37:39:63:b2:f7:57:37:a2:
09:45:9e:67:33:3c:46:7e:1c:32:ca:a7:5b:24:1f:
e6:16:b2:64:f0:85:e9:b2:68:9c:9e:ae:52:be:62:
47:d1:36:7e:65:dc:81:db:fe:39:3c:c7:8b:f6:70:
fc:c8:64:d4:03:0b:cd:0e:d4:25:fc:ab:40:7d:c8:
36:fb:ba:73:8e:9a:62:40:00:ee:e5:21:df:33:c1:
65:f6:44:eb:fb:46:9d:ca:b0:d8:be:71:1c:13:d6:
fe:9e:74:5e:21:41:01:9f:ae:6c:d6:d9:da:fa:47:
e5:94:9f:48:98:ad:fd:f6:ff:54:b4:84:8d:e3:8b:
54:14:ea:b1:8d:6b:4b:ea:87:d2:bf:6f:de:8d:6a:
bf:bc:f2:c6:58:db:ca:4e:f9:6e:b1:3e:ec:1d:84:
0c:55:20:58:c0:f3:ef:c2:3d:af:04:1b:1e:af:da:
a5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:C7:6C:A1:54:CC:42:92:2C:57:13:A2:32:77:4E:75:A3:BE:3C:92
X509v3 Authority Key Identifier:
keyid:BF:D7:86:B2:4B:4B:30:27:5B:CC:8D:52:44:E3:4E:E0:04:81:D7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9eGsktLMCdbzI1SRONO4ASB15A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/isdsoVTMQpIsVxOiMndOdaO-PJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.94.190.0/24
193.238.100.0/22
195.178.28.0/23
Signature Algorithm: sha256WithRSAEncryption
79:bc:16:bf:12:cb:a1:73:20:5a:a4:58:fb:1f:ea:cd:b4:6e:
e9:cb:fe:ff:59:e0:d8:64:fe:bc:dd:0e:8e:e1:f0:72:16:b5:
8c:b1:dd:14:d4:39:ec:71:05:18:e9:d5:f8:9a:4b:c5:a8:a4:
8c:d3:05:7c:cd:ec:b1:e6:20:e3:ef:98:c0:72:36:47:89:46:
05:0b:17:46:3b:dd:43:ba:df:a5:93:99:67:a7:21:af:07:62:
c0:56:5e:1e:ef:55:fd:84:d3:65:e4:54:96:17:81:77:9e:dc:
15:4c:a3:30:fe:6b:a7:c0:24:d1:8b:f9:7d:b7:0f:79:54:dc:
c9:dc:6b:e4:a2:b0:38:b9:d7:6a:fa:ac:0d:38:c2:e3:12:7c:
8d:4b:75:71:61:f0:7b:f6:a1:70:2d:8f:57:ba:6f:0d:c7:d9:
a5:af:4d:70:9f:fc:b7:9c:bd:54:9b:f5:da:9f:5a:a2:20:4b:
46:99:78:60:f2:1f:a0:f9:bf:d0:d8:b5:3c:14:79:1f:b4:be:
a8:72:4b:33:18:6a:ec:b2:5e:1b:0f:f8:ae:47:00:3e:2f:71:
87:bb:8a:32:ed:eb:8e:f4:4d:a1:d5:7c:2e:dd:7a:6e:3c:85:
8f:17:3e:61:8d:66:a6:bc:e9:dd:31:15:d0:bd:35:7a:0a:e4:
a1:1f:b9:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:41:05 2024 by rpki-client on console-ams.rpki-client.org