Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/tDyjRiSvBMM6xMNtauOSPyiHej0.roa
File: tDyjRiSvBMM6xMNtauOSPyiHej0.roa (raw, json)
Hash identifier: A4abFYUQ9uNB0PwgeP5Fcxj3cePL8AyqrmY/FIV+zaw=
Subject key identifier: B4:3C:A3:46:24:AF:04:C3:3A:C4:C3:6D:6A:E3:92:3F:28:87:7A:3D
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 01866E6E72177C011286B806FF90DEEFAB1B
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/tDyjRiSvBMM6xMNtauOSPyiHej0.roa
Signing time: Mon 20 Feb 2023 10:46:17 +0000
ROA not before: Mon 20 Feb 2023 10:46:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204650
IP address blocks: 185.243.48.0/23 maxlen: 23
185.243.48.0/22 maxlen: 22
5.57.38.0/24 maxlen: 24
185.215.231.0/24 maxlen: 24
185.124.172.0/22 maxlen: 24
185.26.34.0/23 maxlen: 24
185.124.173.0/24 maxlen: 24
185.124.174.0/24 maxlen: 24
185.124.175.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:6e:6e:72:17:7c:01:12:86:b8:06:ff:90:de:ef:ab:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Feb 20 10:46:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b43ca34624af04c33ac4c36d6ae3923f28877a3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f4:33:af:ad:fa:24:e1:06:0c:ea:fc:8c:20:
54:22:ae:82:18:f0:6b:87:fc:0b:02:60:6f:af:82:
b6:d1:ba:cc:10:7b:c2:26:7d:44:77:01:b6:24:92:
82:8e:ac:40:ed:d2:64:bf:b2:f7:10:0c:7c:07:64:
db:49:a1:df:7a:46:e8:05:fb:6b:64:53:41:a5:e4:
fe:cf:31:82:74:3f:5e:58:5c:e9:73:bf:74:02:db:
e5:f1:1a:b8:6f:34:bb:1f:54:e2:63:f2:9b:09:fd:
3e:04:ec:4e:a9:c7:ce:ea:b8:03:b1:2f:5e:d6:26:
c8:a4:d9:0f:71:8c:55:82:87:04:96:31:9b:59:41:
e6:cb:75:74:ad:17:ae:d0:4d:a2:24:bd:c7:9c:27:
c4:45:93:69:8a:14:8e:1a:3f:73:d4:40:8a:ae:36:
d9:b0:fa:64:f8:d6:96:98:5a:9d:01:f7:92:7b:a0:
e4:9b:e8:42:ea:91:f1:f8:8b:9d:59:68:6a:c1:45:
b3:bd:fb:5c:0c:41:6b:57:8e:b5:dc:5f:da:06:fb:
88:fb:c3:5f:f2:f2:40:b4:8f:78:6c:35:55:27:fb:
4b:97:6e:c0:07:98:fc:7a:09:c3:9b:24:b6:ee:75:
2d:c7:df:da:f8:49:4f:73:4c:c1:b6:c4:ba:c6:88:
38:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:3C:A3:46:24:AF:04:C3:3A:C4:C3:6D:6A:E3:92:3F:28:87:7A:3D
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/tDyjRiSvBMM6xMNtauOSPyiHej0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.38.0/24
185.26.34.0/23
185.124.172.0/22
185.215.231.0/24
185.243.48.0/22
Signature Algorithm: sha256WithRSAEncryption
92:78:1b:28:5e:77:42:ef:b4:25:f6:fb:78:8c:62:e6:01:49:
a0:43:f6:49:7b:9d:93:4a:07:60:e8:0f:d8:61:e8:2d:81:b3:
bc:81:00:4a:e3:9a:06:b6:3e:de:7e:8f:47:4f:df:d1:25:d4:
68:a5:52:a7:2f:7b:cc:39:30:a2:55:8b:88:99:1e:70:9d:f2:
e9:53:4d:ab:15:5f:f8:43:fe:7e:25:00:13:91:33:f4:8a:c7:
6c:60:bb:76:de:0c:50:46:73:19:44:4d:05:7f:12:cc:20:a6:
50:f7:72:95:81:4b:d3:a9:f3:0f:6e:6f:f7:3c:d5:66:6a:2f:
4c:d9:e9:ce:a4:d6:38:7a:0d:f6:67:5f:41:0b:92:6a:6b:3a:
5e:18:03:b3:e3:65:3f:1d:70:d9:16:84:47:5f:7d:35:0d:7a:
d5:96:56:bd:b7:3f:a8:22:38:3d:de:26:8b:b4:96:bc:a0:af:
63:01:25:46:18:b4:3e:55:af:69:df:5a:33:f2:cf:10:8d:62:
cb:7c:9b:9f:2a:c2:03:ee:c0:a2:7c:7b:64:61:98:61:bb:66:
15:65:ce:af:0d:2b:5f:45:cd:31:39:06:c6:e8:fa:11:c6:ff:
12:fb:af:94:97:58:b3:18:41:3b:f1:f6:fe:55:80:73:1e:96:
fe:7e:6b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:33 2023 by rpki-client on console-fra.rpki-client.org