Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/3ICUdsZzWPi-Gq-XVszZp-3EPuQ.roa
File: 3ICUdsZzWPi-Gq-XVszZp-3EPuQ.roa (raw, json)
Hash identifier: dARqc6MN9gr8C96K49bClN9O17kIEMJnGOjirrLA+2M=
Subject key identifier: DC:80:94:76:C6:73:58:F8:BE:1A:AF:97:56:CC:D9:A7:ED:C4:3E:E4
Certificate issuer: /CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Certificate serial: 0189C2B43B5657B6133D2C9693B2DACD6C1F
Authority key identifier: E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/3ICUdsZzWPi-Gq-XVszZp-3EPuQ.roa
Signing time: Fri 04 Aug 2023 22:38:58 +0000
ROA not before: Fri 04 Aug 2023 22:38:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42216
IP address blocks: 77.92.142.0/24 maxlen: 24
212.68.48.0/24 maxlen: 24
188.132.184.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c2:b4:3b:56:57:b6:13:3d:2c:96:93:b2:da:cd:6c:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Validity
Not Before: Aug 4 22:38:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dc809476c67358f8be1aaf9756ccd9a7edc43ee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:f8:94:2c:e1:51:16:40:11:28:40:4f:14:c1:
89:3e:09:8a:ae:35:a7:d6:29:cc:ff:f2:4d:59:c5:
34:a5:34:8c:c4:84:4d:e1:56:00:98:1a:09:52:9d:
2a:b4:ef:77:1b:6e:5e:f4:b5:b1:f1:a6:d0:27:0c:
59:e3:65:40:18:7f:15:96:85:e1:0b:2a:c8:a8:be:
e0:1a:be:a4:d3:ab:52:a9:3a:9e:88:6b:8f:50:61:
8a:38:d4:47:41:3e:51:62:ee:62:0e:11:9d:a0:62:
c2:9e:e2:34:52:45:38:de:10:f6:e3:69:a2:d5:f3:
5c:31:cc:8f:ee:f3:41:f0:fe:8b:09:0c:32:8b:69:
ac:64:10:48:2c:8d:0c:83:95:ae:89:62:f9:fb:7f:
cd:a6:c5:b4:98:dc:8e:a0:c2:e5:93:ef:9d:be:e8:
98:98:ed:d8:76:88:13:90:92:c4:2c:e7:d4:f8:75:
d5:14:37:90:54:7d:22:c1:89:5a:9c:e2:d1:d5:a5:
99:1d:08:78:16:30:5a:2a:06:f1:af:3e:0a:d9:a0:
7b:c0:ce:0e:2f:10:59:59:a3:41:ed:43:98:9c:dd:
95:55:5e:87:25:41:4f:c6:cf:61:f6:2b:b0:e3:f0:
7d:2d:6b:30:26:6c:8b:1b:77:58:72:38:ce:18:f4:
1c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:80:94:76:C6:73:58:F8:BE:1A:AF:97:56:CC:D9:A7:ED:C4:3E:E4
X509v3 Authority Key Identifier:
keyid:E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/3ICUdsZzWPi-Gq-XVszZp-3EPuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.92.142.0/24
188.132.184.0/24
212.68.48.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:52:3e:ca:98:70:ec:be:86:c4:92:04:19:ff:e9:d3:8a:d0:
77:87:20:c1:58:aa:ad:0c:d0:52:11:d0:5f:60:d7:e9:ad:69:
ad:a3:12:b4:26:fb:89:76:c6:f5:3b:7c:36:5a:0a:6e:7b:60:
cb:c1:ac:e4:ca:42:5c:64:86:1c:c5:45:4f:63:05:98:94:8f:
04:b2:ac:b3:fa:03:55:9f:7e:56:71:a4:df:17:36:69:0c:d9:
ff:8a:14:c0:b2:3f:41:f2:80:f8:d4:84:2f:ae:14:a5:45:bf:
18:a4:e9:c7:c8:f9:ac:00:d3:76:87:16:33:7c:8b:90:ec:99:
9d:c3:9f:94:7f:ed:e4:1c:f9:38:b0:c9:93:ab:c3:ef:48:60:
21:7c:2a:bf:6d:5f:5f:fd:8b:f9:f6:31:30:6c:07:69:bb:45:
06:b7:1c:93:87:83:9e:09:cf:5d:7a:d4:5c:71:3b:bc:d2:30:
6d:61:d2:b0:01:48:0e:b6:99:f6:9e:4c:bd:bb:f5:fb:43:4e:
fa:85:4d:c4:18:17:ad:84:4d:b2:f5:fa:c9:86:2e:1f:81:03:
de:b4:10:f4:60:ac:6f:ce:21:8c:9d:66:88:c9:8a:94:13:01:
56:15:ce:98:c3:92:43:0a:f8:b2:fd:fc:4f:c7:7a:36:45:34:
fe:87:a2:7c
-----BEGIN CERTIFICATE-----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 at Thu Aug 10 00:18:11 2023 by rpki-client on console-ams.rpki-client.org