Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/xFnpjeBsCTtigv_RjkXyd1vL5Pg.roa
File: xFnpjeBsCTtigv_RjkXyd1vL5Pg.roa (raw, json)
Hash identifier: qh+MCOMeiNWTURaiJX367BdJhpZU58+hWfvFiojTofk=
Subject key identifier: C4:59:E9:8D:E0:6C:09:3B:62:82:FF:D1:8E:45:F2:77:5B:CB:E4:F8
Certificate issuer: /CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Certificate serial: 0188C84EBEF13CF5CAF314229908DA11C23C
Authority key identifier: 1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/xFnpjeBsCTtigv_RjkXyd1vL5Pg.roa
Signing time: Sat 17 Jun 2023 07:43:03 +0000
ROA not before: Sat 17 Jun 2023 07:43:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 185.138.233.0/24 maxlen: 24
185.138.234.0/24 maxlen: 24
185.138.235.0/24 maxlen: 24
91.239.62.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c8:4e:be:f1:3c:f5:ca:f3:14:22:99:08:da:11:c2:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Validity
Not Before: Jun 17 07:43:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c459e98de06c093b6282ffd18e45f2775bcbe4f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5a:9d:f4:e9:fd:8d:36:68:7f:5d:51:2f:f6:
c8:ea:4a:a1:89:03:27:83:98:19:2a:7e:83:5d:c2:
67:34:4b:00:ce:c0:15:8f:3e:7f:e0:58:b2:a0:63:
5e:e6:7a:82:aa:07:40:da:16:a3:c4:30:49:e3:b4:
c5:77:0e:89:79:e4:36:0a:99:4d:86:23:4d:b5:15:
85:0a:85:c2:47:69:fc:10:67:5f:28:fe:7c:c6:84:
8d:e3:e7:43:5c:c4:c9:d5:ef:ee:b9:6b:6a:4d:13:
2a:68:a0:26:2a:ac:1c:84:2c:d7:e1:5b:90:27:0d:
69:c1:53:c6:93:f5:cb:73:75:2e:06:37:82:9c:f1:
33:df:68:70:af:11:1a:88:53:92:e6:90:cd:c1:6e:
32:8a:38:03:2d:d4:50:a3:61:32:b2:c8:05:89:32:
0c:9f:9b:ec:69:bf:53:3b:ad:77:e9:3e:7f:56:01:
44:07:fa:c5:c2:8a:2e:ff:df:c2:0a:99:75:8c:61:
1d:e5:e9:80:89:d9:54:3f:fb:0c:a1:a0:6b:1d:d6:
da:98:ab:93:75:b6:08:f7:bb:32:f0:d3:5a:83:74:
4c:95:0e:c5:38:84:f0:cd:34:56:71:0f:43:52:71:
7f:6c:d9:48:34:e4:5d:55:67:04:a1:97:0d:2b:d8:
82:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:59:E9:8D:E0:6C:09:3B:62:82:FF:D1:8E:45:F2:77:5B:CB:E4:F8
X509v3 Authority Key Identifier:
keyid:1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/xFnpjeBsCTtigv_RjkXyd1vL5Pg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.62.0/24
185.138.233.0-185.138.235.255
Signature Algorithm: sha256WithRSAEncryption
32:8d:c6:86:e3:51:c6:dc:39:d2:99:7b:f7:70:0f:29:81:5c:
f2:9d:fc:2d:c1:de:05:d2:dc:1e:f7:ee:f2:8b:c8:66:8d:35:
bc:eb:69:a4:63:f5:38:15:17:73:34:70:19:c5:a9:a1:0b:20:
9b:84:a4:bd:d0:be:4a:b4:93:96:f4:da:5f:1d:5c:81:34:61:
03:cc:cf:df:e1:c3:1f:ba:f5:5a:2c:37:14:45:61:64:6c:70:
e0:9f:2e:94:4f:ca:10:40:e3:82:41:aa:b1:15:36:56:67:5f:
c8:6b:45:ad:72:f5:07:65:cc:1d:59:1d:22:78:f1:f9:8d:fa:
29:ca:6c:ca:92:ad:ad:26:d4:02:f4:4d:b3:13:56:c5:f4:4e:
0a:83:97:b4:b6:85:b0:9e:ea:a8:08:3c:bf:00:4a:07:69:45:
38:4c:d1:5a:b6:ba:18:03:91:e8:1a:63:8f:dc:05:2a:d2:5b:
cc:bb:20:22:84:41:c6:b4:9d:6f:a8:aa:84:26:da:0b:6d:e6:
ab:80:5d:89:cf:cc:d9:6d:53:1f:f0:3d:7a:26:10:c9:50:bc:
75:95:6a:19:8e:79:86:bc:d4:ae:ef:b7:60:a7:93:dc:e7:da:
c3:3b:1b:f3:17:92:ce:1f:2c:04:72:0b:3c:f2:37:fe:11:ef:
c4:79:cf:dd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Nov 5 06:57:54 2023 by rpki-client on console-ams.rpki-client.org