Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/59wUG4w_uayt4W0QYeYNTXng5f8.roa
File: 59wUG4w_uayt4W0QYeYNTXng5f8.roa (raw, json)
Hash identifier: LC9koF/zdFaZ85OKgOpjZljBDcmkwSACTs1yjCqfkF0=
Subject key identifier: E7:DC:14:1B:8C:3F:B9:AC:AD:E1:6D:10:61:E6:0D:4D:79:E0:E5:FF
Certificate issuer: /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Certificate serial: 018C8172627C58E14265E7AB81AE6A79F778
Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/59wUG4w_uayt4W0QYeYNTXng5f8.roa
Signing time: Tue 19 Dec 2023 09:40:06 +0000
ROA not before: Tue 19 Dec 2023 09:40:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34762
IP address blocks: 85.158.254.0/23 maxlen: 23
185.76.236.0/22 maxlen: 24
46.21.224.0/20 maxlen: 24
85.10.156.0/22 maxlen: 24
2a01:7c8:f0::/46 maxlen: 64
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:32:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:81:72:62:7c:58:e1:42:65:e7:ab:81:ae:6a:79:f7:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Validity
Not Before: Dec 19 09:40:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e7dc141b8c3fb9acade16d1061e60d4d79e0e5ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:72:e2:97:23:ff:33:09:2f:04:ef:5b:fb:c4:
8b:33:1d:25:84:c3:fd:17:32:41:93:d8:c5:d9:0b:
69:be:a9:88:73:71:4d:1e:14:d9:d1:cb:15:d3:7a:
a1:aa:0f:f9:f7:8e:6b:57:e8:d8:31:bb:8a:0b:25:
cd:68:62:0e:01:21:d0:c3:31:a0:6a:3e:f6:94:27:
ea:66:c8:93:04:47:bd:71:b5:80:80:d6:f2:9a:48:
2b:82:94:e9:1e:1a:65:7b:0c:80:57:e3:da:7b:7d:
c5:9a:cb:18:9e:37:68:09:61:9a:d3:4c:db:a0:42:
ec:62:fd:0a:0b:43:55:d6:83:42:03:86:da:d7:fe:
7d:f6:41:18:9a:b3:8f:a3:fd:ad:35:5c:b7:00:07:
13:4e:d3:40:ae:e7:ae:dc:eb:d8:4d:27:13:d3:f2:
59:fe:e0:74:cb:d7:01:ff:94:dc:7c:d6:50:62:67:
c4:d5:55:f2:e1:20:2e:6f:cf:03:1e:1e:df:a8:06:
a4:31:81:1f:e2:7f:c8:b3:d0:49:29:42:f6:24:39:
41:bb:14:23:04:f2:00:c7:15:d5:4d:47:53:3d:b6:
63:48:e1:a0:f9:0c:b4:fe:34:17:80:c3:da:fe:9e:
96:6e:c5:2b:2d:73:9a:19:e2:ac:a5:46:8c:20:a6:
11:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:DC:14:1B:8C:3F:B9:AC:AD:E1:6D:10:61:E6:0D:4D:79:E0:E5:FF
X509v3 Authority Key Identifier:
keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/59wUG4w_uayt4W0QYeYNTXng5f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.21.224.0/20
85.10.156.0/22
85.158.254.0/23
185.76.236.0/22
IPv6:
2a01:7c8:f0::/46
Signature Algorithm: sha256WithRSAEncryption
6a:f8:69:33:62:90:6c:d5:c3:3d:ff:de:6a:8d:71:5f:9d:58:
97:83:af:5e:5d:62:32:37:59:a8:3d:26:9a:ee:25:20:0c:38:
29:75:12:58:a5:d5:b1:ee:d6:55:b6:68:3b:4f:f3:a1:b4:cf:
61:4d:da:50:a4:78:57:56:fc:43:26:57:ea:50:c3:c5:0b:55:
a3:44:31:1f:98:34:53:24:b3:a7:2b:d3:cc:93:e1:a8:b6:a3:
c0:5e:ee:c8:f7:e8:ec:94:68:bd:6e:9c:ef:2b:af:a5:a7:4a:
9e:1d:41:a7:ff:2d:ba:bc:05:5f:11:a6:16:b9:c3:66:d9:73:
e4:f0:bc:c9:ae:e0:e1:74:c2:c9:7c:52:44:29:a1:2b:e8:8a:
16:b9:79:d6:7b:58:6a:93:f7:67:ed:70:fc:18:db:0a:d2:03:
dc:0b:4d:f8:e3:6b:3b:3c:8a:f3:4b:d7:13:bb:3f:ee:69:3c:
3a:56:e9:64:f6:b0:c3:20:85:c1:55:c2:9a:7c:2c:42:10:1a:
30:1b:ee:f5:d7:39:88:fa:a1:d4:f3:5b:20:23:18:b3:3e:d9:
e6:fb:71:21:0d:12:aa:69:d1:3f:99:ad:d6:0a:03:08:45:a5:
89:24:f2:c6:ff:eb:42:b0:f9:49:02:cd:23:db:a7:eb:e1:af:
cc:56:ea:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:04 2024 by rpki-client on console-ams.rpki-client.org