Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/60dc0f-0aed-4bee-90b7-367dc385261a/1/0XslfdmmE5XRz4LmzFfopdOkJ64.roa
File: 0XslfdmmE5XRz4LmzFfopdOkJ64.roa (raw, json)
Hash identifier: x55vM2xc4joP0u3pnD+Nfmijl08Rttmlhrw0OK6xT2w=
Subject key identifier: D1:7B:25:7D:D9:A6:13:95:D1:CF:82:E6:CC:57:E8:A5:D3:A4:27:AE
Certificate issuer: /CN=1820f13139161384eaf13a1f7db60e2c68a43956
Certificate serial: 01856EB912467962B4C1E4FD9FFEC74414B1
Authority key identifier: 18:20:F1:31:39:16:13:84:EA:F1:3A:1F:7D:B6:0E:2C:68:A4:39:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GCDxMTkWE4Tq8ToffbYOLGikOVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/60dc0f-0aed-4bee-90b7-367dc385261a/1/0XslfdmmE5XRz4LmzFfopdOkJ64.roa
Signing time: Sun 01 Jan 2023 19:05:00 +0000
ROA not before: Sun 01 Jan 2023 19:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35433
IP address blocks: 84.18.224.0/19 maxlen: 24
85.208.12.0/22 maxlen: 24
91.193.8.0/22 maxlen: 22
2a09:8040::/29 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:b9:12:46:79:62:b4:c1:e4:fd:9f:fe:c7:44:14:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1820f13139161384eaf13a1f7db60e2c68a43956
Validity
Not Before: Jan 1 19:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d17b257dd9a61395d1cf82e6cc57e8a5d3a427ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c7:b8:ec:e6:82:81:ad:89:7d:1b:b7:c0:45:
55:78:ae:2e:0c:75:25:c7:4a:b7:2c:74:e1:41:58:
2b:d7:e0:3b:97:de:99:22:18:9a:a3:ec:33:3a:b7:
5c:1e:b3:cf:12:08:64:37:70:55:3d:f6:dd:e1:ce:
06:e7:51:03:39:97:69:4d:31:07:48:1f:ac:77:a9:
36:32:13:5e:55:3a:b9:81:a5:52:60:4a:98:f7:b4:
a9:68:6c:b7:14:7d:d7:70:af:67:95:fd:b1:d5:3e:
eb:e5:3a:0b:fd:2d:81:42:72:c6:1b:e4:0c:2e:ee:
d6:52:2f:df:b1:f8:46:65:a1:29:01:9a:c3:ef:5b:
49:39:a8:95:53:e9:b0:80:07:4e:35:c7:5b:56:6a:
81:36:2f:2f:05:7c:2f:bf:ae:1b:68:91:14:dc:85:
28:29:de:07:ed:83:49:bb:63:03:1e:da:a7:02:8e:
5b:74:13:73:2f:bc:7a:4e:50:d6:bf:ae:10:15:9e:
98:12:fe:22:ca:d2:20:7b:49:ad:d3:c7:d4:4f:1d:
df:50:ef:72:a7:f3:85:d6:44:6a:74:dc:6f:fc:08:
8e:55:a5:1f:14:5b:35:c1:82:82:ce:43:dd:83:be:
03:1a:d0:2d:86:8c:66:f8:a9:40:17:28:aa:02:43:
c0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:7B:25:7D:D9:A6:13:95:D1:CF:82:E6:CC:57:E8:A5:D3:A4:27:AE
X509v3 Authority Key Identifier:
keyid:18:20:F1:31:39:16:13:84:EA:F1:3A:1F:7D:B6:0E:2C:68:A4:39:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GCDxMTkWE4Tq8ToffbYOLGikOVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/60dc0f-0aed-4bee-90b7-367dc385261a/1/0XslfdmmE5XRz4LmzFfopdOkJ64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/60dc0f-0aed-4bee-90b7-367dc385261a/1/GCDxMTkWE4Tq8ToffbYOLGikOVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.18.224.0/19
85.208.12.0/22
91.193.8.0/22
IPv6:
2a09:8040::/29
Signature Algorithm: sha256WithRSAEncryption
ad:e9:ed:bd:8b:26:36:66:45:c5:8d:11:b1:39:22:7c:f4:68:
db:43:f0:80:db:f8:85:fb:54:4b:c0:85:00:f1:8c:d1:0f:fe:
3f:0f:f9:65:49:03:46:50:b4:8c:32:23:40:46:51:d3:ba:0d:
21:be:7c:62:40:03:0a:18:9e:20:02:69:8e:83:85:ab:23:74:
30:d1:4b:b4:a1:f4:cc:06:42:e8:b3:ef:64:67:ac:dd:d3:59:
fb:7f:24:28:98:a8:61:44:32:36:04:cf:c3:0e:8e:7b:b2:d6:
ec:bd:81:53:14:26:ca:6c:5d:dc:47:29:d5:23:de:f6:29:4b:
8e:f9:f4:50:50:18:57:dd:83:58:df:7a:21:df:a5:16:ba:e0:
b4:25:5b:fa:a5:07:cf:39:31:4c:3b:a9:ea:6f:d5:8a:02:d3:
81:d4:bc:8a:fd:08:84:61:5c:f1:ca:e3:ed:40:5e:99:cc:93:
42:bc:b2:03:8c:41:4f:98:3a:28:6c:fa:4d:04:07:a8:af:f6:
8a:85:68:0d:2e:31:73:ef:07:6b:33:ba:9f:87:19:7d:2b:8e:
fc:2b:d6:c0:3f:cb:2f:5e:68:6e:16:a1:78:38:2b:68:04:d2:
35:c3:ba:e1:f8:52:28:19:01:da:53:19:11:9b:3f:ec:a9:fb:
80:5d:5c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:11:32 2024 by rpki-client on console-ams.rpki-client.org