Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/K70L3G0xhWbh7swY2xdKfyLJWps.roa
File: K70L3G0xhWbh7swY2xdKfyLJWps.roa (raw, json)
Hash identifier: KGcI6kWFZHtRaiRMYI/5GKlkRfFMu+4Qr5IyTFxAovA=
Subject key identifier: 2B:BD:0B:DC:6D:31:85:66:E1:EE:CC:18:DB:17:4A:7F:22:C9:5A:9B
Certificate issuer: /CN=5aedcb334d39e797817e2eb47703c018b4dc49d5
Certificate serial: 01856D93DE5E59A316412EF4C89818E61D67
Authority key identifier: 5A:ED:CB:33:4D:39:E7:97:81:7E:2E:B4:77:03:C0:18:B4:DC:49:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wu3LM00555eBfi60dwPAGLTcSdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/K70L3G0xhWbh7swY2xdKfyLJWps.roa
Signing time: Sun 01 Jan 2023 13:44:45 +0000
ROA not before: Sun 01 Jan 2023 13:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39767
IP address blocks: 78.158.72.0/21 maxlen: 21
78.158.80.0/20 maxlen: 21
185.90.140.0/22 maxlen: 22
194.88.12.0/23 maxlen: 23
2a05:e200::/29 maxlen: 30
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:93:de:5e:59:a3:16:41:2e:f4:c8:98:18:e6:1d:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5aedcb334d39e797817e2eb47703c018b4dc49d5
Validity
Not Before: Jan 1 13:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2bbd0bdc6d318566e1eecc18db174a7f22c95a9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:1e:6b:8d:0c:90:4b:e2:6b:4d:1d:b0:c7:cd:
4c:57:7b:6d:ad:9a:35:11:b2:4b:e0:99:85:a9:0b:
3e:b4:ee:c7:3b:05:c0:6b:9c:c4:ef:f7:e1:e3:4f:
cb:08:a3:21:3e:96:15:1d:ce:24:c6:3d:e1:30:b2:
89:3a:5c:06:51:67:9f:dc:e6:7b:7a:fd:56:4e:2a:
ba:77:32:4c:de:1c:2a:e8:61:50:dc:15:fe:35:7f:
a7:2d:ba:05:e9:4b:fe:ad:c4:82:f1:bb:09:30:c6:
4a:4e:6b:46:07:5e:3c:a4:69:ff:12:bb:3f:00:d8:
8c:32:ca:d2:da:a1:95:d8:c8:fe:c2:85:12:cd:d2:
43:f2:86:47:99:fc:7d:4d:c6:53:a9:a3:e5:a5:38:
b3:0f:7a:b9:dd:71:b9:55:9d:02:da:8a:8e:9f:ae:
b0:d5:2e:be:6f:93:42:f7:87:8f:0a:09:e6:f5:86:
01:1a:ac:8c:86:8d:1e:ec:3b:2a:4b:00:28:35:29:
f7:e7:33:67:35:f6:f2:85:c7:4d:4b:2a:5d:7c:ee:
9e:8a:5a:ee:83:26:ea:a3:98:4b:e9:4c:13:f2:89:
93:ff:e7:12:95:4b:a2:db:95:56:00:40:63:04:73:
db:e3:6d:0a:84:b9:82:36:b5:ef:97:e2:b2:dd:d8:
5f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:BD:0B:DC:6D:31:85:66:E1:EE:CC:18:DB:17:4A:7F:22:C9:5A:9B
X509v3 Authority Key Identifier:
keyid:5A:ED:CB:33:4D:39:E7:97:81:7E:2E:B4:77:03:C0:18:B4:DC:49:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wu3LM00555eBfi60dwPAGLTcSdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/K70L3G0xhWbh7swY2xdKfyLJWps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/Wu3LM00555eBfi60dwPAGLTcSdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.158.72.0-78.158.95.255
185.90.140.0/22
194.88.12.0/23
IPv6:
2a05:e200::/29
Signature Algorithm: sha256WithRSAEncryption
33:a5:7d:30:8d:8d:9a:29:bd:4d:03:77:62:f9:2f:2a:3a:83:
86:d0:0d:9a:8d:38:e5:53:14:ca:7b:af:f1:97:e9:76:aa:fa:
a6:b5:d7:2b:3b:49:89:dc:44:aa:01:b1:4e:d1:44:de:ef:37:
97:7f:46:68:8c:15:33:84:ba:13:2c:3e:1a:36:4a:24:4a:87:
14:83:56:90:70:0e:e2:32:ec:30:04:ad:f7:82:3b:f6:cc:a1:
05:84:d7:3d:4b:3a:bd:33:b8:5d:f6:44:9b:41:e4:34:55:50:
0e:d3:0c:52:49:f0:c0:76:89:4a:25:74:e3:fe:8d:5e:e6:ec:
79:35:0a:4f:24:c9:41:43:22:28:10:8b:08:6f:ca:20:21:58:
bd:28:9b:34:ba:f3:43:d1:5d:2e:90:83:d5:1e:f1:26:08:48:
71:6c:fa:d8:c8:af:75:a0:79:03:ff:d3:af:81:2a:c7:88:b5:
ff:a0:b9:e0:67:da:af:40:de:90:06:2b:d6:7a:61:49:99:74:
6a:e8:47:e5:41:66:03:5e:bb:d7:9c:3f:69:9f:99:68:ce:3c:
ed:ca:54:11:02:0c:59:a7:f3:7d:e5:f8:58:b1:9a:e7:31:13:
64:dc:41:76:38:da:31:d7:5e:ca:f2:25:d7:2f:cf:da:b6:2d:
a0:87:62:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 13 08:53:05 2023 by rpki-client on console-fra.rpki-client.org