Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6f6826-1aad-4c3c-bd91-cca37e2f2729/1/oXXF944GkEoQNE8gP1mfmc1Dwdw.roa
File: oXXF944GkEoQNE8gP1mfmc1Dwdw.roa (raw, json)
Hash identifier: mrwAO1Xyl+iqWNNTHREyEyeV0uhHtq7rVfcrGDcP9xU=
Subject key identifier: A1:75:C5:F7:8E:06:90:4A:10:34:4F:20:3F:59:9F:99:CD:43:C1:DC
Certificate issuer: /CN=f826ffe96cdc41efaa8bfb3125862d6594be9827
Certificate serial: 01856FB117FA3697B9B4DEDEEA01E637CEA3
Authority key identifier: F8:26:FF:E9:6C:DC:41:EF:AA:8B:FB:31:25:86:2D:65:94:BE:98:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6f6826-1aad-4c3c-bd91-cca37e2f2729/1/oXXF944GkEoQNE8gP1mfmc1Dwdw.roa
Signing time: Sun 01 Jan 2023 23:35:55 +0000
ROA not before: Sun 01 Jan 2023 23:35:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207592
IP address blocks: 134.76.0.0/16 maxlen: 16
195.12.38.0/24 maxlen: 24
134.76.175.0/24 maxlen: 24
2a06:93c0:1::/48 maxlen: 48
2a06:93c0::/29 maxlen: 29
2a06:93c0:2::/48 maxlen: 48
2a06:93c0::/48 maxlen: 48
2a06:93c0:3::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:b1:17:fa:36:97:b9:b4:de:de:ea:01:e6:37:ce:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f826ffe96cdc41efaa8bfb3125862d6594be9827
Validity
Not Before: Jan 1 23:35:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a175c5f78e06904a10344f203f599f99cd43c1dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:b7:af:1b:97:f0:e1:24:90:18:ad:6f:e3:16:
87:79:c9:6d:62:36:50:87:b8:67:4e:10:9f:11:83:
86:97:0c:c5:e3:24:0d:62:e2:f8:29:ce:da:3a:35:
d9:9e:ea:f1:87:74:9f:2e:8a:17:1e:5d:74:01:2d:
18:f9:47:fd:e1:82:1c:57:b1:18:fc:11:0d:07:11:
36:18:89:3d:7b:e5:56:87:ba:f5:3e:8d:72:a6:e6:
a4:aa:e2:3d:43:1d:ed:ee:26:72:26:b5:b1:1b:0e:
88:c5:70:49:45:4c:32:1c:8d:9f:24:b6:19:3b:75:
33:60:09:df:25:4c:db:25:dc:aa:e8:5f:53:2c:37:
9c:f0:65:8a:88:a2:18:c4:24:16:2e:c6:96:07:44:
eb:f3:89:5a:aa:30:ae:76:57:58:71:fe:10:9e:6d:
99:99:1b:0a:0d:78:5b:b8:0e:39:81:5f:89:c7:b0:
65:48:34:e0:36:00:c0:2b:23:68:57:06:66:34:19:
b1:14:95:47:1d:56:bf:6b:a1:d6:b8:aa:45:47:51:
41:5f:f7:8f:5b:fd:4b:34:29:03:11:a5:42:6a:db:
50:98:02:25:5c:7b:f0:0e:ed:a8:3c:c7:07:bf:79:
83:7c:96:f3:dc:33:1a:bf:e5:f1:eb:b5:74:cd:7d:
56:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:75:C5:F7:8E:06:90:4A:10:34:4F:20:3F:59:9F:99:CD:43:C1:DC
X509v3 Authority Key Identifier:
keyid:F8:26:FF:E9:6C:DC:41:EF:AA:8B:FB:31:25:86:2D:65:94:BE:98:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6f6826-1aad-4c3c-bd91-cca37e2f2729/1/oXXF944GkEoQNE8gP1mfmc1Dwdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6f6826-1aad-4c3c-bd91-cca37e2f2729/1/1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.76.0.0/16
195.12.38.0/24
IPv6:
2a06:93c0::/29
Signature Algorithm: sha256WithRSAEncryption
1a:a7:b5:f5:ab:4e:ed:f8:46:68:ea:f8:a0:e1:28:3b:9b:4b:
06:7d:ad:5a:47:64:d4:77:12:13:96:3c:8a:b8:a7:ec:87:66:
68:a9:9e:6b:6a:5f:d8:01:f5:12:d9:a7:c5:1e:c6:b1:ae:fe:
4f:d8:80:af:b5:c2:fa:11:fe:63:40:49:4b:94:91:cd:96:99:
b2:07:ca:a3:a6:db:9d:eb:9c:bc:77:9f:1d:9d:f9:05:7f:81:
d2:f2:b9:88:bf:86:7c:4b:d5:01:f1:07:94:8d:1d:06:a0:c0:
31:2b:1b:84:8e:0b:53:11:35:44:b5:68:f5:b2:10:3d:fe:a7:
93:5a:f4:96:3a:a8:f8:f5:2c:a5:13:ed:25:bf:ad:15:02:e9:
4d:ea:d2:6d:0f:11:3c:87:66:a3:4c:aa:2e:73:dd:61:18:fe:
44:b0:33:b0:1f:f1:51:94:4a:93:6a:3b:aa:e2:48:9d:04:9a:
6c:5e:7c:42:87:21:ab:72:84:ec:bc:6f:56:da:c2:8a:31:2e:
ab:4d:f2:82:96:0c:c4:3d:6b:21:6d:3a:91:b4:e4:6f:39:e5:
15:34:91:f0:62:8e:10:fd:28:d7:46:b7:f9:39:bc:64:2f:4f:
ad:d4:ca:23:95:68:a7:bc:f6:02:de:2f:ff:c4:9c:ce:11:37:
35:43:29:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:31:35 2024 by rpki-client on console-fra.rpki-client.org