Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/H_Gxa79PaWRTW1-3Fpe8QElMk44.roa
File: H_Gxa79PaWRTW1-3Fpe8QElMk44.roa (raw, json)
Hash identifier: Pdi79g5DLSbk+rkNxKjAgMgYelp4NAtmeIyKH35EXtc=
Subject key identifier: 1F:F1:B1:6B:BF:4F:69:64:53:5B:5F:B7:16:97:BC:40:49:4C:93:8E
Certificate issuer: /CN=c66dc60d16dfe1649d86c1693e17858c2306387f
Certificate serial: 01856D540C826D900D94BB09C4B0623D89B1
Authority key identifier: C6:6D:C6:0D:16:DF:E1:64:9D:86:C1:69:3E:17:85:8C:23:06:38:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm3GDRbf4WSdhsFpPheFjCMGOH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/H_Gxa79PaWRTW1-3Fpe8QElMk44.roa
Signing time: Sun 01 Jan 2023 12:35:02 +0000
ROA not before: Sun 01 Jan 2023 12:35:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39371
IP address blocks: 45.129.60.0/22 maxlen: 24
185.99.204.0/22 maxlen: 24
2a0e:44c0::/29 maxlen: 29
2a06:1480::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:54:0c:82:6d:90:0d:94:bb:09:c4:b0:62:3d:89:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66dc60d16dfe1649d86c1693e17858c2306387f
Validity
Not Before: Jan 1 12:35:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1ff1b16bbf4f6964535b5fb71697bc40494c938e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3e:b9:d9:6d:9e:25:40:e3:9e:3a:32:36:c4:
2c:80:25:af:9b:7b:d6:f7:1a:f9:81:15:e2:95:c2:
b1:b6:af:96:4a:20:b8:5d:db:66:60:92:9e:e0:56:
e9:81:9f:5e:f5:b8:1a:ad:0c:27:7b:18:42:a0:de:
dd:39:2c:fe:e2:53:7f:a6:24:e6:97:29:e5:a6:0d:
cf:a4:e3:44:dd:cb:b6:84:8f:c4:b1:9d:f7:54:76:
99:40:6f:f4:cd:e2:08:3f:df:45:12:3d:1a:b9:3d:
29:8a:e4:68:3e:2c:5e:5e:c3:5e:be:89:28:c6:f3:
38:19:40:7c:3d:d8:95:fc:e7:c1:d3:9e:57:b9:a6:
d7:1e:37:c6:c6:05:62:95:61:0b:4f:01:b0:5e:12:
32:a4:f9:7e:f8:ab:fe:e4:32:7c:1e:d3:69:dc:c2:
3f:ca:70:98:07:79:85:20:48:03:b9:62:9c:85:94:
63:95:ef:a4:c1:a1:fc:05:2e:61:c0:71:88:ce:ad:
e6:56:ec:5b:23:56:dc:23:f2:81:7f:76:23:6b:8b:
c1:e7:c4:50:87:b5:32:ed:8c:0e:5c:79:ea:46:eb:
79:17:b7:b9:20:fd:58:72:04:eb:72:b0:ed:d8:07:
fb:8d:74:c8:c6:6d:c9:04:1d:06:1b:db:a8:1e:17:
05:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F1:B1:6B:BF:4F:69:64:53:5B:5F:B7:16:97:BC:40:49:4C:93:8E
X509v3 Authority Key Identifier:
keyid:C6:6D:C6:0D:16:DF:E1:64:9D:86:C1:69:3E:17:85:8C:23:06:38:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm3GDRbf4WSdhsFpPheFjCMGOH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/H_Gxa79PaWRTW1-3Fpe8QElMk44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.60.0/22
185.99.204.0/22
IPv6:
2a06:1480::/29
2a0e:44c0::/29
Signature Algorithm: sha256WithRSAEncryption
10:91:6a:ce:b8:7e:be:d3:33:30:a2:b7:d5:c7:0c:4c:ae:a8:
2d:c9:ac:04:1d:b7:bf:67:93:a7:ed:bb:ee:cb:5c:60:31:7a:
4d:66:0a:9f:f2:65:df:d6:74:a1:24:d7:0a:d3:45:97:11:fd:
cf:61:b8:7c:32:4f:1d:9d:20:a9:bd:80:8b:88:74:b9:d6:b9:
72:bc:61:b4:92:cd:67:ae:e8:fe:a2:ed:12:7c:28:e4:25:3d:
b9:ce:d9:c2:f9:1d:c6:88:41:e5:1e:3d:fb:39:78:55:58:b4:
65:34:78:92:6c:01:85:f9:c8:af:09:74:bd:84:d5:68:b9:26:
30:c8:1e:f5:7b:ef:aa:41:6a:a6:80:47:6d:d9:af:e9:f8:bd:
b6:91:95:8c:9a:68:47:d7:a4:32:cf:54:ee:85:89:8a:34:08:
76:71:f6:a4:7c:02:a3:cb:4d:09:91:12:c5:f3:66:d0:05:2a:
3f:30:a3:e6:1a:e4:79:b1:12:15:99:3b:ad:f3:95:84:e7:0e:
f3:60:eb:08:13:a0:c9:bc:42:fa:bb:7d:3b:1f:d4:8b:aa:b5:
30:a7:4d:7d:6c:20:a1:0f:69:01:e8:19:ff:bf:1e:3a:69:54:
ae:a9:f2:89:aa:a8:5a:37:26:46:a4:bf:4c:83:57:7f:a9:c6:
b2:11:b8:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:22:39 2024 by rpki-client on console-ams.rpki-client.org