Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/3YiSr-YQzFps75el381TZQU9kRQ.roa
File: 3YiSr-YQzFps75el381TZQU9kRQ.roa (raw, json)
Hash identifier: 7PF3M5Y8n1WvwPzy/4ik0GFp6nX2EY3dAPOsEiDVGTw=
Subject key identifier: DD:88:92:AF:E6:10:CC:5A:6C:EF:97:A5:DF:CD:53:65:05:3D:91:14
Certificate issuer: /CN=e319d0cd65593d969e8d45382a194aaa73c0ff8c
Certificate serial: 01891FF002FAB1C896CA88A1695CACF9C94B
Authority key identifier: E3:19:D0:CD:65:59:3D:96:9E:8D:45:38:2A:19:4A:AA:73:C0:FF:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/3YiSr-YQzFps75el381TZQU9kRQ.roa
Signing time: Tue 04 Jul 2023 08:06:10 +0000
ROA not before: Tue 04 Jul 2023 08:06:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206943
IP address blocks: 185.102.48.0/22 maxlen: 23
31.42.128.0/20 maxlen: 20
178.218.128.0/21 maxlen: 21
178.218.136.0/21 maxlen: 21
31.42.144.0/20 maxlen: 20
178.159.64.0/20 maxlen: 20
185.171.30.0/23 maxlen: 23
185.171.28.0/23 maxlen: 23
185.183.90.0/23 maxlen: 23
185.183.88.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:1f:f0:02:fa:b1:c8:96:ca:88:a1:69:5c:ac:f9:c9:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e319d0cd65593d969e8d45382a194aaa73c0ff8c
Validity
Not Before: Jul 4 08:06:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd8892afe610cc5a6cef97a5dfcd5365053d9114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8b:cb:b9:36:c0:32:ec:80:9e:20:3b:88:5b:
3d:31:23:95:2f:dd:02:83:b6:c0:25:52:97:29:8b:
ad:2f:80:01:35:51:a2:e0:e1:b9:b1:29:2f:d8:10:
11:25:80:11:51:a7:ca:76:d8:73:0b:37:d6:76:5d:
e6:b8:7a:d3:a3:23:17:3d:15:cf:54:5e:4c:42:dd:
d2:37:a9:12:b1:4d:9a:e7:5b:8f:1d:76:5f:45:ac:
f3:5b:48:80:d3:5c:bb:e0:01:60:91:c3:37:38:26:
e8:1f:b6:e4:df:2d:77:4a:07:0c:0b:ae:ef:4c:41:
9a:4f:dd:8b:96:ca:7f:46:73:86:b0:ca:d2:cc:47:
51:86:a9:f9:06:54:bd:dc:ac:99:ff:bb:a7:c9:66:
29:47:62:1a:63:86:99:de:e8:12:d3:0b:ab:72:55:
26:f0:68:00:fc:ac:19:4a:98:cc:48:b8:02:60:48:
5c:7b:37:d3:d9:27:52:24:51:8a:64:25:08:bb:54:
5d:3a:32:84:d5:66:2f:07:f8:71:b7:4f:28:cc:24:
99:f7:43:21:f2:d2:09:67:04:56:62:c9:8d:9a:a4:
5b:5d:7c:66:34:b1:3a:3a:4a:01:33:e5:70:9a:14:
21:a4:e6:d8:50:9b:e8:3e:81:9b:53:db:97:36:71:
97:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:88:92:AF:E6:10:CC:5A:6C:EF:97:A5:DF:CD:53:65:05:3D:91:14
X509v3 Authority Key Identifier:
keyid:E3:19:D0:CD:65:59:3D:96:9E:8D:45:38:2A:19:4A:AA:73:C0:FF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/3YiSr-YQzFps75el381TZQU9kRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.128.0/19
178.159.64.0/20
178.218.128.0/20
185.102.48.0/22
185.171.28.0/22
185.183.88.0/22
Signature Algorithm: sha256WithRSAEncryption
d8:ce:2c:01:a5:b3:5b:b4:a9:90:58:97:65:04:46:4a:7c:a9:
b2:3d:8d:82:13:f2:c5:02:bc:79:b6:7b:de:97:98:4e:3d:1d:
6f:6a:13:b5:93:68:93:93:44:7d:94:53:b0:f2:e1:90:e8:54:
08:3d:8b:bf:e6:f2:dd:e7:d1:21:9c:23:0d:43:6a:c0:78:9a:
98:69:cc:7e:83:e6:29:7a:1a:9d:e2:69:8e:3d:22:50:57:54:
11:d7:bc:3d:af:d7:b2:78:00:80:42:e1:4f:6f:7c:ff:85:50:
6a:fb:3c:59:a2:ce:6a:41:4a:5c:f7:9c:e1:7a:1b:20:70:18:
04:3b:f7:98:23:f7:b9:56:b4:b2:72:ee:a8:11:2f:cb:08:ad:
ac:c8:28:73:48:1d:3d:6d:69:9e:58:65:ce:77:48:10:fe:1e:
c0:ff:bd:b6:6f:b4:f3:56:72:4a:0d:5f:c3:90:56:09:52:fa:
ff:1d:35:0b:e2:ef:43:ca:d0:84:1c:62:76:4a:f6:b0:13:89:
4f:da:1d:16:78:af:4b:6e:c8:32:d8:41:39:b7:27:0a:73:97:
eb:6b:ec:ce:e0:26:ce:c6:26:fc:0b:41:60:7d:b5:fb:45:54:
72:fe:85:99:95:34:5c:28:d4:50:a7:6d:69:8c:d7:42:56:2f:
03:6c:bc:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:41 2024 by rpki-client on console-ams.rpki-client.org