Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/s7PbJQLmgldYMf1Zl6D9bu-wa7g.roa
File: s7PbJQLmgldYMf1Zl6D9bu-wa7g.roa (raw, json)
Hash identifier: 0wk3/1UqDi/AuWbsaPMUbD9T32/0Kq8BLR21vLIC0lU=
Subject key identifier: B3:B3:DB:25:02:E6:82:57:58:31:FD:59:97:A0:FD:6E:EF:B0:6B:B8
Certificate issuer: /CN=0d7a912569b787d92e5355fffaed581fe50a29c0
Certificate serial: 0185715E5ACEDE2EBB510AC2D1AC991471DA
Authority key identifier: 0D:7A:91:25:69:B7:87:D9:2E:53:55:FF:FA:ED:58:1F:E5:0A:29:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXqRJWm3h9kuU1X_-u1YH-UKKcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/s7PbJQLmgldYMf1Zl6D9bu-wa7g.roa
Signing time: Mon 02 Jan 2023 07:24:46 +0000
ROA not before: Mon 02 Jan 2023 07:24:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43942
IP address blocks: 212.84.55.0/24 maxlen: 24
212.84.54.0/24 maxlen: 24
212.84.52.0/24 maxlen: 24
212.84.53.0/24 maxlen: 24
91.200.130.0/24 maxlen: 24
91.200.129.0/24 maxlen: 24
91.200.131.0/24 maxlen: 24
91.200.128.0/24 maxlen: 24
91.200.128.0/22 maxlen: 22
212.84.48.0/24 maxlen: 24
212.84.48.0/21 maxlen: 21
212.84.50.0/24 maxlen: 24
212.84.49.0/24 maxlen: 24
212.84.51.0/24 maxlen: 24
91.223.155.0/24 maxlen: 24
2a01:4840::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:5e:5a:ce:de:2e:bb:51:0a:c2:d1:ac:99:14:71:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7a912569b787d92e5355fffaed581fe50a29c0
Validity
Not Before: Jan 2 07:24:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b3b3db2502e682575831fd5997a0fd6eefb06bb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2b:aa:2c:23:1f:48:8b:9b:fa:66:ea:d9:a0:
b3:dc:30:1e:2d:bc:f1:e4:12:f2:38:7a:be:7d:2c:
1f:2d:12:18:05:9d:d2:fc:e5:ad:2e:c0:2d:77:31:
7a:60:65:4e:2d:55:e4:0f:6c:02:27:a5:e1:c3:0f:
f9:cb:f8:d8:95:09:73:f0:be:b4:ad:3d:b0:9c:1a:
4f:d1:a2:d6:0d:4e:c5:db:7c:33:d7:aa:42:1e:89:
d5:78:3d:1a:51:9d:a6:11:6c:79:db:26:a5:d6:20:
bc:ea:4a:8d:e6:ab:72:10:b2:3c:d3:15:c7:f5:d3:
f6:57:e1:b8:dc:77:62:6c:b0:7f:57:87:6d:eb:da:
ed:5a:75:49:26:6f:a0:f0:0e:db:d2:58:5a:2c:5b:
84:f5:16:36:03:17:a9:a1:34:96:0c:cd:f2:f9:25:
42:f8:b3:37:ba:86:3d:d6:1b:bd:90:d3:7f:d3:f1:
ac:df:0d:04:d6:a5:ec:00:ab:8d:bd:4a:3f:64:34:
47:24:21:3d:0a:10:ba:50:e1:d6:a8:0e:ec:a0:d8:
07:d3:26:2b:a4:02:77:1e:97:3f:5d:dd:b7:1a:84:
c4:88:ff:19:a0:43:0d:36:84:92:f9:ad:17:07:94:
bb:68:cf:d2:27:7c:1c:6a:c7:62:5f:55:da:c3:2e:
76:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B3:DB:25:02:E6:82:57:58:31:FD:59:97:A0:FD:6E:EF:B0:6B:B8
X509v3 Authority Key Identifier:
keyid:0D:7A:91:25:69:B7:87:D9:2E:53:55:FF:FA:ED:58:1F:E5:0A:29:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXqRJWm3h9kuU1X_-u1YH-UKKcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/s7PbJQLmgldYMf1Zl6D9bu-wa7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.128.0/22
91.223.155.0/24
212.84.48.0/21
IPv6:
2a01:4840::/32
Signature Algorithm: sha256WithRSAEncryption
4d:9f:c1:f4:20:7f:21:a1:54:a4:d0:3a:36:74:8f:7a:4f:38:
89:05:b4:52:21:9a:65:ce:dc:dc:73:0e:32:b8:1c:d2:9f:58:
65:87:c5:dc:22:d1:39:ff:11:97:e1:72:f1:50:c1:37:42:76:
01:19:65:4b:56:aa:9c:6c:cc:dd:ee:f3:b8:7c:d7:d5:72:5e:
ba:9e:c1:ee:44:ba:0b:1f:b6:92:ca:31:41:3c:44:62:12:51:
da:2d:4e:46:1e:41:fd:f7:1f:47:18:20:c9:9a:2a:2d:46:9c:
d0:55:74:48:00:68:ee:5b:dc:88:8c:5d:a9:3f:f9:d1:53:c8:
41:f1:1a:c4:aa:b5:17:0c:86:1f:10:38:fa:10:3a:d8:ad:e6:
6b:50:be:dc:17:67:d9:63:3f:c8:7d:3a:d9:a9:26:46:1a:5f:
ed:52:5c:90:5e:5d:b3:70:07:7d:03:fc:e0:64:5c:2e:f4:61:
0e:88:2f:45:fa:c3:6b:25:85:36:f6:3b:81:a2:e4:a8:cb:1d:
e2:67:a4:d7:01:2f:a6:cc:c7:cd:fb:b2:0f:00:dd:24:25:83:
b7:ca:dc:c1:91:f1:a7:9d:3e:6a:3d:f3:af:3a:15:1a:ed:47:
a9:7f:d4:68:b0:69:74:51:5a:98:ac:15:88:e9:15:ff:0b:54:
66:19:f5:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:43 2024 by rpki-client on console-ams.rpki-client.org