Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/e080b6-4e09-42d8-b91c-b2798c1a0327/1/usW27IssjqZTbD3FSIHkFvw8FFg.roa
File: usW27IssjqZTbD3FSIHkFvw8FFg.roa (raw, json)
Hash identifier: 0jRYdFqE//hXD5cMqMMYjIV4A2Ygc3a/7TG075V5BlY=
Subject key identifier: BA:C5:B6:EC:8B:2C:8E:A6:53:6C:3D:C5:48:81:E4:16:FC:3C:14:58
Certificate issuer: /CN=4f2112cbf6dcc8dd3444e4eced284457310f70d2
Certificate serial: 01891B0289B06EC2094DA2DC6A4F89DE6AA3
Authority key identifier: 4F:21:12:CB:F6:DC:C8:DD:34:44:E4:EC:ED:28:44:57:31:0F:70:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TyESy_bcyN00ROTs7ShEVzEPcNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/e080b6-4e09-42d8-b91c-b2798c1a0327/1/usW27IssjqZTbD3FSIHkFvw8FFg.roa
Signing time: Mon 03 Jul 2023 09:08:18 +0000
ROA not before: Mon 03 Jul 2023 09:08:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205975
IP address blocks: 212.46.58.0/24 maxlen: 24
176.10.0.0/20 maxlen: 20
80.79.48.0/20 maxlen: 20
147.189.155.0/24 maxlen: 24
2a12:f40::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:1b:02:89:b0:6e:c2:09:4d:a2:dc:6a:4f:89:de:6a:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f2112cbf6dcc8dd3444e4eced284457310f70d2
Validity
Not Before: Jul 3 09:08:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bac5b6ec8b2c8ea6536c3dc54881e416fc3c1458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:9d:97:43:94:06:5e:b3:16:c0:30:b0:01:b0:
74:6c:1b:d5:9f:39:eb:e9:cb:74:68:ea:31:c3:1c:
15:0a:10:18:2f:dd:ee:f2:5c:39:17:0f:4c:d5:e2:
1b:f6:59:99:f6:b4:14:93:0b:1c:18:6b:49:ba:a3:
ad:17:0f:c5:46:2f:15:ab:f6:e4:ad:47:70:16:71:
8d:05:cd:1b:1b:2d:1e:05:54:cb:67:46:0c:cb:7e:
1b:8d:31:76:82:9b:80:c4:97:2c:4f:3c:bc:89:76:
b0:05:20:79:43:a0:02:41:27:58:7b:07:c6:5c:0f:
02:85:57:30:6b:19:3e:d2:49:71:92:65:34:f8:a3:
46:de:58:ee:66:02:5e:01:47:e5:9c:73:32:1d:f3:
1a:03:6a:de:6f:09:62:3e:e0:26:85:c4:dc:c6:d3:
be:7c:09:a4:52:18:dd:66:7d:36:47:b7:fc:99:48:
c9:83:a9:12:c1:10:d3:5e:19:68:e7:e6:28:61:bc:
11:5b:ca:f2:e9:c5:01:04:4e:38:d4:c0:a6:12:3f:
5b:50:08:54:c6:7e:c6:6b:d6:19:a4:c5:62:02:7e:
15:a0:ee:ef:63:40:bf:4e:97:05:c5:d1:4b:38:16:
07:b9:29:42:0d:40:2e:27:b9:a2:ac:d7:de:6f:82:
7e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C5:B6:EC:8B:2C:8E:A6:53:6C:3D:C5:48:81:E4:16:FC:3C:14:58
X509v3 Authority Key Identifier:
keyid:4F:21:12:CB:F6:DC:C8:DD:34:44:E4:EC:ED:28:44:57:31:0F:70:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TyESy_bcyN00ROTs7ShEVzEPcNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e080b6-4e09-42d8-b91c-b2798c1a0327/1/usW27IssjqZTbD3FSIHkFvw8FFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e080b6-4e09-42d8-b91c-b2798c1a0327/1/TyESy_bcyN00ROTs7ShEVzEPcNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.79.48.0/20
147.189.155.0/24
176.10.0.0/20
212.46.58.0/24
IPv6:
2a12:f40::/29
Signature Algorithm: sha256WithRSAEncryption
a0:0a:44:21:85:a3:7c:31:9f:cd:84:71:8d:ab:e2:b6:37:10:
6d:67:77:8f:d5:61:f2:47:e2:14:34:37:25:96:88:c7:65:3c:
73:48:aa:8f:8c:65:78:ab:d3:01:54:b2:ea:13:79:58:68:b9:
04:0f:4e:ba:d2:3d:b6:35:38:6d:c5:87:e4:e3:db:54:42:70:
e9:69:66:86:50:5a:fa:e9:31:80:81:75:1b:33:a7:f9:82:6c:
2a:28:40:b7:a9:8d:b8:6f:33:a8:20:52:ab:93:f1:82:61:79:
ca:32:8c:e2:95:ad:d3:f9:1f:ef:be:89:a0:f4:e4:75:03:9e:
43:e1:01:c2:68:63:52:2d:85:c7:88:4e:16:3f:85:1d:eb:11:
a4:7f:bb:a8:b5:4b:22:6c:f5:ce:ae:10:17:53:dc:07:59:3a:
34:ba:b3:33:8c:35:75:13:3f:33:b4:ce:ea:1e:35:e6:52:b4:
26:0a:5a:3e:ca:05:aa:b0:b3:fe:93:d0:7e:e6:d9:76:74:76:
2f:79:14:31:2a:57:0a:89:18:40:ce:37:43:1b:73:c8:c9:b5:
a5:ec:e8:fd:45:ea:29:34:f0:d0:10:45:1e:a7:7a:67:94:7b:
69:1e:95:e7:f5:9e:39:a1:a2:86:7e:fe:86:60:05:1a:f0:7a:
46:d2:80:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:46 2023 by rpki-client on console-ams.rpki-client.org