Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/dXI4D7Rrj3UJ-q8GucxvC4WOffs.roa
File: dXI4D7Rrj3UJ-q8GucxvC4WOffs.roa (raw, json)
Hash identifier: siiyN5Htjuanwhr+8AafgWAfIB3gD3OaeVFsvPvQlVA=
Subject key identifier: 75:72:38:0F:B4:6B:8F:75:09:FA:AF:06:B9:CC:6F:0B:85:8E:7D:FB
Certificate issuer: /CN=9b6b7b3ea60efb4a579a4f5e237ea7a88d3bc078
Certificate serial: 018571B0FB042A71997697991CF64B386C60
Authority key identifier: 9B:6B:7B:3E:A6:0E:FB:4A:57:9A:4F:5E:23:7E:A7:A8:8D:3B:C0:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/dXI4D7Rrj3UJ-q8GucxvC4WOffs.roa
Signing time: Mon 02 Jan 2023 08:55:02 +0000
ROA not before: Mon 02 Jan 2023 08:55:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44514
IP address blocks: 46.228.224.0/20 maxlen: 20
217.170.160.0/20 maxlen: 20
212.67.128.0/19 maxlen: 19
91.192.250.0/23 maxlen: 23
2a02:78::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b0:fb:04:2a:71:99:76:97:99:1c:f6:4b:38:6c:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b6b7b3ea60efb4a579a4f5e237ea7a88d3bc078
Validity
Not Before: Jan 2 08:55:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7572380fb46b8f7509faaf06b9cc6f0b858e7dfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a9:4e:25:77:25:40:1b:7f:52:3a:92:f4:f9:
26:28:8e:b3:28:3c:8f:9f:14:04:b7:d1:55:db:20:
53:79:4d:7a:be:04:44:28:44:25:cf:c7:f1:18:14:
0d:6e:c8:69:c1:b5:07:de:fe:76:8b:38:2d:01:27:
d2:47:95:64:77:c5:96:96:3d:a5:07:0d:5c:d9:9c:
47:9e:c3:15:53:03:b2:a2:bd:0a:c0:69:2b:6f:74:
31:b4:61:84:3f:50:09:f5:ad:6b:ae:44:8b:b0:23:
51:ce:97:2f:b2:51:e3:fa:8c:c7:33:2c:9a:6b:1f:
6a:fe:0a:2f:34:26:f3:26:ff:e8:af:e2:f1:de:21:
b2:a8:37:b0:a0:ed:a1:47:44:ac:56:db:3e:17:5e:
f3:71:4b:86:4d:d7:9f:f1:93:c0:92:59:dc:da:fc:
62:cc:d9:e5:fd:b8:89:37:38:6e:f0:e6:5b:7a:5b:
4e:c5:bd:ee:e5:28:9f:45:91:7b:71:26:81:83:ce:
89:b0:7a:24:a2:10:94:6c:e5:2f:e9:11:72:0a:ee:
4d:fc:71:7c:51:91:7b:78:98:15:02:e4:e3:40:5c:
d7:fc:d2:1c:e6:c8:a0:7f:14:cc:bd:57:ec:44:97:
44:b9:e3:34:1f:97:ea:fd:e0:1d:e0:05:34:96:45:
d5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:72:38:0F:B4:6B:8F:75:09:FA:AF:06:B9:CC:6F:0B:85:8E:7D:FB
X509v3 Authority Key Identifier:
keyid:9B:6B:7B:3E:A6:0E:FB:4A:57:9A:4F:5E:23:7E:A7:A8:8D:3B:C0:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/dXI4D7Rrj3UJ-q8GucxvC4WOffs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.228.224.0/20
91.192.250.0/23
212.67.128.0/19
217.170.160.0/20
IPv6:
2a02:78::/32
Signature Algorithm: sha256WithRSAEncryption
2d:da:88:31:7b:36:9a:08:e3:c2:b7:9c:8a:2a:ff:5a:56:fd:
a7:e8:31:46:23:64:73:a4:1e:3f:93:2f:9c:8b:8e:7c:d1:69:
ec:45:98:ee:be:9b:29:f9:27:43:6a:09:5d:4f:6a:c8:9a:d8:
c1:63:e0:f7:e9:2d:e6:d4:a4:0d:c0:7c:f3:d9:9e:18:e6:e9:
8b:35:e5:a8:a1:00:40:39:4a:e4:10:c3:c8:83:ce:c4:19:69:
bd:b3:d7:a7:1b:b0:41:9f:a7:7f:94:19:f9:47:6e:1e:2c:48:
a5:d4:99:47:54:6e:ee:af:a0:63:3a:c2:cd:3d:9e:57:be:bc:
bc:d2:5e:7c:72:01:43:11:ab:3e:be:46:f4:32:55:54:b6:4a:
6c:d7:cf:bb:79:9a:81:b0:32:15:7e:94:17:04:50:0c:11:13:
a5:d7:31:c0:18:47:84:66:32:98:f9:71:fb:1b:50:7c:95:7a:
f4:75:ea:68:19:87:b9:65:83:3f:4b:9a:36:18:be:1a:6b:15:
b0:46:4a:58:c1:8a:0c:45:c4:87:10:00:2e:41:8d:16:25:6b:
9c:3c:e5:d1:cc:4a:a7:49:0d:f5:57:8d:11:bd:75:3c:02:f8:
06:ca:7c:2c:97:c6:c4:9a:98:b5:09:d7:e2:b8:cd:bd:99:eb:
c2:6e:7f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:30:34 2024 by rpki-client on console-ams.rpki-client.org