Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/A5ZkWQdtpFP8dDlhdNrACaUrFdw.roa
File: A5ZkWQdtpFP8dDlhdNrACaUrFdw.roa (raw, json)
Hash identifier: z4my1BtdteRhDq8XhJqt+Jf8eZtoEFsH8xqdszIG16s=
Subject key identifier: 03:96:64:59:07:6D:A4:53:FC:74:39:61:74:DA:C0:09:A5:2B:15:DC
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 01856C54051E2CA56364A2E14D1EA756A741
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/A5ZkWQdtpFP8dDlhdNrACaUrFdw.roa
Signing time: Sun 01 Jan 2023 07:55:23 +0000
ROA not before: Sun 01 Jan 2023 07:55:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 134176
IP address blocks: 85.209.254.0/24 maxlen: 32
185.190.81.0/24 maxlen: 24
185.137.182.0/24 maxlen: 24
79.174.20.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:54:05:1e:2c:a5:63:64:a2:e1:4d:1e:a7:56:a7:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 07:55:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=03966459076da453fc74396174dac009a52b15dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d3:49:28:53:89:a5:29:38:71:9e:c8:70:58:
ad:07:54:90:5a:ca:aa:67:9f:74:16:0a:a2:7f:02:
70:de:1a:35:e6:bc:3b:d2:fe:de:da:1d:59:97:5b:
4a:b1:1f:16:d5:89:8f:df:42:6c:6b:cb:f1:9d:bf:
ea:84:1c:c8:55:81:48:bb:ae:62:69:c7:ea:ba:db:
e0:c2:2a:6b:bc:bf:79:e9:e1:43:67:13:c9:53:f6:
a9:82:e3:20:4b:ba:0e:06:6a:8a:91:8b:c0:19:9f:
09:51:80:5e:08:9d:d6:1a:4a:b8:ac:49:be:a4:17:
2c:a3:00:c1:d7:bc:ca:db:1f:42:24:13:e3:50:de:
07:35:8b:3b:79:c0:e6:e7:b3:8f:7f:42:67:58:5a:
a1:72:45:e5:f7:0e:d3:f3:47:25:ec:1e:05:1f:f9:
14:07:51:0a:e7:8f:37:4c:95:d0:4a:8a:56:4e:bc:
af:bd:d1:c3:34:c9:ed:16:c4:f7:f8:ec:f4:fb:1e:
2a:25:04:aa:a8:8c:79:15:c9:9e:fa:1d:1e:1a:b5:
de:a7:7d:a4:8b:d5:a6:99:d5:82:64:c8:fd:7c:e0:
9e:89:4d:71:5a:ae:98:35:9d:bc:ff:a2:27:46:c4:
6e:08:1e:4d:a1:92:3a:09:87:75:14:69:e0:1d:fc:
3d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:96:64:59:07:6D:A4:53:FC:74:39:61:74:DA:C0:09:A5:2B:15:DC
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/A5ZkWQdtpFP8dDlhdNrACaUrFdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.174.20.0/24
85.209.254.0/24
185.137.182.0/24
185.190.81.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:4a:23:f8:75:c7:65:74:c3:a8:06:fa:94:f8:f4:6a:8f:60:
30:90:81:79:7b:a1:72:8a:d7:c6:51:3d:b1:81:d5:e3:6f:f3:
91:ff:aa:89:cb:c6:aa:e2:0d:3b:d5:b1:d6:bd:e5:75:b8:51:
83:3f:df:38:45:be:c4:ff:d1:15:a5:0c:82:28:80:e7:22:8f:
2e:b7:a7:26:c0:93:e3:c2:58:29:82:ff:e3:d7:e5:ef:e4:03:
c6:98:77:9a:0a:b5:49:da:71:cc:ed:27:38:e9:78:33:55:7f:
2a:ee:1e:5e:36:92:97:f1:79:91:62:8b:8f:57:b8:97:c7:1b:
90:fd:3c:6a:c1:85:8d:c6:87:39:ee:08:dd:7d:f1:bc:ca:b4:
98:17:21:2e:c4:f6:29:a6:ae:9a:85:0b:60:ab:94:28:b0:00:
5c:11:1f:15:6e:80:43:68:1e:fa:db:8c:5a:f5:db:27:ef:a5:
b4:64:fc:12:16:5f:a1:97:46:27:fa:da:b4:b2:13:f7:9f:f3:
90:d7:3c:12:2a:5b:ad:00:01:45:73:ac:b3:03:92:07:d1:44:
3f:4e:ee:7a:83:1f:49:f2:d9:07:57:05:a9:1c:60:18:d2:73:
85:4c:c0:7b:f0:46:c4:3f:a6:9d:46:0c:ed:55:7d:29:55:22:
bc:10:d2:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:09 2023 by rpki-client on console-ams.rpki-client.org