Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/tQtUyLNaCobaDGrC39JKo7BhgV4.roa
File: tQtUyLNaCobaDGrC39JKo7BhgV4.roa (raw, json)
Hash identifier: oEdU1R/jfQYbkXM1lp2TXEfHcYkgnd2plnMKER/Mq5M=
Subject key identifier: B5:0B:54:C8:B3:5A:0A:86:DA:0C:6A:C2:DF:D2:4A:A3:B0:61:81:5E
Certificate issuer: /CN=0330d772ba83225bed588ccd1c5c96af03b3770f
Certificate serial: 0186E0963B6FA6388EA51532DA58AB156EF6
Authority key identifier: 03:30:D7:72:BA:83:22:5B:ED:58:8C:CD:1C:5C:96:AF:03:B3:77:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AzDXcrqDIlvtWIzNHFyWrwOzdw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/tQtUyLNaCobaDGrC39JKo7BhgV4.roa
Signing time: Tue 14 Mar 2023 14:46:27 +0000
ROA not before: Tue 14 Mar 2023 14:46:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50920
IP address blocks: 185.64.62.0/23 maxlen: 24
185.64.60.0/24 maxlen: 24
185.64.60.0/22 maxlen: 22
193.28.229.0/24 maxlen: 24
92.39.160.0/22 maxlen: 22
92.39.160.0/20 maxlen: 22
193.151.60.0/22 maxlen: 24
193.28.91.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e0:96:3b:6f:a6:38:8e:a5:15:32:da:58:ab:15:6e:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0330d772ba83225bed588ccd1c5c96af03b3770f
Validity
Not Before: Mar 14 14:46:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b50b54c8b35a0a86da0c6ac2dfd24aa3b061815e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:99:72:03:8f:b7:da:2c:03:9b:70:23:1d:9a:
13:0d:a5:5f:7d:9b:75:af:ca:be:44:d7:99:7d:9c:
db:73:12:ee:5d:e3:b5:86:02:b0:6b:d2:48:1d:0e:
af:65:d1:47:5b:1a:44:18:f7:cb:76:4d:95:d3:d3:
81:a8:14:e0:f2:25:98:33:7d:28:7f:ae:d1:72:b8:
67:91:db:c3:fe:c5:17:db:a3:33:1b:7e:07:32:27:
39:de:26:b0:f3:28:4a:a4:84:15:e2:dd:a0:b4:bc:
5e:6f:92:e3:c3:ab:cb:a5:e3:2c:c8:f2:e5:62:03:
7d:c5:ed:40:ad:10:96:72:f1:bd:19:6d:53:25:3b:
dc:5f:92:f7:7d:b6:61:b4:ae:86:19:00:f6:41:c1:
8b:9c:ed:86:2a:52:13:7a:2f:17:55:79:7f:b5:42:
57:8c:d7:c2:10:8d:75:67:73:8d:0c:05:35:29:e4:
03:e6:8b:9e:64:40:d1:83:52:f8:f4:d1:96:fb:0d:
0d:49:22:65:9f:61:80:56:9f:31:cf:bf:7d:77:a2:
33:c8:9f:6e:8f:b2:6b:08:1b:b7:a8:73:ad:b1:d1:
1f:aa:94:ec:99:b9:d2:1f:3a:23:3a:7e:d8:2d:1c:
09:be:d1:7a:52:ad:1f:36:db:db:dd:0b:84:b7:9a:
99:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:0B:54:C8:B3:5A:0A:86:DA:0C:6A:C2:DF:D2:4A:A3:B0:61:81:5E
X509v3 Authority Key Identifier:
keyid:03:30:D7:72:BA:83:22:5B:ED:58:8C:CD:1C:5C:96:AF:03:B3:77:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AzDXcrqDIlvtWIzNHFyWrwOzdw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/tQtUyLNaCobaDGrC39JKo7BhgV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/AzDXcrqDIlvtWIzNHFyWrwOzdw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.39.160.0/20
185.64.60.0/22
193.28.91.0/24
193.28.229.0/24
193.151.60.0/22
Signature Algorithm: sha256WithRSAEncryption
75:19:56:45:6d:f9:f2:f8:bc:ce:e4:43:cf:2b:96:03:5e:17:
f7:44:5b:64:80:f4:f7:43:f9:b4:ea:10:13:01:8f:d7:40:ff:
36:02:0c:ab:ac:04:41:3b:1b:72:82:a2:40:c1:28:fb:3d:f4:
a5:28:d3:68:13:03:e4:1e:d9:a3:bc:1f:25:64:9b:ea:0e:35:
d7:36:4d:1a:98:ac:ac:2a:d1:c4:58:f6:0c:ac:23:d7:42:ac:
b6:f4:09:82:5b:20:94:a9:c4:6d:e3:92:98:3f:e9:02:db:6d:
da:25:a3:47:66:47:41:bb:e5:3c:99:b6:24:f7:ba:0b:b4:0b:
c3:6a:be:2c:e8:09:b9:4a:fe:08:aa:f8:12:d0:2c:34:70:98:
72:75:29:3d:b4:b2:36:32:9f:25:f8:88:c8:ab:95:98:9b:70:
37:ab:6d:c4:ee:89:39:d0:8e:99:3d:72:d9:2f:a0:67:9e:10:
02:77:27:ed:af:99:44:94:dc:ad:3e:79:2f:ae:c1:bd:c3:03:
38:a1:82:16:12:7c:dd:d2:f4:e2:be:a6:ee:22:a2:38:a8:b0:
24:84:c3:b5:18:20:2f:1f:db:05:30:1b:01:ab:5d:6e:bc:cd:
68:b5:b4:2e:12:d5:28:ab:84:ca:bd:4c:f7:cd:c9:06:3f:19:
57:4f:1a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:54 2024 by rpki-client on console-ams.rpki-client.org