Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/di9LZYDnskjGg_V0ypdqxDR_lhQ.roa
File: di9LZYDnskjGg_V0ypdqxDR_lhQ.roa (raw, json)
Hash identifier: ZUrl7vKwqXMIEWseqN9St2cHSPJaOC31XhZb9350Oow=
Subject key identifier: 76:2F:4B:65:80:E7:B2:48:C6:83:F5:74:CA:97:6A:C4:34:7F:96:14
Certificate issuer: /CN=f7806ac35f2eac02cca046d650fb22befee68d43
Certificate serial: 018570429E9895A9F9F4811B6E93127CFF81
Authority key identifier: F7:80:6A:C3:5F:2E:AC:02:CC:A0:46:D6:50:FB:22:BE:FE:E6:8D:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/94Bqw18urALMoEbWUPsivv7mjUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/di9LZYDnskjGg_V0ypdqxDR_lhQ.roa
Signing time: Mon 02 Jan 2023 02:14:52 +0000
ROA not before: Mon 02 Jan 2023 02:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35472
IP address blocks: 193.218.44.0/22 maxlen: 22
193.218.48.0/20 maxlen: 20
193.218.64.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:42:9e:98:95:a9:f9:f4:81:1b:6e:93:12:7c:ff:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7806ac35f2eac02cca046d650fb22befee68d43
Validity
Not Before: Jan 2 02:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=762f4b6580e7b248c683f574ca976ac4347f9614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e2:6e:de:ba:03:08:6d:ed:24:5e:42:8d:dd:
b0:82:d5:bb:56:57:eb:ab:99:72:1b:91:36:c2:8a:
25:c3:9c:38:ba:6c:18:8c:bc:c9:02:5a:4f:88:53:
d4:63:a6:55:10:1e:9f:be:6d:d1:0d:88:aa:24:4f:
11:99:f5:09:2c:f2:bf:8b:17:1d:97:0f:5e:10:73:
57:78:5f:ec:7a:ed:52:b9:53:55:6d:0f:89:97:71:
97:2a:da:90:35:55:72:5b:db:2d:63:5d:a5:62:a7:
f8:0d:3d:1d:da:ab:1a:05:90:36:40:cf:0e:96:04:
ef:22:60:d5:8b:5d:b3:b0:4d:0a:aa:1e:06:53:4a:
07:c5:9e:8a:9e:5a:23:f9:17:42:33:a9:98:be:ac:
f2:4d:6a:c6:2f:b0:f7:bc:15:59:05:96:8a:d8:66:
4f:76:7c:69:d5:79:9e:25:b8:22:43:ea:df:7e:38:
f4:02:71:e5:cb:fb:4b:fe:ef:80:46:c4:7d:fc:99:
51:e9:c1:4e:36:51:78:b6:e2:e8:58:74:23:e6:95:
65:6b:de:23:7d:0e:b9:00:40:fa:7d:dc:49:c4:ac:
6c:70:39:20:88:e7:25:78:67:28:31:b7:25:cf:6d:
83:c4:0a:e7:ba:06:e2:70:a1:db:ea:84:c4:35:47:
43:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:2F:4B:65:80:E7:B2:48:C6:83:F5:74:CA:97:6A:C4:34:7F:96:14
X509v3 Authority Key Identifier:
keyid:F7:80:6A:C3:5F:2E:AC:02:CC:A0:46:D6:50:FB:22:BE:FE:E6:8D:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94Bqw18urALMoEbWUPsivv7mjUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/di9LZYDnskjGg_V0ypdqxDR_lhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.218.44.0-193.218.71.255
Signature Algorithm: sha256WithRSAEncryption
40:6c:81:10:78:c2:4e:73:a8:51:3b:cf:4e:c7:74:61:90:c1:
0e:7a:28:66:6d:dc:97:5d:f1:e9:fe:58:a2:de:b7:86:d2:28:
bc:ce:56:74:8c:a0:54:ef:47:db:17:14:b7:31:5c:8d:2f:94:
e7:07:8b:f1:b3:bf:d2:1f:f8:2f:d5:ed:a6:28:b8:aa:d3:50:
b4:e1:17:2b:25:ac:75:6c:06:c8:cc:b1:91:7c:56:6c:e2:55:
0d:1c:c4:99:10:21:75:42:1b:be:fe:a6:fc:dd:a4:fd:e1:af:
c2:b3:4b:0d:3b:e5:84:9f:18:bb:8b:31:36:da:7a:03:47:df:
b2:f0:dd:cc:97:ae:de:65:b6:e0:8d:0e:dc:49:ad:de:0d:67:
4d:c1:fc:66:37:b6:62:b9:1c:6e:bb:3a:84:a8:c8:7e:72:b4:
63:d6:8c:32:1e:3d:79:70:13:0f:c4:68:b3:92:7c:9d:3b:d4:
6d:9a:19:05:41:e6:1c:c6:a4:1a:24:cb:72:20:3a:02:c6:08:
58:e8:35:7a:42:74:7b:a8:cd:93:f3:98:b8:9e:f0:d9:30:a1:
4c:e6:dd:72:96:6c:51:60:67:ad:cc:7a:76:9e:e6:3f:19:f1:
55:db:2c:b0:e1:81:36:b3:02:5e:81:f1:2e:2d:38:34:2b:68:
b4:07:4d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:33:18 2024 by rpki-client on console-ams.rpki-client.org