Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/0161bc-2b85-4b49-830b-7ee2fd43d902/1/XLAqb-osVZfuxRuzdJhLjhuThHg.roa
File: XLAqb-osVZfuxRuzdJhLjhuThHg.roa (raw, json)
Hash identifier: /qCwqEirKPKazAPjv9I6KZ3WF2xgZiSY1aT54chNh/I=
Subject key identifier: 5C:B0:2A:6F:EA:2C:55:97:EE:C5:1B:B3:74:98:4B:8E:1B:93:84:78
Certificate issuer: /CN=4cd25482a7d739913551e1de151bfecc417f8770
Certificate serial: 018570026DCE449C2AF26A904829B02FBD35
Authority key identifier: 4C:D2:54:82:A7:D7:39:91:35:51:E1:DE:15:1B:FE:CC:41:7F:87:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TNJUgqfXOZE1UeHeFRv-zEF_h3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/0161bc-2b85-4b49-830b-7ee2fd43d902/1/XLAqb-osVZfuxRuzdJhLjhuThHg.roa
Signing time: Mon 02 Jan 2023 01:04:45 +0000
ROA not before: Mon 02 Jan 2023 01:04:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44078
IP address blocks: 79.135.216.0/22 maxlen: 22
46.37.192.0/19 maxlen: 19
79.135.220.0/22 maxlen: 22
79.135.192.0/19 maxlen: 19
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:6d:ce:44:9c:2a:f2:6a:90:48:29:b0:2f:bd:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cd25482a7d739913551e1de151bfecc417f8770
Validity
Not Before: Jan 2 01:04:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5cb02a6fea2c5597eec51bb374984b8e1b938478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:eb:e8:42:1c:f8:e4:77:77:63:bc:31:98:e6:
03:b8:68:fe:5c:35:7e:8c:ec:15:78:2e:11:c9:aa:
42:c6:50:73:ca:57:f8:31:6b:a2:02:d5:13:86:83:
59:07:e0:ff:af:52:8b:0f:22:66:32:e3:ae:2d:c7:
85:d4:fb:e6:e4:53:6d:8f:74:ce:22:12:76:17:37:
6d:62:8e:a1:97:4d:cf:2b:cc:ca:8a:1e:d1:c0:53:
3a:53:8c:c6:21:67:d6:df:fa:29:b9:73:d8:b0:b6:
d5:6b:8c:6d:2e:3c:1c:a6:4e:d2:d8:70:9a:dd:0c:
38:a6:60:01:ce:8f:3f:02:b5:8e:4c:b7:b4:0d:e9:
c1:54:a9:eb:3b:d8:64:13:fd:b3:78:e8:8d:dd:af:
13:08:d9:cc:9c:d6:c0:be:22:73:26:dc:fe:60:91:
77:30:88:5c:3c:0a:9a:07:26:66:1f:79:15:50:66:
6d:34:a1:77:1a:96:77:62:63:96:9e:86:7e:6b:73:
2b:82:46:a8:25:73:ad:20:64:1f:ec:b1:c8:69:d9:
7c:91:65:95:cf:72:0d:f0:40:29:62:25:b7:1c:50:
ef:cd:34:b0:78:c3:f6:ba:f7:42:01:fd:8b:5b:20:
94:6d:1f:68:18:54:0b:4d:5a:48:5a:e9:19:08:23:
c4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B0:2A:6F:EA:2C:55:97:EE:C5:1B:B3:74:98:4B:8E:1B:93:84:78
X509v3 Authority Key Identifier:
keyid:4C:D2:54:82:A7:D7:39:91:35:51:E1:DE:15:1B:FE:CC:41:7F:87:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNJUgqfXOZE1UeHeFRv-zEF_h3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0161bc-2b85-4b49-830b-7ee2fd43d902/1/XLAqb-osVZfuxRuzdJhLjhuThHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0161bc-2b85-4b49-830b-7ee2fd43d902/1/TNJUgqfXOZE1UeHeFRv-zEF_h3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.192.0/19
79.135.192.0/19
Signature Algorithm: sha256WithRSAEncryption
5d:b4:da:70:a8:e7:62:47:e9:3c:83:03:6f:bb:6d:e4:28:aa:
49:23:69:17:e9:12:92:63:e2:88:1a:c7:11:6e:33:09:eb:88:
ff:00:ba:eb:a3:ae:79:a6:53:7e:0a:e3:cd:08:e8:d5:cd:27:
37:63:55:e0:aa:28:f0:ba:dc:b8:91:f5:8a:5f:26:ec:f2:da:
e3:e6:c3:d8:51:0d:21:df:06:93:35:2e:6c:e8:43:c7:54:3f:
6e:92:2e:9e:ba:40:a5:aa:24:7c:97:13:4d:f4:06:b9:e1:14:
44:e8:23:0a:ea:62:73:1b:d9:f5:bd:bf:00:1a:ec:e7:83:50:
a5:c7:2d:dd:50:42:50:28:b3:7b:f1:94:80:3e:37:06:1d:5d:
37:41:21:1d:7d:58:4a:0d:3e:ef:c2:c9:05:f4:80:c2:b3:7a:
a2:ad:98:f9:80:a6:23:c9:c9:8b:1d:43:42:a8:8c:70:e1:3a:
be:f7:fd:7c:50:a1:ec:ae:88:2e:d3:f4:3b:f9:54:11:25:73:
9c:51:a8:de:4b:d9:be:b8:21:e4:c7:a3:f4:51:b7:7c:07:1d:
c7:c9:01:17:62:e9:90:ee:61:8d:18:a5:85:b9:a6:b8:b6:b2:
e7:b7:75:4a:18:55:28:50:47:d6:bd:0b:bf:a7:27:6d:79:52:
e2:f9:70:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:46 2024 by rpki-client on console-ams.rpki-client.org