Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/_ac3ljRG_n_sf6kMMWiIxbu0iXE.roa
File: _ac3ljRG_n_sf6kMMWiIxbu0iXE.roa (raw, json)
Hash identifier: ndCBFhiwQEppl6Gxcv6LMeL7bczgzKzFfbo+C1nA0N8=
Subject key identifier: FD:A7:37:96:34:46:FE:7F:EC:7F:A9:0C:31:68:88:C5:BB:B4:89:71
Certificate issuer: /CN=60dad95ba2b1eb3dd7738002fc68aa95588c3bf1
Certificate serial: 01856EA6A3A33A8A40E568CCD8B7866226C1
Authority key identifier: 60:DA:D9:5B:A2:B1:EB:3D:D7:73:80:02:FC:68:AA:95:58:8C:3B:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/_ac3ljRG_n_sf6kMMWiIxbu0iXE.roa
Signing time: Sun 01 Jan 2023 18:44:52 +0000
ROA not before: Sun 01 Jan 2023 18:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25820
IP address blocks: 212.50.224.0/19 maxlen: 24
185.239.68.0/22 maxlen: 24
178.157.48.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:a6:a3:a3:3a:8a:40:e5:68:cc:d8:b7:86:62:26:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60dad95ba2b1eb3dd7738002fc68aa95588c3bf1
Validity
Not Before: Jan 1 18:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fda737963446fe7fec7fa90c316888c5bbb48971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8a:8d:e9:d6:c1:30:5a:c7:70:ea:be:bc:3c:
f1:70:ae:5b:87:09:48:69:17:78:e7:0f:0e:0c:2e:
f4:bf:97:3e:99:31:5c:b5:20:1c:53:77:3c:9c:88:
03:db:41:92:e3:a9:74:76:09:b2:63:1c:0c:83:7b:
28:93:5a:2f:1b:28:e0:db:f4:56:a3:05:cb:bb:48:
8e:f3:9c:60:7a:b9:d6:e4:ac:f1:35:9e:69:5b:92:
60:0b:5b:93:3b:4d:84:b2:a1:6b:25:e3:0f:ff:a2:
c0:21:db:f7:31:c9:5a:da:76:26:74:6b:33:33:9f:
06:f1:a3:e4:89:ff:c9:31:ff:c7:2c:c6:a4:c5:da:
79:b6:ec:76:9c:6c:2b:a2:bf:62:f5:a2:40:97:7a:
17:ed:30:77:b5:4b:81:6a:68:73:00:75:09:35:c1:
e1:36:7a:ab:12:a4:61:89:42:f1:af:2b:4b:d9:0c:
33:d0:f7:a0:f3:e5:92:fb:a6:6c:ed:86:2f:91:ad:
70:5e:07:eb:87:f1:a2:f2:5e:ff:bc:b9:04:48:cc:
e3:ec:ca:43:38:ba:cf:4c:b3:28:3a:bf:b9:08:b4:
a6:26:c5:c1:17:ef:4c:f4:5b:5b:1e:d3:52:02:14:
2b:5b:8e:f1:b8:d5:b1:7e:cd:10:90:ca:65:d4:16:
d2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A7:37:96:34:46:FE:7F:EC:7F:A9:0C:31:68:88:C5:BB:B4:89:71
X509v3 Authority Key Identifier:
keyid:60:DA:D9:5B:A2:B1:EB:3D:D7:73:80:02:FC:68:AA:95:58:8C:3B:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/_ac3ljRG_n_sf6kMMWiIxbu0iXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.157.48.0/20
185.239.68.0/22
212.50.224.0/19
Signature Algorithm: sha256WithRSAEncryption
7e:ab:a1:de:72:95:1a:ad:67:34:96:f6:25:c2:95:54:11:db:
a9:78:02:e4:81:e8:a1:25:6b:37:a9:b8:b1:8e:8e:05:4c:03:
9e:5a:46:53:7d:78:cd:c2:c9:90:9e:c3:e1:7d:cd:fd:b5:b7:
da:cf:4f:6d:90:ae:69:06:4e:a7:55:74:b4:d8:49:e5:4d:5d:
bf:9c:fa:eb:1a:4b:8f:0f:90:c6:1d:62:b9:b5:cb:29:4f:84:
6f:07:7f:3e:7b:2a:2f:46:f0:1e:eb:f8:cb:ac:b3:53:dd:f4:
87:9f:11:65:95:ee:70:bb:73:47:ee:80:27:56:f8:ff:ba:77:
96:d9:b7:b0:e8:e5:e2:cf:49:b9:63:92:df:09:3e:72:6f:a2:
ff:d8:91:6c:ad:91:4c:98:f2:fe:62:86:c2:10:27:a9:86:2a:
fe:67:06:27:02:1f:67:30:40:9a:3c:d2:f7:72:ad:cf:27:80:
b0:46:1e:0b:df:a6:79:0a:87:29:48:c8:18:d5:24:e0:e6:91:
b7:8a:ce:5e:ad:98:d2:fd:33:64:79:f9:b0:35:e0:22:88:bb:
fb:bf:6e:c2:9a:46:4c:22:16:76:92:b3:ce:e8:78:59:51:3a:
89:68:2d:04:b7:ac:f4:f9:12:99:02:47:06:68:1f:21:f4:f8:
31:aa:4c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:16:59 2024 by rpki-client on console-ams.rpki-client.org