Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/dXbjqU68wkv9KIBvlSfsMIv-j9s.roa
File: dXbjqU68wkv9KIBvlSfsMIv-j9s.roa (raw, json)
Hash identifier: lSPraa14cBLiYrah+4fNwO1pY573CAepHatokomkcp4=
Subject key identifier: 75:76:E3:A9:4E:BC:C2:4B:FD:28:80:6F:95:27:EC:30:8B:FE:8F:DB
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01856CCAE471C3F618CC750D31CE358EEF6B
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/dXbjqU68wkv9KIBvlSfsMIv-j9s.roa
Signing time: Sun 01 Jan 2023 10:05:13 +0000
ROA not before: Sun 01 Jan 2023 10:05:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39326
IP address blocks: 194.71.107.0/24 maxlen: 24
192.121.112.0/24 maxlen: 24
192.121.113.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:e4:71:c3:f6:18:cc:75:0d:31:ce:35:8e:ef:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 10:05:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7576e3a94ebcc24bfd28806f9527ec308bfe8fdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cf:5e:1b:d2:22:af:32:a4:15:83:2f:f8:48:
ab:d8:d9:8f:7b:c9:36:cb:0b:32:2c:53:a4:4c:47:
30:62:e8:cc:13:37:af:f8:5d:db:a8:75:4f:54:27:
ae:6c:f8:b3:65:6c:69:0f:57:ae:89:94:23:32:ff:
d8:90:5b:4b:9c:1b:e4:fb:86:92:4e:4e:cb:96:60:
07:2c:0a:22:15:4f:ac:ab:35:58:02:60:69:95:66:
6e:59:51:ba:33:cd:31:d6:30:7a:f0:e4:eb:04:6c:
2b:61:90:b2:4f:da:5d:4e:cc:e0:af:4a:3e:b2:5a:
75:45:19:12:62:72:d0:54:bd:db:fa:01:8b:d4:34:
ca:47:ce:bd:0d:c9:55:d6:b9:24:ec:16:a9:a2:f0:
a4:b4:89:c0:56:22:12:db:28:7c:b8:09:96:4b:73:
5c:7b:06:e4:83:3e:c4:95:46:42:df:02:d4:98:eb:
87:e9:0d:88:70:e9:ce:70:36:0f:37:29:f0:4c:5e:
75:ce:2b:26:b8:b0:bc:da:09:42:18:31:73:de:a5:
0d:08:c8:a8:85:c1:d5:51:80:9a:8e:00:1f:89:d8:
11:8e:d4:b6:82:de:03:99:f0:e4:12:12:6e:5d:d3:
a3:19:6f:87:10:01:e1:67:85:ba:f4:44:3c:2e:7b:
38:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:76:E3:A9:4E:BC:C2:4B:FD:28:80:6F:95:27:EC:30:8B:FE:8F:DB
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/dXbjqU68wkv9KIBvlSfsMIv-j9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.121.112.0/23
194.71.107.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:6e:23:a4:05:15:c9:cf:14:91:bb:50:b5:ab:a7:62:e6:31:
be:c5:c4:ac:91:da:97:af:5f:ec:33:6a:61:ac:80:67:de:5f:
38:67:6f:6b:f4:d9:39:40:b0:5e:91:43:ad:c5:c5:43:f6:48:
06:f3:2f:ef:fa:80:01:b5:ba:69:dd:16:06:f5:0e:1a:2d:0d:
9e:79:02:f0:d4:08:b7:88:6e:4f:ce:05:9e:25:91:d6:74:30:
68:d3:96:ba:0d:e9:27:cc:d6:cc:65:78:57:c8:d7:97:63:b8:
fc:86:4b:90:1e:33:a4:0d:e5:ee:ac:21:3d:db:61:0a:88:e8:
dc:51:46:94:d0:2b:00:ec:a5:fb:a3:98:ba:82:67:0e:e3:9e:
8f:8a:87:f1:b1:6c:9f:65:8a:46:12:53:17:25:98:0c:29:7a:
ae:5d:cf:65:0c:6b:0f:ec:41:5c:7e:ce:79:50:39:69:1e:f0:
ce:89:fa:a0:79:35:8d:d4:82:2b:e1:73:da:18:12:be:79:07:
7f:b9:0b:d3:9b:97:3f:51:a2:76:f6:75:62:94:70:c5:e7:03:
a6:8f:85:eb:1b:73:db:34:66:7f:0a:65:b2:ad:8c:ad:31:8d:
1a:49:fb:a0:a1:22:05:d6:13:4f:d3:7a:78:e7:90:77:64:af:
3c:98:f3:21
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVsyuRxw/YYzHUNMc41ju9rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjMwMTAxMTAwNTEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NTc2ZTNhOTRlYmNjMjRiZmQyODgwNmY5NTI3ZWMzMDhiZmU4ZmRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv89eG9IirzKkFYMv+Eir2NmPe8k2
ywsyLFOkTEcwYujMEzev+F3bqHVPVCeubPizZWxpD1euiZQjMv/YkFtLnBvk+4aS
Tk7LlmAHLAoiFU+sqzVYAmBplWZuWVG6M80x1jB68OTrBGwrYZCyT9pdTszgr0o+
slp1RRkSYnLQVL3b+gGL1DTKR869DclV1rkk7BapovCktInAViIS2yh8uAmWS3Nc
ewbkgz7ElUZC3wLUmOuH6Q2IcOnOcDYPNynwTF51zismuLC82glCGDFz3qUNCMio
hcHVUYCajgAfidgRjtS2gt4DmfDkEhJuXdOjGW+HEAHhZ4W69EQ8Lns4rQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHV246lOvMJL/SiAb5Un7DCL/o/bMB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvZFhianFVNjh3a3Y5S0lCdmxTZnNNSXYtajlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwHlwAwQA
wkdrMA0GCSqGSIb3DQEBCwUAA4IBAQB9biOkBRXJzxSRu1C1q6di5jG+xcSskdqX
r1/sM2phrIBn3l84Z29r9Nk5QLBekUOtxcVD9kgG8y/v+oABtbpp3RYG9Q4aLQ2e
eQLw1Ai3iG5PzgWeJZHWdDBo05a6DeknzNbMZXhXyNeXY7j8hkuQHjOkDeXurCE9
22EKiOjcUUaU0CsA7KX7o5i6gmcO456PiofxsWyfZYpGElMXJZgMKXquXc9lDGsP
7EFcfs55UDlpHvDOifqgeTWN1IIr4XPaGBK+eQd/uQvTm5c/UaJ29nVilHDF5wOm
j4XrG3PbNGZ/CmWyrYytMY0aSfugoSIF1hNP03p455B3ZK88mPMh
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:47 2023 by rpki-client on console-fra.rpki-client.org