Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9a3846-85d9-4d94-9eb0-29784d7b68a2/1/pslyi5jKc_MnIvRSSGxj8uIhIII.roa
File: pslyi5jKc_MnIvRSSGxj8uIhIII.roa (raw, json)
Hash identifier: cgKQ+fPF1i7EkbWrp+0a/9p9sk1gLskx0nLkQvXfUr0=
Subject key identifier: A6:C9:72:8B:98:CA:73:F3:27:22:F4:52:48:6C:63:F2:E2:21:20:82
Certificate issuer: /CN=5b70f736a4b0524a476f6f1be2964ae99b64789f
Certificate serial: 018ADBB7245AB415B1880389CBBCB32DD7B9
Authority key identifier: 5B:70:F7:36:A4:B0:52:4A:47:6F:6F:1B:E2:96:4A:E9:9B:64:78:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W3D3NqSwUkpHb28b4pZK6ZtkeJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9a3846-85d9-4d94-9eb0-29784d7b68a2/1/pslyi5jKc_MnIvRSSGxj8uIhIII.roa
Signing time: Thu 28 Sep 2023 12:15:27 +0000
ROA not before: Thu 28 Sep 2023 12:15:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5378
IP address blocks: 83.146.4.0/23 maxlen: 23
83.146.0.0/22 maxlen: 22
83.146.0.0/18 maxlen: 18
87.74.0.0/15 maxlen: 15
212.158.192.0/18 maxlen: 18
87.75.248.0/22 maxlen: 22
84.9.0.0/16 maxlen: 16
87.75.252.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:db:b7:24:5a:b4:15:b1:88:03:89:cb:bc:b3:2d:d7:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b70f736a4b0524a476f6f1be2964ae99b64789f
Validity
Not Before: Sep 28 12:15:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a6c9728b98ca73f32722f452486c63f2e2212082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8a:ad:45:4e:97:e7:25:24:29:e4:c6:d2:a2:
90:bc:ed:df:a1:cf:cf:59:a2:6f:26:1f:5e:63:6a:
97:61:f7:4e:03:cb:c3:d9:2b:1f:d8:24:30:a1:49:
98:02:94:db:c2:ba:1b:3c:92:69:1e:ec:ee:b9:b2:
7e:9d:bb:08:cf:0b:51:6e:c5:89:ba:a9:b5:9b:8f:
bf:09:6d:0e:fe:48:b3:90:33:c2:90:5d:5e:27:9e:
95:a3:20:9b:26:e6:ee:f2:97:73:e7:03:8a:96:d5:
5a:ea:d7:22:ab:d1:cb:68:fc:ef:b1:ab:60:8a:5a:
cf:6d:da:13:49:46:4b:78:3b:e1:a1:f6:b6:14:ed:
91:f6:93:ba:2e:da:ed:e0:c8:b1:bf:c7:41:33:fd:
49:07:69:92:69:e5:2f:8a:13:88:17:28:4f:a8:7c:
6e:7f:7c:a8:fa:18:0e:f6:45:31:41:ad:69:0b:42:
e9:5d:a9:bf:df:8c:d8:d2:c1:6a:0a:0f:b2:91:6a:
a8:05:f8:eb:78:74:12:af:a4:9e:0e:56:9a:95:ea:
5d:5c:f8:b0:bf:1b:96:88:5d:fd:20:c2:b5:69:27:
31:51:69:fd:26:95:08:41:75:b9:1e:d7:32:2f:9f:
c8:d6:80:9f:02:d3:c0:0f:98:9c:eb:21:fe:44:a4:
a2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:C9:72:8B:98:CA:73:F3:27:22:F4:52:48:6C:63:F2:E2:21:20:82
X509v3 Authority Key Identifier:
keyid:5B:70:F7:36:A4:B0:52:4A:47:6F:6F:1B:E2:96:4A:E9:9B:64:78:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W3D3NqSwUkpHb28b4pZK6ZtkeJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9a3846-85d9-4d94-9eb0-29784d7b68a2/1/pslyi5jKc_MnIvRSSGxj8uIhIII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9a3846-85d9-4d94-9eb0-29784d7b68a2/1/W3D3NqSwUkpHb28b4pZK6ZtkeJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.146.0.0/18
84.9.0.0/16
87.74.0.0/15
212.158.192.0/18
Signature Algorithm: sha256WithRSAEncryption
c3:18:c4:c7:04:b0:db:e4:cb:05:7c:9e:bd:4b:87:59:98:c9:
98:d0:49:d8:67:f9:eb:7f:c7:0d:fe:19:f9:0b:6f:cc:35:90:
2d:ba:45:89:da:2c:49:3e:2a:76:7d:50:b3:f9:68:d3:53:00:
12:05:17:99:d3:f4:f6:cd:79:33:52:93:8f:ed:98:10:69:5c:
1d:d4:5c:87:a4:24:d6:55:5d:fd:ce:79:56:25:50:e7:3c:04:
ac:bc:95:b9:aa:63:e4:fe:af:69:50:02:36:65:5f:d5:21:17:
4d:75:53:c4:6f:b9:d2:1d:98:f7:89:5f:0b:72:51:80:1b:45:
9b:25:03:cf:f6:2d:83:50:2a:07:cb:92:a4:9a:cc:b2:d0:46:
c0:b7:28:e6:47:9c:30:8b:7e:e9:26:db:7a:bb:07:c1:b0:b5:
ec:67:e0:ae:c6:db:6c:79:cd:bf:cb:a9:0b:98:d3:04:36:03:
b5:7f:de:85:49:67:9e:3d:a3:2e:d7:22:91:fe:cb:7b:50:05:
bc:4c:58:f9:97:5c:48:e1:db:3f:b6:8b:74:47:cd:94:f1:18:
85:5f:4b:a3:f3:db:56:45:eb:57:18:6c:a9:cf:be:ba:85:2b:
3b:7f:0b:d7:1e:bf:16:39:d7:76:77:32:bc:f7:99:ad:2c:0c:
fb:93:e5:1f
-----BEGIN CERTIFICATE-----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Generated at Mon Oct 2 10:59:41 2023 by rpki-client on console-fra.rpki-client.org