Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/oT7JtShfH-EvANvV0ZTMEaeFa5Y.roa
File: oT7JtShfH-EvANvV0ZTMEaeFa5Y.roa (raw, json)
Hash identifier: q6LQvx5YAof+hkmTChje0bFgeFq4dA4eI6+R76NoJmg=
Subject key identifier: A1:3E:C9:B5:28:5F:1F:E1:2F:00:DB:D5:D1:94:CC:11:A7:85:6B:96
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 0189202434FCC8C4AC309C3316B8DDC4E822
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/oT7JtShfH-EvANvV0ZTMEaeFa5Y.roa
Signing time: Tue 04 Jul 2023 09:03:10 +0000
ROA not before: Tue 04 Jul 2023 09:03:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208485
IP address blocks: 78.159.131.0/24 maxlen: 24
93.152.206.0/24 maxlen: 24
93.152.209.0/24 maxlen: 24
93.152.217.0/24 maxlen: 24
93.152.215.0/24 maxlen: 24
93.152.225.0/24 maxlen: 24
93.152.221.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:20:24:34:fc:c8:c4:ac:30:9c:33:16:b8:dd:c4:e8:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Jul 4 09:03:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a13ec9b5285f1fe12f00dbd5d194cc11a7856b96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:30:fa:79:e0:11:88:8d:a4:88:33:48:6d:ab:
31:58:6a:73:97:52:6e:b2:2f:91:d9:83:97:f0:d5:
d7:49:72:6b:10:bb:db:2c:e3:22:80:d9:bc:22:57:
17:94:c3:32:11:81:fc:22:dd:08:53:ed:30:ce:27:
a6:75:26:c1:d9:fb:81:92:e9:5b:5f:c9:41:2f:16:
53:e2:1a:eb:dc:60:9a:53:07:b2:89:6c:d3:99:88:
b3:8a:30:fb:ef:e4:c6:1e:e5:5c:17:e2:12:92:46:
da:f8:12:db:05:50:41:18:64:62:01:20:ae:ba:ac:
98:be:eb:44:38:f7:ef:f5:f5:a7:3e:b5:5a:2b:b9:
1b:ca:0f:35:96:41:cf:43:48:0b:16:13:77:cf:7a:
f9:cc:5a:75:2f:31:4a:bf:ff:10:41:ac:af:61:40:
3b:bc:96:4e:df:7d:18:d1:d5:92:18:f4:f5:f7:1d:
79:63:aa:d5:0e:15:80:10:5d:6d:c1:9a:fb:0e:2a:
bd:13:e5:e4:8c:3d:0e:1d:27:74:cf:db:1f:7d:e7:
db:05:3b:bf:d4:3e:fc:d6:26:aa:50:5d:8f:c1:b4:
ca:57:19:0c:e6:38:09:44:67:83:ce:5f:7e:36:d8:
72:9f:4b:96:c9:c4:71:2c:1e:7a:60:9d:04:fd:1a:
98:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:3E:C9:B5:28:5F:1F:E1:2F:00:DB:D5:D1:94:CC:11:A7:85:6B:96
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/oT7JtShfH-EvANvV0ZTMEaeFa5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.159.131.0/24
93.152.206.0/24
93.152.209.0/24
93.152.215.0/24
93.152.217.0/24
93.152.221.0/24
93.152.225.0/24
Signature Algorithm: sha256WithRSAEncryption
11:d8:18:c1:8a:68:07:1b:b2:d5:bc:f9:43:bc:0f:b9:5c:af:
35:8d:a9:99:cd:a4:db:3b:24:8b:6b:c3:06:dd:af:d4:c1:d1:
1f:07:d3:7a:dd:e5:3b:18:0e:29:e1:03:ec:e0:82:33:3f:be:
9f:a9:34:6b:42:20:de:66:4f:53:d8:30:d9:54:f5:e0:19:ca:
35:10:38:fe:fb:12:87:82:0d:0e:64:7d:48:07:cc:36:1b:27:
b2:1b:18:8d:1a:6e:80:d2:c2:d1:3d:ab:fc:ec:08:69:93:cd:
89:7c:bf:a4:80:af:ff:22:1d:18:8b:83:dd:1b:e5:f2:b1:c6:
8f:b5:b8:8a:31:44:42:5f:d3:1f:04:6e:3a:d2:b2:65:89:04:
29:70:6b:a5:03:11:b1:f7:97:a4:b9:75:4c:5a:9a:a1:66:f6:
82:b4:ec:b0:ab:8c:a9:e2:7d:a9:4d:eb:d8:bd:b1:7b:fe:53:
5c:5e:13:d8:9d:3e:b4:b8:46:a8:af:1d:5e:44:ba:15:14:47:
26:98:e4:53:d7:50:d2:b3:55:b1:0a:c4:49:9d:3c:d7:85:35:
a6:5a:84:15:62:30:d7:18:5d:ae:c8:c0:62:95:58:aa:c9:ed:
29:40:a9:f7:76:9a:00:93:40:f7:f4:d0:f0:75:95:ad:67:87:
60:6e:4f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:58 2023 by rpki-client on console-ams.rpki-client.org