Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/v2HBOfnFE7J9HpSkIspdmeBxT_Q.roa
File: v2HBOfnFE7J9HpSkIspdmeBxT_Q.roa (raw, json)
Hash identifier: xLNyNyLL2LvqfmjnRG/3q12FWD4GwAWZhJbvSkyw24M=
Subject key identifier: BF:61:C1:39:F9:C5:13:B2:7D:1E:94:A4:22:CA:5D:99:E0:71:4F:F4
Certificate issuer: /CN=ccb0ca2291276d7d2a2f8a7050f4ba827fe910a1
Certificate serial: 01856E6FDDDE2E403A2ACE0344391A28AB1B
Authority key identifier: CC:B0:CA:22:91:27:6D:7D:2A:2F:8A:70:50:F4:BA:82:7F:E9:10:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zLDKIpEnbX0qL4pwUPS6gn_pEKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/v2HBOfnFE7J9HpSkIspdmeBxT_Q.roa
Signing time: Sun 01 Jan 2023 17:45:03 +0000
ROA not before: Sun 01 Jan 2023 17:45:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35754
IP address blocks: 87.254.32.0/19 maxlen: 19
185.247.120.0/22 maxlen: 22
2a03:d500::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:6f:dd:de:2e:40:3a:2a:ce:03:44:39:1a:28:ab:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccb0ca2291276d7d2a2f8a7050f4ba827fe910a1
Validity
Not Before: Jan 1 17:45:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf61c139f9c513b27d1e94a422ca5d99e0714ff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:47:47:2c:7f:d6:6d:21:83:10:1f:73:ce:54:
97:fc:f0:c5:cc:91:39:29:65:7d:b6:75:25:c0:bc:
3f:8c:b4:81:21:8d:b0:a2:bc:2f:96:98:50:f2:3e:
96:1c:64:5f:48:6f:d1:d2:7b:50:84:9d:dd:4c:1d:
4e:4c:24:13:0e:ff:9c:8f:9b:17:3e:7e:d7:dc:50:
ce:7b:23:33:29:1c:4b:1e:85:b4:89:5b:aa:c8:38:
ea:32:41:8d:da:b4:b0:f5:c9:fb:49:a6:2f:9a:fc:
67:6d:6d:be:a5:83:cc:7a:71:a9:64:8e:3f:44:17:
08:c5:23:81:5c:d5:c0:6d:ba:a6:c0:87:02:fb:19:
a2:cd:88:bd:4c:50:c1:84:7f:aa:de:a7:0e:97:2f:
3d:9e:01:df:26:ae:36:0b:c6:ba:58:74:80:bd:b5:
62:42:44:79:28:f0:6b:a2:01:14:80:69:aa:20:e4:
ee:ea:76:59:23:ca:7e:d5:0a:03:70:d8:e5:b6:a9:
b4:60:78:e2:a4:7e:fe:b8:10:57:28:68:6f:ed:d6:
4e:fb:78:32:c8:cd:e3:9e:dc:f4:c4:0b:05:8e:92:
f1:89:ad:e3:8a:9a:41:cd:c7:3d:b0:27:3f:84:69:
05:d8:c0:1e:47:50:2c:86:c1:91:3c:95:f8:1b:7d:
c8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:61:C1:39:F9:C5:13:B2:7D:1E:94:A4:22:CA:5D:99:E0:71:4F:F4
X509v3 Authority Key Identifier:
keyid:CC:B0:CA:22:91:27:6D:7D:2A:2F:8A:70:50:F4:BA:82:7F:E9:10:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zLDKIpEnbX0qL4pwUPS6gn_pEKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/v2HBOfnFE7J9HpSkIspdmeBxT_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.32.0/19
185.247.120.0/22
IPv6:
2a03:d500::/32
Signature Algorithm: sha256WithRSAEncryption
3f:12:1c:c2:79:76:85:ea:49:e1:a9:94:b9:38:67:8d:e0:3f:
7a:76:d8:93:9a:8d:ce:e6:10:37:eb:23:30:2a:9e:78:55:4f:
fe:89:29:73:8b:32:e3:f8:81:cd:d8:e6:8d:f2:2b:01:c9:a9:
c1:52:f6:fc:60:99:0c:28:d6:f9:b3:24:bc:33:6d:b8:ac:22:
7e:c3:42:db:62:f5:ca:93:44:b9:04:32:11:38:dd:af:03:54:
4c:5e:0b:b2:4b:fd:c5:dd:5f:52:a6:8f:13:24:82:8f:4d:b6:
3d:e3:d0:55:01:d8:71:1a:39:29:84:28:0f:2e:e4:78:c6:16:
5a:f0:3e:73:b7:24:db:ec:b0:5e:97:44:8f:7c:c3:24:a5:7c:
bb:96:7a:d9:ea:9a:1e:74:ee:3e:88:fc:09:c4:82:4a:9e:c1:
f5:9b:75:d1:7a:8a:fb:b7:35:d7:bd:26:45:7f:d4:4c:b8:c8:
1d:3a:7d:ab:79:3c:95:61:d3:94:02:26:36:e8:96:0a:b5:f2:
1a:90:f6:d9:15:d1:53:97:22:2e:71:11:f7:6f:33:fc:b0:3e:
7d:ed:b0:29:ee:73:39:a9:29:ef:40:f8:7a:3b:7f:5c:d7:cc:
ea:06:c6:5c:43:84:8b:46:a6:ce:8d:ac:64:b0:ad:7f:9b:c4:
13:28:44:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:14:55 2024 by rpki-client on console-ams.rpki-client.org