Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/z7LUG6QkisU9Ix9A0iDnuJnPsk0.roa
File: z7LUG6QkisU9Ix9A0iDnuJnPsk0.roa (raw, json)
Hash identifier: OWeJiauHskEpMLXPRfMyc3d7aJy2MMTul7GCJry+zAM=
Subject key identifier: CF:B2:D4:1B:A4:24:8A:C5:3D:23:1F:40:D2:20:E7:B8:99:CF:B2:4D
Certificate issuer: /CN=5a43e9e267956e7f262c17f0089f0f60ba7abefb
Certificate serial: 018BD6B43AD24241B8F23E58F16E18659075
Authority key identifier: 5A:43:E9:E2:67:95:6E:7F:26:2C:17:F0:08:9F:0F:60:BA:7A:BE:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/z7LUG6QkisU9Ix9A0iDnuJnPsk0.roa
Signing time: Thu 16 Nov 2023 05:56:57 +0000
ROA not before: Thu 16 Nov 2023 05:56:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58250
IP address blocks: 86.60.127.0/24 maxlen: 24
212.93.203.0/24 maxlen: 24
86.60.32.0/19 maxlen: 19
86.60.56.0/21 maxlen: 21
2a02:df4::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d6:b4:3a:d2:42:41:b8:f2:3e:58:f1:6e:18:65:90:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a43e9e267956e7f262c17f0089f0f60ba7abefb
Validity
Not Before: Nov 16 05:56:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cfb2d41ba4248ac53d231f40d220e7b899cfb24d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a3:bc:d8:ef:40:3b:58:4b:9b:5f:59:e9:4a:
f8:a4:c7:09:6e:67:4c:43:5d:17:fa:14:a5:6a:ed:
56:5e:7c:ec:03:7f:07:e0:97:89:58:a4:1b:dc:19:
ee:93:de:bf:3d:a4:1b:5e:a5:f2:3f:05:67:39:45:
6d:51:92:54:a7:fc:f3:75:2f:95:29:51:31:34:93:
41:9a:8c:2d:c2:c2:f6:fc:8c:bc:b3:b6:35:14:6b:
2a:7c:ff:f1:14:17:11:b3:cf:19:be:9f:55:60:dd:
43:ee:49:d5:f9:34:89:a3:6c:38:d4:30:8b:15:95:
a8:68:ca:c8:e2:d9:ad:55:fb:09:fd:1f:99:34:f0:
67:51:2c:0b:ec:6e:cf:c5:72:b1:04:07:5e:e1:5b:
a4:75:51:65:a7:a3:a5:3f:5d:5c:37:2a:c2:b8:1e:
a7:5b:d0:75:3c:c9:d5:19:d8:01:a6:7c:f2:4a:01:
f0:3b:90:d1:2c:97:98:7d:48:5b:4b:dc:be:22:19:
57:ea:33:e2:f5:16:45:83:10:65:4c:2d:53:a8:b7:
78:e4:4b:6b:9b:24:ad:46:af:58:eb:28:26:db:09:
90:72:2f:bb:33:3e:8f:a0:c5:19:fb:09:48:a5:bf:
ed:6b:23:e5:5c:60:4f:5a:eb:04:6a:2b:cd:0e:dc:
e0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B2:D4:1B:A4:24:8A:C5:3D:23:1F:40:D2:20:E7:B8:99:CF:B2:4D
X509v3 Authority Key Identifier:
keyid:5A:43:E9:E2:67:95:6E:7F:26:2C:17:F0:08:9F:0F:60:BA:7A:BE:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/z7LUG6QkisU9Ix9A0iDnuJnPsk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.60.32.0/19
86.60.127.0/24
212.93.203.0/24
IPv6:
2a02:df4::/32
Signature Algorithm: sha256WithRSAEncryption
73:66:bc:17:93:78:82:2e:58:f6:5f:09:3e:1c:e1:d8:a8:aa:
96:fe:2b:ed:54:33:04:97:84:72:c4:33:3b:18:63:37:62:0e:
79:35:96:7b:bf:b0:05:f4:96:e6:6d:f2:c5:37:14:01:14:5f:
6e:a0:12:7b:23:b6:40:c3:82:6b:58:4e:db:3d:1c:8c:9e:46:
69:60:4c:a1:51:91:60:ab:3b:23:86:48:4c:e0:69:e7:ab:33:
c9:ea:eb:31:de:e8:97:50:59:df:0d:3f:22:59:b3:89:06:3f:
d2:7a:b4:d1:7e:d1:e5:09:04:c8:7c:25:bb:a5:5f:10:75:9c:
6a:62:16:a8:cb:e9:61:6c:20:0f:de:95:81:bb:d4:2a:e2:e2:
59:5e:9b:fe:cb:cc:e2:2f:b4:69:7f:af:7a:3a:2c:3b:92:45:
67:4f:e2:0c:fd:e2:29:a7:0a:80:7a:e6:9f:0a:80:42:59:33:
e1:e4:00:97:33:0a:39:19:c1:87:77:36:05:a5:92:c6:c3:dc:
3e:2e:a7:f1:dd:ea:26:97:a9:20:c8:6a:57:ff:c0:e7:92:64:
84:30:bd:9f:28:92:94:6b:6e:cc:b8:bf:ef:81:55:3a:d9:70:
8b:11:b6:5a:cb:c4:4f:d3:5c:4a:c7:fa:a4:14:9d:86:01:c6:
50:1b:e2:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 16 07:08:46 2023 by rpki-client on console-fra.rpki-client.org