Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/dePaveirrHtYK9L7Uhppa15O1GQ.roa
File: dePaveirrHtYK9L7Uhppa15O1GQ.roa (raw, json)
Hash identifier: Kk3X96fv/yzYWcLYBKMycRpSlJzzenwoIozCjw+hYlY=
Subject key identifier: 75:E3:DA:BD:E8:AB:AC:7B:58:2B:D2:FB:52:1A:69:6B:5E:4E:D4:64
Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial: 01891F50B7CE038F564AB991C3F92CCA615A
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/dePaveirrHtYK9L7Uhppa15O1GQ.roa
Signing time: Tue 04 Jul 2023 05:12:10 +0000
ROA not before: Tue 04 Jul 2023 05:12:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25211
IP address blocks: 109.160.32.0/22 maxlen: 22
87.246.16.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:1f:50:b7:ce:03:8f:56:4a:b9:91:c3:f9:2c:ca:61:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
Validity
Not Before: Jul 4 05:12:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=75e3dabde8abac7b582bd2fb521a696b5e4ed464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5f:c8:64:ef:31:15:48:8c:b1:b1:55:53:12:
16:73:d3:df:c4:ec:e2:6e:a4:d7:19:6c:64:d8:9d:
78:08:1b:6b:66:4c:2e:ee:99:91:25:8d:30:95:d2:
aa:a9:06:0a:2f:54:e0:18:9a:06:39:cb:54:09:62:
fd:d6:11:66:48:44:e0:ae:95:ee:c8:2b:82:0d:1b:
c5:a2:dc:50:ab:a5:cd:c8:aa:f2:15:4e:e5:00:ea:
9d:33:ae:ec:e7:3e:0b:3d:0e:dc:96:a9:1d:5a:3c:
09:ab:f3:e5:20:34:92:b7:26:f0:28:53:ad:0b:f3:
a2:5f:d5:0b:64:c5:d2:d8:d1:6a:59:42:51:fb:00:
08:55:57:0f:57:37:d7:bc:b7:be:7e:c4:3e:20:a7:
1d:ba:cb:02:95:61:e9:8d:70:75:1f:ba:94:62:b4:
3d:5c:30:a8:8d:72:8c:a6:c6:c4:69:4b:c2:38:7a:
c9:35:7f:a7:3e:cd:12:77:6e:3b:6c:af:7d:3e:e9:
c0:ed:a2:90:cd:0e:2c:ff:e7:7b:25:82:21:86:95:
dd:00:94:3d:b1:36:cb:a9:75:cd:c9:7f:41:fe:2c:
15:aa:bc:da:5d:5c:50:09:45:17:54:75:18:2f:dd:
72:c2:05:54:1b:6f:57:cb:09:76:00:4a:dc:54:80:
0a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:E3:DA:BD:E8:AB:AC:7B:58:2B:D2:FB:52:1A:69:6B:5E:4E:D4:64
X509v3 Authority Key Identifier:
keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/dePaveirrHtYK9L7Uhppa15O1GQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.246.16.0/21
109.160.32.0/22
Signature Algorithm: sha256WithRSAEncryption
00:79:e4:dc:a7:2e:3c:95:6e:16:71:1b:50:56:1c:51:73:34:
c3:4d:7d:97:ee:c1:56:c8:74:05:44:ab:79:e8:de:25:3d:19:
9c:29:8b:3a:cf:ed:81:ad:de:b6:63:2c:5b:3b:2a:60:83:22:
9b:22:c4:20:a4:a3:ad:fa:14:10:b6:9c:f9:0e:c1:d6:37:eb:
61:81:6e:b9:1a:e9:11:5c:73:84:70:8b:f3:14:71:ea:d3:c7:
58:cd:25:2c:0d:8d:f2:0d:b0:52:2e:11:e6:fb:09:c6:34:34:
b4:f4:0e:13:b0:46:ee:50:cc:cc:03:4b:f8:5c:c4:fe:df:f3:
c7:8b:84:74:0b:04:62:9a:0e:61:c0:3b:a9:66:d2:75:1a:59:
ec:b3:be:64:40:75:fc:29:e0:eb:e8:13:28:72:0d:3a:7d:8a:
90:fb:49:16:95:75:db:fc:a6:d5:8d:0a:0f:5e:f9:84:da:97:
ca:d1:98:8c:ed:ed:a6:6f:6e:00:97:16:32:bb:a8:ad:e5:ca:
ba:fc:70:e7:15:53:70:f1:d2:db:0b:c2:73:2b:7c:d0:70:83:
d5:c0:06:58:5a:cf:3b:54:66:57:77:04:22:65:b2:77:b0:bb:
06:49:6c:44:77:3f:fb:28:49:e4:cd:18:9f:37:e1:6b:d7:85:
83:a3:14:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:40 2023 by rpki-client on console-fra.rpki-client.org