Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/oWeI6EZHYYtpBN_TbxX39qWL_b8.roa
File: oWeI6EZHYYtpBN_TbxX39qWL_b8.roa (raw, json)
Hash identifier: n6FjactdnZGZ1Tfr639UP6uDnbMr+EahNyNeMomi3oo=
Subject key identifier: A1:67:88:E8:46:47:61:8B:69:04:DF:D3:6F:15:F7:F6:A5:8B:FD:BF
Certificate issuer: /CN=cbbe3c6d99811819cedddcd27e4be25bc0cf506f
Certificate serial: 0185719546561644C14A0584407AB9A84409
Authority key identifier: CB:BE:3C:6D:99:81:18:19:CE:DD:DC:D2:7E:4B:E2:5B:C0:CF:50:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/oWeI6EZHYYtpBN_TbxX39qWL_b8.roa
Signing time: Mon 02 Jan 2023 08:24:46 +0000
ROA not before: Mon 02 Jan 2023 08:24:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35434
IP address blocks: 188.123.192.0/19 maxlen: 19
193.47.247.0/24 maxlen: 24
217.73.176.0/20 maxlen: 20
185.69.20.0/22 maxlen: 22
93.95.88.0/21 maxlen: 21
2a02:2780::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:46:56:16:44:c1:4a:05:84:40:7a:b9:a8:44:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbbe3c6d99811819cedddcd27e4be25bc0cf506f
Validity
Not Before: Jan 2 08:24:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a16788e84647618b6904dfd36f15f7f6a58bfdbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:53:d8:a5:ef:c4:8e:87:ca:94:b9:8f:6c:e7:
15:8f:15:b8:81:7d:f4:9c:a3:41:0b:77:8d:31:9c:
79:b3:45:67:42:7f:67:1a:d7:f2:80:15:00:8b:69:
e0:58:f1:13:95:54:b3:ed:7a:c7:40:ba:64:b2:8a:
4d:43:43:98:f0:1b:00:0b:84:95:49:15:c5:ee:c7:
97:4a:86:aa:ca:2a:f6:a3:58:59:76:35:bd:fa:b9:
60:f8:fb:0a:fb:68:37:6b:d8:e6:27:26:e6:77:13:
55:53:11:41:db:56:dc:50:60:61:54:ef:7f:0d:b6:
8e:e4:27:fb:2a:4e:6c:17:fd:97:69:59:2b:5e:4a:
00:ba:f2:4c:28:d8:53:8b:44:24:c9:cf:e9:57:f6:
30:0c:1b:b8:94:c9:70:2d:a4:46:ec:0d:64:e4:81:
96:c2:70:eb:f2:e2:89:c2:5a:3b:02:15:03:eb:a7:
5d:57:d4:b8:8d:99:41:30:0d:26:e4:d8:50:23:95:
c2:3b:f8:2d:05:27:b4:a6:34:af:2f:96:be:ab:09:
e7:65:ab:c9:b2:e9:e8:56:0b:f6:b9:83:42:65:63:
cf:a7:e4:c1:46:25:78:42:77:61:17:1f:3e:0d:31:
2a:01:a7:1f:b7:58:da:33:47:c6:79:48:d2:d3:8a:
c7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:67:88:E8:46:47:61:8B:69:04:DF:D3:6F:15:F7:F6:A5:8B:FD:BF
X509v3 Authority Key Identifier:
keyid:CB:BE:3C:6D:99:81:18:19:CE:DD:DC:D2:7E:4B:E2:5B:C0:CF:50:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/oWeI6EZHYYtpBN_TbxX39qWL_b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.88.0/21
185.69.20.0/22
188.123.192.0/19
193.47.247.0/24
217.73.176.0/20
IPv6:
2a02:2780::/32
Signature Algorithm: sha256WithRSAEncryption
3d:11:cb:3b:40:55:0d:aa:86:8d:86:75:3d:64:c0:e9:48:13:
db:a2:20:c3:95:5a:54:20:59:1b:32:33:3c:de:85:73:23:dd:
04:8c:61:4e:3a:01:e6:7e:87:08:17:67:02:a6:47:16:25:ff:
cb:18:d0:a7:19:c6:3f:59:9b:0a:b7:a0:ab:ec:99:4e:d6:30:
85:92:a9:db:f2:16:9f:bb:d5:da:c3:aa:63:04:4b:73:ac:08:
c7:28:f0:e3:5e:4e:1d:49:9f:3b:4c:cd:98:bf:62:46:aa:62:
5f:59:c3:26:b8:69:1d:69:e7:7e:74:77:e1:a0:f6:42:1a:5f:
2d:e1:b7:7b:62:b3:ae:58:0b:6b:de:1d:55:bb:ae:71:d3:db:
6a:e5:07:92:aa:9d:b6:c0:d6:55:eb:5b:01:f6:0e:7d:d3:78:
74:ce:9d:72:3b:2f:77:f1:4c:bd:23:69:92:1f:79:0e:89:34:
f5:5e:07:70:5e:3b:96:b6:20:b2:fc:ba:23:2e:2a:a8:b1:5e:
4b:31:e6:1d:d3:0a:9e:ea:0a:f7:92:af:82:83:b9:58:e2:9c:
c4:ef:8b:36:5e:bf:84:dd:ff:c1:68:2b:c1:7a:e7:07:a8:48:
fe:dd:1c:c6:eb:9b:18:07:67:85:74:92:ba:00:a8:38:db:a4:
73:87:10:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:53:10 2024 by rpki-client on console-fra.rpki-client.org