Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/oM7X5ghuMDH0zmaElp6-v5iCy3s.roa
File: oM7X5ghuMDH0zmaElp6-v5iCy3s.roa (raw, json)
Hash identifier: dm19vPL8TLEnVZvsYqYFoX2eSy/SYmHEiT3YzMpWPBs=
Subject key identifier: A0:CE:D7:E6:08:6E:30:31:F4:CE:66:84:96:9E:BE:BF:98:82:CB:7B
Certificate issuer: /CN=47119a205683167925b9f04174312637b1600c07
Certificate serial: 01856D0AE4F137C6598608A44BC8494D3988
Authority key identifier: 47:11:9A:20:56:83:16:79:25:B9:F0:41:74:31:26:37:B1:60:0C:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/oM7X5ghuMDH0zmaElp6-v5iCy3s.roa
Signing time: Sun 01 Jan 2023 11:15:08 +0000
ROA not before: Sun 01 Jan 2023 11:15:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15600
IP address blocks: 185.74.124.0/22 maxlen: 24
5.144.0.0/19 maxlen: 24
2a00:d4a0::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:e4:f1:37:c6:59:86:08:a4:4b:c8:49:4d:39:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47119a205683167925b9f04174312637b1600c07
Validity
Not Before: Jan 1 11:15:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a0ced7e6086e3031f4ce6684969ebebf9882cb7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:55:02:eb:8a:ec:7b:38:c6:57:93:f2:c1:df:
3c:5a:08:c9:b1:81:c4:fb:61:2b:2a:e9:5e:7f:d3:
ed:a3:b0:db:87:d7:e3:e4:ad:b0:0d:66:f7:d9:3d:
09:23:97:fd:5d:79:30:de:ca:54:9e:55:a1:be:ad:
5b:51:47:7e:a3:a8:c4:4e:6e:60:90:84:8b:e8:35:
2d:52:0f:bd:a5:bf:7a:23:03:74:67:c7:38:ac:03:
b6:1b:7e:c8:20:e7:6d:37:a7:33:86:29:5b:eb:af:
8a:f9:b0:eb:4a:91:62:27:e0:a0:a2:28:7f:4d:06:
b2:4d:68:13:78:0a:9f:a2:89:be:38:96:2c:d2:fb:
fb:56:53:5b:7f:1d:dc:10:1c:04:f5:fc:51:18:66:
1b:35:45:32:cc:e3:9c:8c:29:83:6f:4c:ca:cd:05:
18:e6:94:64:ae:38:c6:15:3f:17:25:08:d7:eb:26:
fb:35:7a:2d:83:8d:6c:fd:b3:b8:90:89:3c:c3:0e:
2e:c9:be:89:97:7a:92:f4:75:c3:3f:b6:aa:d3:be:
67:9f:b0:ea:9b:df:c8:2c:96:ec:5c:7c:e5:be:15:
89:87:d9:dc:45:22:e3:3e:5e:79:8e:3b:6f:36:60:
45:d6:6f:55:78:d6:41:07:6c:4d:a8:af:0f:f2:c5:
87:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:CE:D7:E6:08:6E:30:31:F4:CE:66:84:96:9E:BE:BF:98:82:CB:7B
X509v3 Authority Key Identifier:
keyid:47:11:9A:20:56:83:16:79:25:B9:F0:41:74:31:26:37:B1:60:0C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/oM7X5ghuMDH0zmaElp6-v5iCy3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.144.0.0/19
185.74.124.0/22
IPv6:
2a00:d4a0::/29
Signature Algorithm: sha256WithRSAEncryption
a9:77:54:57:09:d0:2f:86:82:b3:92:d1:d5:4f:f6:47:7e:ef:
8d:33:7d:cc:cf:c8:c6:bb:d9:99:75:77:c0:b4:86:4c:2f:1f:
12:78:32:1b:95:0c:65:41:8d:8d:c7:bf:50:ea:4a:9e:7c:cb:
4f:94:07:fb:9d:6c:da:62:46:62:df:e3:bc:89:f1:46:b1:50:
01:37:04:33:9c:3b:8a:44:f1:5c:21:4a:e2:e7:d5:8c:9c:fd:
6b:dc:d3:81:1b:32:9f:f3:27:7d:07:07:96:9b:6e:84:3a:74:
72:ba:9e:96:f8:4f:3a:1a:1c:f4:47:59:18:e7:83:69:c1:25:
e7:da:52:a6:f2:0c:0b:09:de:df:84:ef:d7:d4:7b:95:bf:7f:
11:b9:b3:7b:be:dd:fc:08:ee:80:bc:19:b3:0d:8f:17:1e:06:
ba:75:f5:ab:6d:f4:1a:f7:cc:9f:59:d4:f5:5d:51:d3:7c:15:
a1:eb:92:e4:9d:4a:c8:ed:85:f0:bc:60:8c:c2:98:ac:0d:8b:
6f:c0:67:85:c6:29:a6:37:9a:3a:42:82:02:4c:a8:92:f0:fe:
7c:b4:ed:7e:aa:93:93:40:4e:07:aa:a8:07:b1:98:9a:b6:25:
98:6c:45:30:02:e3:dc:61:75:71:25:d7:df:9c:f5:eb:0f:51:
61:87:cb:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:17:10 2024 by rpki-client on console-ams.rpki-client.org