Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/T5CCvaQeC8mzLCW5l1w2rl4bGKE.roa
File: T5CCvaQeC8mzLCW5l1w2rl4bGKE.roa (raw, json)
Hash identifier: UJci5Vt8lIZVDKTUcKOBSyXV0UBfaWjbD5f4QhpSjRc=
Subject key identifier: 4F:90:82:BD:A4:1E:0B:C9:B3:2C:25:B9:97:5C:36:AE:5E:1B:18:A1
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 0187BA5D7C0C73E43D90253199B3DAB6F176
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/T5CCvaQeC8mzLCW5l1w2rl4bGKE.roa
Signing time: Tue 25 Apr 2023 21:41:41 +0000
ROA not before: Tue 25 Apr 2023 21:41:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5089
IP address blocks: 194.88.96.0/21 maxlen: 24
84.234.16.0/20 maxlen: 24
93.113.184.0/21 maxlen: 24
194.88.112.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ba:5d:7c:0c:73:e4:3d:90:25:31:99:b3:da:b6:f1:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Apr 25 21:41:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f9082bda41e0bc9b32c25b9975c36ae5e1b18a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3f:25:c1:b5:3c:23:b6:9e:15:ca:eb:ef:94:
53:ba:ab:80:2b:4b:da:8c:19:58:e7:3f:f7:d2:8f:
d7:bc:ca:8b:07:12:60:1e:35:77:4c:13:a5:e3:bc:
36:5d:f6:32:e5:f3:79:14:7c:2e:4a:b1:a9:09:e7:
07:36:7a:35:a7:28:87:9b:8c:38:a5:76:d3:7e:43:
12:b6:bb:c9:76:2a:53:40:1a:ab:56:d6:2c:2f:b3:
b4:ba:46:06:96:6a:0a:0f:a6:1b:6d:78:8a:5b:af:
9e:2c:9b:00:64:0c:34:f0:fb:0e:62:07:0f:bd:f7:
7c:f7:ec:bb:93:b0:59:fb:20:a4:6e:36:5c:f0:55:
30:fd:33:d0:6e:61:a4:2a:7c:3c:2e:c3:43:e2:a0:
6e:48:b7:45:2e:aa:eb:8e:59:27:e1:40:2d:fc:b0:
9c:15:a5:46:4a:93:f4:2c:8a:ee:eb:db:09:7c:31:
f7:67:59:a2:bc:8c:f4:38:20:4a:02:c1:34:d8:9e:
88:5b:a5:64:f0:ce:cd:80:54:25:6e:fc:59:9d:17:
8a:0b:63:f9:54:37:d6:e4:b4:ad:3f:2d:25:4d:78:
ba:41:90:42:a2:b0:0f:4e:18:b4:5b:e3:5e:d9:42:
9b:7f:b9:fc:82:a6:60:b7:0e:01:0f:67:26:eb:55:
e1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:90:82:BD:A4:1E:0B:C9:B3:2C:25:B9:97:5C:36:AE:5E:1B:18:A1
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/T5CCvaQeC8mzLCW5l1w2rl4bGKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.234.16.0/20
93.113.184.0/21
194.88.96.0/21
194.88.112.0/20
Signature Algorithm: sha256WithRSAEncryption
39:56:d1:9b:d7:5a:9e:7c:2f:f6:28:3f:2a:43:17:b1:33:42:
d5:3f:89:cb:5d:3b:78:9f:63:6a:c8:1f:58:a3:93:10:cd:fd:
ab:e9:40:6d:3e:56:44:28:98:a6:ef:68:e2:51:0c:0a:1f:af:
0c:c4:53:89:aa:8b:6b:18:cf:cc:14:d9:67:04:81:83:5c:8a:
6b:5c:b0:a9:97:24:64:59:d7:94:a5:fa:e3:5e:b0:04:c3:f2:
36:b5:17:02:1a:76:ac:f3:07:9d:ba:92:7a:93:db:b8:60:49:
84:f3:7e:fd:33:1d:95:a6:7b:ae:d9:44:b0:af:e8:b3:a2:1f:
90:1b:9c:b8:6a:a5:14:a9:aa:05:aa:f0:28:a0:c3:34:2a:72:
ee:da:d1:60:ae:71:46:ef:0c:82:dd:66:93:fa:96:9d:2e:50:
cc:9f:8c:94:9c:2e:f0:ea:39:b2:3a:6c:ff:0a:d9:39:0d:a3:
07:18:40:62:5c:d7:01:43:0f:f4:b9:44:61:7d:bc:e8:7f:5e:
8d:3e:ec:12:78:a4:b6:53:16:a3:05:d5:f7:6f:13:cc:91:05:
e8:d0:36:f4:30:43:1c:b7:c0:b8:8e:4d:e5:fa:b3:91:d9:fd:
b3:f8:5a:b9:d5:79:82:26:f8:3a:32:5b:9c:55:c1:d8:75:6d:
b4:9c:00:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 1 09:03:22 2023 by rpki-client on console-ams.rpki-client.org