Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/u8Wr6p976-2B9ZjZeUMQlvsAjNc.roa
File: u8Wr6p976-2B9ZjZeUMQlvsAjNc.roa (raw, json)
Hash identifier: h58C04gNg6JY82Fga6JTUb/+hFF7VXoWnbKjxIhpU14=
Subject key identifier: BB:C5:AB:EA:9F:7B:EB:ED:81:F5:98:D9:79:43:10:96:FB:00:8C:D7
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0188FB07CB55057DB5873DBBF29DD15C8B90
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/u8Wr6p976-2B9ZjZeUMQlvsAjNc.roa
Signing time: Tue 27 Jun 2023 04:06:12 +0000
ROA not before: Tue 27 Jun 2023 04:06:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 109.122.42.0/24 maxlen: 24
109.122.46.0/24 maxlen: 24
193.93.52.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:fb:07:cb:55:05:7d:b5:87:3d:bb:f2:9d:d1:5c:8b:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jun 27 04:06:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bbc5abea9f7bebed81f598d979431096fb008cd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:13:f7:04:16:e0:f6:cd:5a:f7:86:3f:e5:9c:
69:28:a6:87:a7:9f:f2:9d:5d:da:ea:36:93:e1:35:
b9:15:46:87:7f:5d:5b:f4:4c:77:9e:70:42:ab:12:
e2:8c:ec:47:5c:52:b6:a2:7a:57:5b:c3:c0:e1:2d:
be:7f:ba:18:23:a2:da:d7:4f:2d:f5:00:55:9f:5b:
54:03:aa:fb:d1:eb:92:26:e6:e9:0e:15:8a:da:07:
81:67:60:af:2e:24:cc:6b:84:92:cb:06:dc:6f:1c:
82:b3:f5:e4:32:b2:14:df:ce:7c:3f:aa:0c:bc:0d:
57:e0:2a:9d:4c:b6:ca:94:74:26:46:2d:4b:91:3c:
31:41:e2:0c:17:19:7a:24:8a:14:fb:e5:28:8d:7e:
92:3b:c1:9b:56:93:8d:9a:5f:7a:48:cd:19:25:3d:
42:27:3c:f9:2b:1b:f8:78:0c:f8:14:7d:3b:7d:91:
5a:78:c6:25:b4:ee:ce:12:37:8a:fa:ce:b1:1b:c8:
ef:59:78:5e:00:8e:78:fe:eb:93:22:58:ee:df:e0:
d0:61:72:d1:07:59:7e:40:4c:f8:5e:29:c2:20:3c:
80:ec:ae:fa:37:27:cf:84:e3:e0:20:f5:a5:3f:f7:
b6:a5:cc:3f:f6:70:f3:85:58:53:25:7d:9b:7b:91:
26:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C5:AB:EA:9F:7B:EB:ED:81:F5:98:D9:79:43:10:96:FB:00:8C:D7
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/u8Wr6p976-2B9ZjZeUMQlvsAjNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.42.0/24
109.122.46.0/24
193.93.52.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:e2:20:15:f6:55:0d:a1:c6:fa:52:3f:e3:79:1e:1f:10:3b:
79:0f:f8:45:01:fa:f7:92:e7:a5:e8:69:6d:4c:42:3e:f2:f9:
2d:a2:8e:60:c4:a1:0c:9f:e2:02:50:f8:b4:a5:7e:15:11:48:
d5:de:83:2d:43:91:8f:dc:ca:0e:4c:e3:58:9b:e3:79:14:2c:
11:fd:02:f5:39:c9:18:29:e5:46:99:01:00:78:ac:f2:aa:8d:
2c:5f:4c:58:f6:0f:dc:86:8e:c3:53:ae:89:43:2c:cd:99:ba:
a9:e7:76:f6:e5:31:b8:88:a0:b5:7c:e2:3e:a8:8b:85:55:39:
44:f3:cf:72:c5:2a:d6:e5:10:aa:8a:8e:47:06:25:c9:09:7d:
5e:a9:02:7a:78:90:d7:21:34:4e:2d:e1:06:de:53:18:36:2f:
1d:06:40:70:eb:ef:93:51:5d:97:51:e9:34:5a:28:ba:eb:de:
5c:af:6d:db:30:61:77:5f:c9:4b:ac:9d:4f:c6:96:fe:25:e6:
94:c6:36:56:74:fa:0d:08:5b:7b:7d:e7:f3:e9:fa:18:75:2e:
f9:7a:6b:a1:7f:c1:84:23:5b:9d:51:ac:11:d9:76:84:1a:f9:
a1:67:e5:19:48:b0:57:47:95:34:97:b5:27:c3:bc:60:fd:9b:
27:4a:48:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:47 2023 by rpki-client on console.sobornost.net