Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/aYEjvjWNw_KNkHoU-Uf1ZUN7QI8.roa
File: aYEjvjWNw_KNkHoU-Uf1ZUN7QI8.roa (raw, json)
Hash identifier: ZAPUkyftDSwQeNMCQ2oSuanGC47YVmd1SBrjvF2/cKI=
Subject key identifier: 69:81:23:BE:35:8D:C3:F2:8D:90:7A:14:F9:47:F5:65:43:7B:40:8F
Certificate issuer: /CN=abdc402cd535fc9123ea026c62ae9cf0f80e9418
Certificate serial: 01856C81430B46ECDFEE15115ABBDD7F1D82
Authority key identifier: AB:DC:40:2C:D5:35:FC:91:23:EA:02:6C:62:AE:9C:F0:F8:0E:94:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9xALNU1_JEj6gJsYq6c8PgOlBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/aYEjvjWNw_KNkHoU-Uf1ZUN7QI8.roa
Signing time: Sun 01 Jan 2023 08:44:48 +0000
ROA not before: Sun 01 Jan 2023 08:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13101
IP address blocks: 62.93.0.0/19 maxlen: 19
185.119.72.0/22 maxlen: 22
2a06:9040::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:81:43:0b:46:ec:df:ee:15:11:5a:bb:dd:7f:1d:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdc402cd535fc9123ea026c62ae9cf0f80e9418
Validity
Not Before: Jan 1 08:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=698123be358dc3f28d907a14f947f565437b408f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8c:29:ba:68:02:b2:ab:9c:19:4c:0c:f2:0a:
20:3a:be:fa:23:55:d3:42:7e:12:a2:45:df:cf:71:
00:e4:ac:02:7b:ee:a9:08:f5:54:be:cf:63:5e:8f:
b7:3e:29:77:74:d3:e7:85:b6:e4:bf:3f:90:4b:71:
4a:79:d7:83:1e:ff:8b:19:53:11:47:b6:18:0d:2d:
d7:d3:d9:a5:cf:5a:f7:7b:24:7e:74:73:39:98:7a:
93:36:57:ae:44:4b:b0:eb:ec:56:a2:d5:a7:af:f1:
23:b6:06:bc:00:18:38:1a:83:44:c9:51:68:bd:65:
3c:23:19:5e:77:dc:4f:c0:78:f3:eb:d2:9b:09:6b:
9d:bd:4c:5f:7e:6f:29:b9:36:75:38:1d:99:c3:17:
bc:10:28:bf:d5:2a:c9:6f:d9:8e:94:73:6c:95:40:
cc:6c:43:a6:2b:96:7e:40:cd:dd:34:ca:95:82:ab:
6e:9d:e3:37:47:90:81:3e:a4:1b:39:b0:d0:fe:f8:
c2:d8:53:0f:64:fb:e2:ad:31:14:a5:11:e8:57:53:
b9:97:e9:4f:48:05:b1:c5:89:8b:b8:04:a2:39:ab:
5c:72:4b:2a:6d:9d:ce:80:2e:08:47:b2:65:60:74:
a7:c7:e2:30:7b:79:a4:d3:95:da:26:41:99:bf:c8:
55:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:81:23:BE:35:8D:C3:F2:8D:90:7A:14:F9:47:F5:65:43:7B:40:8F
X509v3 Authority Key Identifier:
keyid:AB:DC:40:2C:D5:35:FC:91:23:EA:02:6C:62:AE:9C:F0:F8:0E:94:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9xALNU1_JEj6gJsYq6c8PgOlBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/aYEjvjWNw_KNkHoU-Uf1ZUN7QI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.93.0.0/19
185.119.72.0/22
IPv6:
2a06:9040::/29
Signature Algorithm: sha256WithRSAEncryption
17:a2:33:04:95:9d:3f:d6:53:62:e2:79:ba:87:e7:ce:cb:85:
30:a1:eb:02:21:e0:b9:df:8c:f3:db:bb:59:4a:3c:c2:22:99:
d9:f7:2d:30:9b:b5:e6:8b:56:34:6c:3f:04:db:4d:3b:00:0b:
73:c7:78:87:62:32:8b:45:28:58:13:8c:31:eb:3f:95:65:ae:
2e:47:65:a0:20:97:c5:74:23:47:40:36:f7:77:12:36:39:99:
bd:b4:92:42:80:02:72:87:a0:85:e7:2d:62:0e:eb:59:90:cf:
6f:e3:be:82:a1:9c:41:c2:e3:94:1b:2a:89:d8:e5:5f:08:09:
61:16:d4:1e:a2:e8:01:f0:4e:c9:c2:89:6b:00:cd:dc:7d:2d:
eb:42:5e:37:20:aa:f4:56:5b:6a:06:07:62:c1:8c:08:73:04:
d2:05:d3:9f:fa:5c:62:0c:40:7a:ec:34:cc:f2:51:c7:a5:cb:
be:5c:46:ab:06:e6:68:78:bb:82:38:8e:9f:48:39:9c:9c:15:
7d:ca:db:46:a3:e3:bd:e9:d5:2c:fc:d4:de:55:93:c9:e3:bd:
c8:78:c3:37:ea:5f:18:06:d5:c9:55:5f:b1:03:b1:83:6b:b0:
6a:3d:09:3d:05:38:e3:7d:06:92:11:e2:a3:42:7c:89:c0:46:
59:bb:95:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:14:14 2024 by rpki-client on console.sobornost.net