Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/T5oFZKvNK3ZlcrtReZprjectbgw.roa
File: T5oFZKvNK3ZlcrtReZprjectbgw.roa (raw, json)
Hash identifier: URgkui+NpKDTmhJORJ2PYR05Har8CTosNOxn4vEuzUg=
Subject key identifier: 4F:9A:05:64:AB:CD:2B:76:65:72:BB:51:79:9A:6B:8D:E7:2D:6E:0C
Certificate issuer: /CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32
Certificate serial: 018572CCA723A8F088D4725D18A9B07D390C
Authority key identifier: A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/T5oFZKvNK3ZlcrtReZprjectbgw.roa
Signing time: Mon 02 Jan 2023 14:04:52 +0000
ROA not before: Mon 02 Jan 2023 14:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41983
IP address blocks: 93.159.224.0/23 maxlen: 23
93.159.227.0/24 maxlen: 24
91.103.64.0/21 maxlen: 21
77.74.180.0/22 maxlen: 22
2a03:2480::/33 maxlen: 33
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:cc:a7:23:a8:f0:88:d4:72:5d:18:a9:b0:7d:39:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32
Validity
Not Before: Jan 2 14:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f9a0564abcd2b766572bb51799a6b8de72d6e0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:4f:5b:7d:1d:14:e0:ae:e0:1a:1a:d1:fa:fd:
7b:dc:33:75:1d:f0:04:66:d6:22:3b:7e:f1:d7:75:
de:db:6d:a6:11:18:e1:b3:4d:6f:49:5c:be:6e:e0:
cf:96:c8:3b:37:a6:c6:44:9b:61:3b:10:bd:96:e2:
25:68:ab:b9:12:2c:09:73:85:52:5b:10:25:5d:65:
9d:35:43:ab:cf:70:81:fc:d4:41:57:45:87:a0:48:
3c:45:ca:a5:a5:53:6a:f4:42:01:37:9b:4e:c4:f4:
05:f2:96:01:ae:b0:40:eb:76:82:e2:d2:b5:23:c6:
fd:25:3a:65:55:c8:12:ee:a8:a3:97:3d:21:ec:cc:
5d:b7:b7:1f:d5:4a:93:da:ed:20:6f:35:64:24:c8:
87:4f:99:55:f1:7a:08:cd:e2:de:c7:85:65:12:f2:
58:66:64:cb:7e:6f:72:d2:e7:1c:08:dc:a3:8c:ae:
2b:86:34:6e:57:c9:7d:5e:8c:c3:67:e9:03:69:e2:
f8:ae:9f:f8:c0:3e:4e:46:b8:f0:c2:43:25:aa:5c:
02:57:87:37:9e:ce:ae:2b:41:3f:e7:47:f8:b9:88:
d8:3f:4e:46:c1:e6:85:aa:af:11:d4:7c:1f:ee:b7:
60:18:0e:ae:31:c1:d1:67:a1:28:ad:cd:bd:35:38:
29:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:9A:05:64:AB:CD:2B:76:65:72:BB:51:79:9A:6B:8D:E7:2D:6E:0C
X509v3 Authority Key Identifier:
keyid:A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/T5oFZKvNK3ZlcrtReZprjectbgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.74.180.0/22
91.103.64.0/21
93.159.224.0/23
93.159.227.0/24
IPv6:
2a03:2480::/33
Signature Algorithm: sha256WithRSAEncryption
58:45:22:d8:73:45:ec:26:2a:22:70:d0:95:f8:96:93:60:f7:
ba:61:e6:96:34:89:22:d8:87:6f:d4:4c:c7:e1:fc:64:1e:5c:
ca:10:dc:a6:70:46:2b:85:eb:c2:95:d5:ad:81:11:be:b4:f3:
5e:73:cd:07:ee:48:d7:0d:b1:e5:67:80:8e:9d:09:2d:2e:53:
7a:bf:87:d0:85:15:93:6e:d7:38:54:7b:c8:b9:a2:e8:1a:15:
d2:36:ac:51:39:bd:f9:90:af:5c:3a:f7:e7:93:84:e5:fa:5e:
bc:3c:72:99:91:07:d4:70:23:41:f2:78:2c:6d:29:e8:e6:2a:
64:c7:62:f0:6b:39:86:94:7c:a1:e3:23:09:1f:79:b0:49:13:
34:16:24:c5:39:c1:fc:0f:53:cd:22:bb:56:9c:77:61:e5:84:
60:f9:cf:77:ae:8b:14:68:d5:24:e1:91:12:68:5f:93:c1:f7:
55:f3:47:0b:0c:c0:a7:0b:00:fa:74:43:08:9c:04:3c:61:a6:
41:ac:02:63:71:2a:f0:33:2b:f2:49:bf:49:3a:67:ff:de:78:
a5:84:f8:25:69:1d:7a:de:8b:98:a3:fe:e2:c3:c6:c2:c5:05:
e0:94:b7:15:96:46:76:69:44:d2:55:f8:b4:c4:7f:70:7c:1a:
7d:17:08:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:14:22 2024 by rpki-client on console.sobornost.net