Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/jFvpsr4-H5-6HDJP_l8bCxxGygg.roa
File: jFvpsr4-H5-6HDJP_l8bCxxGygg.roa (raw, json)
Hash identifier: 3sGLwEHJpyb85FTcdz96409uacrDd9tgf2r0qS7jFzI=
Subject key identifier: 8C:5B:E9:B2:BE:3E:1F:9F:BA:1C:32:4F:FE:5F:1B:0B:1C:46:CA:08
Certificate issuer: /CN=c25cb7132c19f7d51f002ed4ad811aecf5b20f57
Certificate serial: 018AADCEDDDAB3D496CE7350E65CE467044A
Authority key identifier: C2:5C:B7:13:2C:19:F7:D5:1F:00:2E:D4:AD:81:1A:EC:F5:B2:0F:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wly3EywZ99UfAC7UrYEa7PWyD1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/jFvpsr4-H5-6HDJP_l8bCxxGygg.roa
Signing time: Tue 19 Sep 2023 14:18:50 +0000
ROA not before: Tue 19 Sep 2023 14:18:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3245
IP address blocks: 193.68.0.0/19 maxlen: 19
193.68.128.0/17 maxlen: 17
185.143.80.0/22 maxlen: 22
193.68.96.0/19 maxlen: 19
2a02:6a80::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ad:ce:dd:da:b3:d4:96:ce:73:50:e6:5c:e4:67:04:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c25cb7132c19f7d51f002ed4ad811aecf5b20f57
Validity
Not Before: Sep 19 14:18:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c5be9b2be3e1f9fba1c324ffe5f1b0b1c46ca08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4d:3f:97:4d:b8:5c:7f:2c:0f:0a:12:01:20:
48:b8:79:d4:08:dd:67:bb:0d:d8:f1:cd:4e:36:a1:
68:16:2a:4a:f8:a8:34:12:b2:57:d5:6f:86:59:fa:
d6:70:f6:db:6b:f5:9e:b9:c9:dd:8c:e0:33:5a:5f:
fc:b0:32:d7:1e:3b:b3:f1:05:d8:9f:48:15:c1:37:
e1:fe:97:1f:ea:e0:8f:80:75:e4:f4:30:13:50:a8:
bb:cf:bc:91:7a:4b:c9:0f:fa:d4:ea:dd:18:cb:a5:
69:50:ac:d0:20:82:6c:40:b7:db:af:41:14:14:07:
a2:ab:3f:2c:10:ca:e9:2c:a9:93:76:7d:c0:74:d7:
60:33:e2:dd:1e:f1:cf:5e:1e:ca:5f:3c:13:50:16:
1f:a7:a0:9a:0b:4b:9a:63:1d:40:4b:5b:be:41:12:
c0:37:fe:c1:4a:98:93:c9:43:1b:e0:57:83:c0:da:
85:66:20:66:f3:cd:8d:07:5d:25:46:d5:81:7d:1e:
3e:85:01:ef:3b:2c:d7:7b:4c:3d:8f:b3:f9:6e:48:
3d:2c:a0:ee:da:e0:6f:60:4d:80:12:e8:e6:12:81:
b8:9f:94:51:99:54:7b:88:bd:19:49:f0:5e:2a:77:
8c:b7:74:5e:73:13:6b:75:30:9d:97:35:8d:14:2b:
b7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:5B:E9:B2:BE:3E:1F:9F:BA:1C:32:4F:FE:5F:1B:0B:1C:46:CA:08
X509v3 Authority Key Identifier:
keyid:C2:5C:B7:13:2C:19:F7:D5:1F:00:2E:D4:AD:81:1A:EC:F5:B2:0F:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wly3EywZ99UfAC7UrYEa7PWyD1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/jFvpsr4-H5-6HDJP_l8bCxxGygg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/wly3EywZ99UfAC7UrYEa7PWyD1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.143.80.0/22
193.68.0.0/19
193.68.96.0-193.68.255.255
IPv6:
2a02:6a80::/32
Signature Algorithm: sha256WithRSAEncryption
6b:42:43:f4:bc:18:2a:01:2c:89:cc:68:09:4f:19:d5:25:cf:
fb:c8:39:76:7c:1c:86:fc:c0:e9:32:2b:e2:82:91:c4:fe:7c:
65:d0:83:33:44:50:4c:93:23:85:a8:e2:32:fe:23:36:be:ec:
9a:22:3b:ea:12:44:41:b4:86:30:5b:8f:73:05:3b:86:33:18:
ee:83:fa:f3:8f:99:8c:cc:fb:ec:eb:55:85:7a:07:c1:82:78:
3b:15:98:fc:a0:8c:df:59:58:d5:e0:b9:3a:33:f9:2b:20:93:
5c:2d:db:4c:11:48:e3:4a:74:28:df:17:02:42:88:7f:a2:5b:
d5:29:f7:f2:eb:18:39:5b:4e:c1:a6:7d:e4:26:b8:eb:f9:bc:
97:2c:3c:dc:8d:50:8c:2d:b6:47:05:b0:fb:64:1b:e8:af:b7:
0f:9a:b2:12:c4:d2:6a:49:85:ef:17:cc:e1:bb:a2:f6:a3:ae:
25:f1:a4:f3:73:e7:bd:0e:77:86:62:05:f8:99:55:c1:ae:f6:
5e:ec:bf:e2:0a:41:2e:5f:2e:42:4f:70:aa:1b:ab:c8:7a:18:
d6:b4:85:df:a0:6d:c5:c4:b8:03:4b:36:d8:ae:4f:ce:f6:c3:
0a:bb:51:5d:f7:3f:3e:f8:f1:a9:86:3a:01:28:98:e0:ec:13:
7c:0a:af:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:28 2023 by rpki-client on console.sobornost.net