Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/0F51SxDB7Ywo88TwPIyX0zLjm-U.roa
File: 0F51SxDB7Ywo88TwPIyX0zLjm-U.roa (raw, json)
Hash identifier: iiDqD5Ls4F3CFqpGkffNzyUAUXJAhmGmMh/UCRfxVcI=
Subject key identifier: D0:5E:75:4B:10:C1:ED:8C:28:F3:C4:F0:3C:8C:97:D3:32:E3:9B:E5
Certificate issuer: /CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Certificate serial: 0186070585D35E987F8671AEC9F8504CBF0F
Authority key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/0F51SxDB7Ywo88TwPIyX0zLjm-U.roa
Signing time: Tue 31 Jan 2023 08:50:47 +0000
ROA not before: Tue 31 Jan 2023 08:50:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3316
IP address blocks: 194.190.138.0/24 maxlen: 24
193.232.85.0/24 maxlen: 24
194.85.105.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:07:05:85:d3:5e:98:7f:86:71:ae:c9:f8:50:4c:bf:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Validity
Not Before: Jan 31 08:50:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d05e754b10c1ed8c28f3c4f03c8c97d332e39be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:79:67:de:2f:a6:96:74:d1:ef:4b:86:f1:86:
3e:c3:18:82:ae:91:17:d4:56:4e:e1:d3:9b:41:29:
c7:57:40:2d:cb:d8:bf:f9:a0:04:e9:d8:d3:bb:a2:
ce:b2:e8:36:14:99:14:8a:9c:56:4b:59:38:7f:4d:
b1:25:69:f4:17:20:b0:16:f2:2d:6d:9c:c5:b3:60:
76:c5:81:fb:86:79:7c:74:cf:ae:89:77:92:5b:38:
df:1a:bd:13:99:29:d6:6c:85:79:9b:49:7b:80:0f:
9f:14:c0:99:d9:1e:b7:80:c4:c3:7c:01:a0:92:e7:
b3:57:ed:0e:19:2b:1c:09:64:72:00:f1:65:4f:65:
6d:42:72:1e:84:ae:69:3d:c4:9b:04:34:98:de:71:
8c:21:f4:95:74:64:cd:2a:68:6b:0f:7c:d6:89:b5:
59:7a:62:f9:8a:a2:af:6c:19:47:e7:b0:33:3b:68:
94:94:bd:5e:1d:5e:56:76:6e:37:5f:02:98:a3:c1:
32:3a:e6:e7:1a:46:72:3a:e6:79:cb:ce:79:46:47:
f8:1a:83:5d:23:30:2e:eb:70:c6:0d:cf:32:7f:e0:
32:2c:63:b6:cf:75:dc:61:cb:22:4c:75:13:24:2c:
cc:11:0c:d9:9e:be:3f:4a:ed:59:bb:b9:48:c5:86:
31:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:5E:75:4B:10:C1:ED:8C:28:F3:C4:F0:3C:8C:97:D3:32:E3:9B:E5
X509v3 Authority Key Identifier:
keyid:EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/0F51SxDB7Ywo88TwPIyX0zLjm-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.232.85.0/24
194.85.105.0/24
194.190.138.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:ee:fe:38:4e:22:73:7f:67:56:6f:31:8e:0e:43:22:69:4d:
9c:c8:20:ac:2e:97:fb:63:ce:a1:2a:9a:09:cd:5f:b9:b8:68:
75:52:85:0f:57:9f:fe:78:3e:5f:e4:aa:fc:9b:a4:41:73:7e:
31:47:8b:a8:65:c2:08:58:53:5a:2b:cc:aa:25:b8:6c:e5:b6:
15:c1:98:d9:cf:a2:50:e2:a3:a0:6e:e2:9b:60:e6:86:71:d5:
e1:6e:59:c9:37:d8:8b:95:49:d0:f8:02:a4:82:78:e8:83:47:
5a:46:32:71:c8:65:61:b6:1a:42:98:03:48:b2:fa:3f:62:56:
e1:76:c8:93:dc:4c:20:5d:42:39:93:15:e4:29:ae:2b:22:e6:
1b:80:de:d1:70:ce:a2:b5:a5:48:87:23:01:b6:29:c1:bf:17:
53:14:15:ca:77:cd:ec:39:a5:b7:cf:66:28:9e:74:2a:b6:f6:
c7:4c:6b:a0:6e:df:b7:e9:f9:30:8e:da:2b:4c:73:9b:da:97:
44:c2:ca:15:e6:00:b9:54:79:b3:a3:43:23:95:81:30:9a:c3:
b2:85:88:0e:32:0f:73:2d:67:00:bd:1a:4c:ad:4f:d1:2e:fb:
1d:18:b3:1b:01:e3:7c:70:fb:3e:1b:33:c1:a3:38:75:91:8e:
68:bb:96:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:50 2023 by rpki-client on console.sobornost.net