Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/SGlbk_ztz6rcoWF8WXFBkRDb2W4.roa
File: SGlbk_ztz6rcoWF8WXFBkRDb2W4.roa (raw, json)
Hash identifier: CaAN+pODTYObshK4CEwqLFUFGx7OfP9P9Zz9JnZjuV4=
Subject key identifier: 48:69:5B:93:FC:ED:CF:AA:DC:A1:61:7C:59:71:41:91:10:DB:D9:6E
Certificate issuer: /CN=c55a1e4051f68fe8b720e83ddad33b7651cb7ef9
Certificate serial: 01856CC176683C2997C761744624489141B9
Authority key identifier: C5:5A:1E:40:51:F6:8F:E8:B7:20:E8:3D:DA:D3:3B:76:51:CB:7E:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVoeQFH2j-i3IOg92tM7dlHLfvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/SGlbk_ztz6rcoWF8WXFBkRDb2W4.roa
Signing time: Sun 01 Jan 2023 09:54:56 +0000
ROA not before: Sun 01 Jan 2023 09:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44656
IP address blocks: 89.58.96.0/21 maxlen: 21
89.58.64.0/19 maxlen: 19
185.232.40.0/24 maxlen: 24
2a11:fb80::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:c1:76:68:3c:29:97:c7:61:74:46:24:48:91:41:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c55a1e4051f68fe8b720e83ddad33b7651cb7ef9
Validity
Not Before: Jan 1 09:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=48695b93fcedcfaadca1617c5971419110dbd96e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:eb:3b:62:a8:69:e7:a8:14:ce:58:1f:e5:93:
9c:24:61:0b:22:ef:8b:69:4f:e6:cb:82:8b:bc:18:
c6:23:9f:b3:44:57:57:58:4d:03:0b:67:7c:57:fe:
60:8e:6a:07:52:bf:09:3b:bf:80:b1:e1:3e:aa:7e:
21:08:fd:ab:8f:e8:d8:55:a4:d9:20:64:a4:6e:27:
9d:91:52:ec:e2:f7:72:f8:15:4d:5d:27:9e:08:8f:
b1:4f:b5:21:62:d4:67:5b:4d:97:b0:5d:e2:30:04:
8d:b2:de:1c:ad:b4:ca:90:a4:90:12:f6:07:cf:ab:
66:c9:02:6a:19:34:45:8e:48:fd:72:b4:de:bd:6d:
7a:13:51:d9:48:0f:2e:e8:6e:69:41:d4:4f:ac:ca:
c5:6a:3f:1b:07:3b:0c:c9:1a:2f:f7:dc:46:32:6c:
aa:ba:54:7e:28:fd:a9:5b:6d:ba:38:ed:c9:f7:ce:
17:eb:ab:c0:12:56:2e:08:67:6e:c8:51:fc:32:ac:
33:74:9d:8e:b4:50:29:36:dd:4c:51:bd:c0:96:82:
7c:d8:6c:6c:78:70:ea:07:16:21:bc:c2:6a:fb:38:
7f:be:89:d1:43:ee:11:84:e5:55:7b:60:92:c4:17:
18:bb:c8:3e:ab:74:92:66:55:78:7e:9b:80:94:f6:
31:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:69:5B:93:FC:ED:CF:AA:DC:A1:61:7C:59:71:41:91:10:DB:D9:6E
X509v3 Authority Key Identifier:
keyid:C5:5A:1E:40:51:F6:8F:E8:B7:20:E8:3D:DA:D3:3B:76:51:CB:7E:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVoeQFH2j-i3IOg92tM7dlHLfvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/SGlbk_ztz6rcoWF8WXFBkRDb2W4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/xVoeQFH2j-i3IOg92tM7dlHLfvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.58.64.0-89.58.103.255
185.232.40.0/24
IPv6:
2a11:fb80::/29
Signature Algorithm: sha256WithRSAEncryption
54:48:35:49:e0:7c:ed:cb:a4:97:3c:2a:e0:3a:30:bf:72:34:
26:c9:a7:62:b6:dc:e0:d5:75:92:3f:11:53:8b:78:09:f3:a1:
7f:ff:ba:2e:4b:af:ea:2c:c4:a2:df:e6:dd:37:19:a3:64:cd:
00:f6:da:b3:5e:57:06:87:e1:e6:5c:2f:5d:ac:06:80:e9:66:
3a:ea:a7:6a:4d:09:48:f9:81:90:33:54:9f:33:7a:49:b5:30:
88:38:c3:d4:51:43:fb:bd:d1:86:11:89:c3:f7:7d:4a:9f:ff:
cc:2c:37:ef:a5:8e:54:26:90:a7:be:52:91:e8:b5:5f:f9:43:
ef:08:b6:8f:19:d4:6c:2a:81:00:52:99:c0:e6:b3:22:81:9a:
6a:2b:23:11:9c:e0:ab:43:7d:59:2c:94:df:37:47:48:5d:ea:
fd:03:b9:90:07:db:fc:55:94:2b:39:ca:b7:be:ef:dd:da:c3:
03:7a:c2:1e:17:69:b6:3d:5c:5b:f4:52:5a:cf:b4:90:0f:4a:
46:f8:1e:c3:ab:d6:3d:eb:22:59:22:04:98:79:bc:e0:ec:03:
bd:bb:84:2a:9b:4f:1f:42:4d:0b:04:5a:b8:d4:0f:57:82:8c:
34:c9:e0:47:5c:5b:fc:86:3d:5e:1e:64:0d:ae:2b:f1:e7:ea:
1b:7d:24:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:00:55 2024 by rpki-client on console.sobornost.net