Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/swqKCtSAO_4C_R5L7BpKXgy2c2E.roa
File: swqKCtSAO_4C_R5L7BpKXgy2c2E.roa (raw, json)
Hash identifier: 7gkoSknmri6ugIa/uESJ1AdclvpLxKku96tn/JDQwRE=
Subject key identifier: B3:0A:8A:0A:D4:80:3B:FE:02:FD:1E:4B:EC:1A:4A:5E:0C:B6:73:61
Certificate issuer: /CN=0ab36668893a8244d553efca4688d0f1019e4e25
Certificate serial: 01856E266D26801677182D8B127DD618AB3D
Authority key identifier: 0A:B3:66:68:89:3A:82:44:D5:53:EF:CA:46:88:D0:F1:01:9E:4E:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/swqKCtSAO_4C_R5L7BpKXgy2c2E.roa
Signing time: Sun 01 Jan 2023 16:24:50 +0000
ROA not before: Sun 01 Jan 2023 16:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12847
IP address blocks: 212.93.98.0/24 maxlen: 24
212.93.96.0/24 maxlen: 24
212.93.96.0/19 maxlen: 19
212.93.124.0/23 maxlen: 23
212.93.126.0/24 maxlen: 24
194.125.240.0/24 maxlen: 24
2a03:ec00::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:26:6d:26:80:16:77:18:2d:8b:12:7d:d6:18:ab:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab36668893a8244d553efca4688d0f1019e4e25
Validity
Not Before: Jan 1 16:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b30a8a0ad4803bfe02fd1e4bec1a4a5e0cb67361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6a:8e:a9:f9:4d:e9:40:a5:1c:2c:32:9c:e8:
b2:ff:e3:79:49:d2:63:9d:c5:c8:c7:07:b9:ae:01:
5f:0b:97:0b:32:90:0d:8f:b1:44:0b:15:0d:29:34:
b0:a2:3e:8b:00:6a:bf:af:cb:0f:89:b7:d6:07:fb:
df:1c:e1:ae:c9:8b:0f:34:ed:36:19:93:70:4f:36:
26:ed:ef:3b:cb:ea:d1:d8:2d:2f:a8:91:22:93:b8:
23:6f:d1:bd:42:fe:d3:e8:5f:8c:7e:ea:98:ba:8b:
a1:53:4f:62:9d:98:82:c3:4d:ae:5a:e9:a8:70:1f:
81:10:91:13:c8:da:20:a7:ba:e7:b7:3a:14:16:c4:
f4:42:f2:7e:b2:ad:8f:2e:fe:84:db:7e:63:a0:37:
b1:5a:00:60:42:2e:34:72:b2:d9:c5:bb:74:cd:d1:
c3:21:e8:b3:68:c3:ca:df:dc:9b:db:37:71:ba:7f:
db:67:19:73:49:35:51:00:38:17:5a:f9:b8:71:dc:
a3:89:1e:b1:b4:da:0a:1d:15:57:ac:7e:c2:eb:fb:
ce:b9:b4:a2:eb:b3:c1:80:fb:e9:df:cc:4c:fe:ee:
5d:97:4b:54:f7:80:18:ad:9b:e6:1a:29:cc:91:b6:
58:6c:a1:38:2a:73:af:49:2e:8d:13:55:5a:53:78:
7d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:0A:8A:0A:D4:80:3B:FE:02:FD:1E:4B:EC:1A:4A:5E:0C:B6:73:61
X509v3 Authority Key Identifier:
keyid:0A:B3:66:68:89:3A:82:44:D5:53:EF:CA:46:88:D0:F1:01:9E:4E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/swqKCtSAO_4C_R5L7BpKXgy2c2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.125.240.0/24
212.93.96.0/19
IPv6:
2a03:ec00::/32
Signature Algorithm: sha256WithRSAEncryption
93:43:e5:72:d1:f6:1d:80:09:93:36:94:08:aa:fc:e4:38:61:
09:82:0c:92:56:a6:88:88:0f:62:e2:45:c5:37:cf:de:a8:58:
1b:8a:12:19:ab:fc:93:ca:4f:34:d6:91:95:06:a9:7c:43:5f:
2e:65:9d:a5:c5:20:89:f6:34:b2:1e:47:e9:2a:68:7e:dd:95:
ab:a2:ee:81:9f:79:6f:23:cf:8b:cf:a0:fe:8c:99:ae:01:b3:
01:0f:dc:46:8f:9e:de:69:57:e9:25:23:db:01:7d:b0:63:a6:
92:5c:ba:31:e1:02:1d:2c:ef:aa:72:56:eb:d5:05:04:87:40:
a9:e5:75:89:9f:bc:c4:23:f3:6b:95:5b:45:5b:24:4c:76:3d:
27:92:17:f9:6e:32:ec:a2:89:8c:54:f1:44:f5:2f:e0:c9:b6:
2c:cd:da:da:16:e4:7f:4d:5b:f0:18:31:50:35:5e:3d:8d:bf:
81:6c:39:4c:2a:84:a2:cf:3a:81:91:97:5c:fd:56:86:e2:67:
5d:0c:ad:6f:3e:80:b6:93:8c:f7:e8:48:5c:cf:fe:78:34:1f:
ea:76:b5:6a:1e:c3:06:f2:b3:c0:aa:3f:5d:41:09:a0:92:69:
85:1a:f2:bc:0a:e8:75:68:6e:ac:af:ec:d4:9a:05:e4:06:04:
4b:90:53:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:55:35 2024 by rpki-client on console.sobornost.net