Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/xAlmFVhB2hCzwGTnnlitayrrOhc.roa
File: xAlmFVhB2hCzwGTnnlitayrrOhc.roa (raw, json)
Hash identifier: VfYJpRosnTxdhcv+GGyuVZ6qsfsKHc4yV/24SyopKXk=
Subject key identifier: C4:09:66:15:58:41:DA:10:B3:C0:64:E7:9E:58:AD:6B:2A:EB:3A:17
Certificate issuer: /CN=3831e5d98ceee34d783a51cccb6ee4dc4ee43793
Certificate serial: 01856E78DCEC588E249549CF02AC2E4C53E3
Authority key identifier: 38:31:E5:D9:8C:EE:E3:4D:78:3A:51:CC:CB:6E:E4:DC:4E:E4:37:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ODHl2Yzu4014OlHMy27k3E7kN5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/xAlmFVhB2hCzwGTnnlitayrrOhc.roa
Signing time: Sun 01 Jan 2023 17:54:52 +0000
ROA not before: Sun 01 Jan 2023 17:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 134743
IP address blocks: 192.145.74.0/23 maxlen: 23
192.145.72.0/22 maxlen: 24
2a09:7080::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:78:dc:ec:58:8e:24:95:49:cf:02:ac:2e:4c:53:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3831e5d98ceee34d783a51cccb6ee4dc4ee43793
Validity
Not Before: Jan 1 17:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c40966155841da10b3c064e79e58ad6b2aeb3a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:22:50:95:79:9e:9c:61:03:e9:d0:c0:9a:2f:
de:60:8c:a5:66:31:43:8a:fa:6c:d4:23:66:4c:f0:
7d:46:c1:db:55:ed:53:ac:64:b4:98:11:ef:51:de:
e0:79:6a:fa:d3:5a:2e:d7:1c:6a:ca:c1:0a:79:b8:
80:9b:c2:91:e1:43:9e:56:e4:fb:9a:f3:3e:d4:a3:
89:5d:66:f0:9e:e6:12:07:6d:00:21:12:b1:de:d2:
8f:42:7a:6d:04:47:65:78:65:bc:24:61:3a:89:ff:
22:75:e8:55:e3:70:17:46:0c:78:98:df:25:b2:11:
0f:41:4d:39:7f:08:61:ca:d8:12:da:60:14:c7:f5:
42:e9:46:59:5c:c6:78:f2:cd:23:a4:2c:15:da:a3:
6c:65:34:c1:d4:91:53:39:22:f5:9f:95:c6:55:b6:
58:5e:d6:b4:a0:19:2a:d4:bb:99:d4:81:80:af:ea:
76:dd:5e:ff:36:06:7f:1a:b4:b2:14:80:3c:6c:0a:
ce:62:a8:eb:a8:39:a4:0f:00:c4:ca:a5:60:e1:17:
d8:87:72:cb:80:d6:69:3f:cd:5e:d1:71:0f:db:81:
e8:a4:54:43:e9:5a:e1:d3:9f:e7:e2:61:a9:fb:40:
85:6e:b6:d1:ae:dd:ac:36:c5:a9:95:10:05:26:15:
85:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:09:66:15:58:41:DA:10:B3:C0:64:E7:9E:58:AD:6B:2A:EB:3A:17
X509v3 Authority Key Identifier:
keyid:38:31:E5:D9:8C:EE:E3:4D:78:3A:51:CC:CB:6E:E4:DC:4E:E4:37:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ODHl2Yzu4014OlHMy27k3E7kN5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/xAlmFVhB2hCzwGTnnlitayrrOhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.145.72.0/22
IPv6:
2a09:7080::/29
Signature Algorithm: sha256WithRSAEncryption
a3:ac:82:98:68:5d:c1:49:f4:8f:84:97:d9:76:94:b1:b6:4e:
6b:ed:db:44:d5:b8:df:7d:bc:00:f3:f2:74:63:75:3c:44:ed:
05:26:5d:60:9a:5e:e5:75:1b:ad:d3:24:9f:8b:1e:a2:32:54:
4d:3b:61:59:7a:bc:d2:0f:d1:2f:dd:d6:0f:e9:63:38:c2:06:
06:d1:6b:59:e4:db:b9:1f:9a:4c:e4:bf:f4:2e:f3:73:e9:86:
73:6e:69:42:4c:c5:77:74:48:9f:c0:15:7e:21:e1:20:af:c8:
98:3a:ff:46:38:18:ac:2d:b7:6f:64:e5:e4:00:a3:df:68:ed:
14:0d:9a:3c:61:12:99:82:f6:9a:ee:73:3a:0d:45:bd:e3:2f:
0d:93:f5:25:94:f0:07:91:e8:86:2e:5b:4c:ca:ac:15:9d:3a:
fd:2b:f0:bb:7a:bc:7d:90:21:11:e4:bb:95:3a:54:8e:f2:ec:
ae:f0:45:7b:12:47:80:b7:cc:a6:5e:a2:f5:f8:a6:53:09:56:
e6:23:13:0a:8e:da:93:ad:87:ee:24:8d:f8:f0:b1:79:26:e6:
52:bc:5a:0c:87:be:60:fa:58:b9:80:ba:e7:ce:6e:67:8c:9d:
8f:9f:b3:06:bb:a1:20:5d:18:6f:c7:b5:a4:1a:4f:d2:ab:2f:
a2:58:65:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:15:08 2024 by rpki-client on console.sobornost.net