Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/7uWFLYyQ4GrpyOttYT4BFHA8hDs.roa
File: 7uWFLYyQ4GrpyOttYT4BFHA8hDs.roa (raw, json)
Hash identifier: ViSd+ynBp/mej+NTK81vTTYmASEexy4lEEBPCRuH65g=
Subject key identifier: EE:E5:85:2D:8C:90:E0:6A:E9:C8:EB:6D:61:3E:01:14:70:3C:84:3B
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 0186497854ED2EF736F25AA039AA567B6E58
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/7uWFLYyQ4GrpyOttYT4BFHA8hDs.roa
Signing time: Mon 13 Feb 2023 06:31:08 +0000
ROA not before: Mon 13 Feb 2023 06:31:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48108
IP address blocks: 185.120.56.0/24 maxlen: 24
185.120.57.0/24 maxlen: 24
185.120.58.0/24 maxlen: 24
185.120.59.0/24 maxlen: 24
212.22.64.0/24 maxlen: 24
212.22.77.0/24 maxlen: 24
212.22.75.0/24 maxlen: 24
185.255.179.0/24 maxlen: 24
185.255.178.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:49:78:54:ed:2e:f7:36:f2:5a:a0:39:aa:56:7b:6e:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Feb 13 06:31:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eee5852d8c90e06ae9c8eb6d613e0114703c843b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:0d:f8:bc:59:b6:d1:9a:92:e8:16:bb:9d:a9:
d2:c6:ba:53:73:8c:25:6d:53:9d:8c:74:c2:cd:5d:
10:b4:ac:e1:33:10:d4:0f:c6:a6:b9:42:17:36:ed:
fd:6a:25:0f:9f:0b:fa:5d:5e:af:8f:db:f9:b1:ef:
00:eb:7b:65:bc:58:55:d7:58:94:ba:8a:e1:98:f8:
49:66:0d:1e:1f:f5:4a:b9:bf:ae:fc:b9:a8:da:61:
13:83:1d:09:47:21:07:db:fa:21:7f:af:e7:d9:ca:
cd:b9:fd:92:ef:88:17:1f:ee:0e:b0:8f:47:1f:24:
a1:78:25:c4:35:25:c8:3d:e7:31:03:0f:42:1c:d9:
bd:d5:29:32:98:4e:05:33:86:ee:4b:7c:5f:4a:fb:
63:1e:51:5e:30:a7:f7:c1:ed:85:cd:30:b5:50:76:
8a:03:23:01:8c:e4:c6:55:4b:62:c8:1c:bf:e6:dc:
d9:05:94:3d:0e:01:f6:ab:d9:fc:50:95:54:85:80:
0a:c9:b2:14:c1:f8:7f:f8:08:f5:63:dd:b5:9a:68:
cc:0e:08:4b:ff:95:c7:f7:38:68:aa:97:91:13:de:
c9:67:73:eb:d1:62:fd:7b:ab:88:85:80:0b:55:2c:
d8:a7:43:00:1a:be:30:40:97:74:49:49:97:07:fb:
b0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E5:85:2D:8C:90:E0:6A:E9:C8:EB:6D:61:3E:01:14:70:3C:84:3B
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/7uWFLYyQ4GrpyOttYT4BFHA8hDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.56.0/22
185.255.178.0/23
212.22.64.0/24
212.22.75.0/24
212.22.77.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:9b:86:cf:24:6e:fd:5a:fe:68:1a:b0:c9:77:74:ae:04:93:
45:f5:eb:76:09:87:33:cb:d9:dc:92:f6:c8:ca:77:27:89:9b:
b9:22:de:f5:27:dc:46:88:14:86:2c:65:cb:fb:a5:ba:a4:3b:
e0:ae:9a:e8:f5:ce:e9:23:b9:08:8d:6d:01:58:19:59:30:70:
c7:90:da:38:37:9b:70:b2:5d:17:80:2c:e8:1e:1e:ea:fb:84:
29:53:3c:0b:b6:6b:06:b0:b3:b8:07:d8:70:7b:99:01:93:77:
c3:be:3d:2b:aa:2e:00:3a:6d:be:a7:2b:6f:30:74:82:97:f4:
27:2a:e1:4b:62:f4:0e:0f:c5:fd:97:20:60:86:32:6b:64:1c:
04:32:1f:60:94:69:46:57:27:62:a1:c8:c6:37:11:6e:88:b5:
03:92:bd:a0:eb:1a:e6:b5:99:71:56:b5:af:ba:6c:13:07:fe:
ce:95:48:9d:e1:67:22:c5:0b:5b:04:b1:04:bb:82:a5:1b:d3:
c0:6f:e3:4b:90:d3:16:8f:72:49:d6:d4:da:99:48:d3:f2:db:
bf:56:f6:2a:09:5b:8f:30:28:46:94:e6:d9:c4:d4:79:58:d4:
bb:70:4b:5d:a3:2d:ab:3d:50:de:e6:42:e1:41:b5:a7:c9:71:
8f:a8:ea:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 31 10:31:22 2023 by rpki-client on console-fra.rpki-client.org