Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/SOMNB9LOsRnrLh7vOiQK_LqnggE.roa
File: SOMNB9LOsRnrLh7vOiQK_LqnggE.roa (raw, json)
Hash identifier: /GxuYFeDJqFls9W8ZyvsqL2POlrNws59310gMEFTBfQ=
Subject key identifier: 48:E3:0D:07:D2:CE:B1:19:EB:2E:1E:EF:3A:24:0A:FC:BA:A7:82:01
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 018799D4EEB8BC22F4B8EB418288ED38E00C
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/SOMNB9LOsRnrLh7vOiQK_LqnggE.roa
Signing time: Wed 19 Apr 2023 14:04:41 +0000
ROA not before: Wed 19 Apr 2023 14:04:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58212
IP address blocks: 185.236.8.0/23 maxlen: 24
185.236.11.0/24 maxlen: 24
185.255.112.0/24 maxlen: 24
85.117.243.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:99:d4:ee:b8:bc:22:f4:b8:eb:41:82:88:ed:38:e0:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Apr 19 14:04:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=48e30d07d2ceb119eb2e1eef3a240afcbaa78201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a2:68:32:a6:5a:5b:43:a2:f2:b3:05:e9:91:
80:39:4f:ea:1f:78:f8:13:c6:ba:2c:ec:76:7a:59:
44:d4:16:eb:fe:57:6a:79:7c:1e:e1:d1:1e:18:1a:
dd:34:d3:99:04:74:a6:1f:23:42:24:44:1d:1e:87:
d8:a1:d0:38:60:7e:8e:dd:36:f4:3a:4d:29:44:c2:
3f:fe:40:8c:bc:e9:35:54:35:c4:66:58:8b:d1:c7:
36:25:78:de:1f:70:b3:a8:de:97:f7:b4:19:86:4e:
6e:3d:ba:1a:12:46:45:b8:c1:26:33:85:b5:af:fa:
93:96:66:40:b2:1b:ad:20:50:41:e2:39:01:13:4a:
f0:75:32:cd:de:d7:b3:ce:04:3d:85:56:e2:79:e5:
3c:37:2e:69:f1:ca:52:90:bb:e7:81:0f:32:3e:4a:
15:b6:a2:13:32:85:65:e8:bc:97:37:ed:6a:7f:7a:
ee:a6:60:b9:79:64:c3:7d:10:7d:42:54:60:5d:91:
42:c5:5d:6b:5a:a6:15:df:52:05:43:c5:48:b2:e3:
eb:a9:f3:36:d7:a6:64:88:3f:82:50:6f:d0:3a:31:
a9:ba:d2:46:73:c5:f1:7a:83:36:9b:d5:45:52:54:
6a:fd:55:85:01:a1:0d:79:18:3d:0e:d8:b4:69:a8:
d9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E3:0D:07:D2:CE:B1:19:EB:2E:1E:EF:3A:24:0A:FC:BA:A7:82:01
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/SOMNB9LOsRnrLh7vOiQK_LqnggE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.117.243.0/24
185.236.8.0/23
185.236.11.0/24
185.255.112.0/24
Signature Algorithm: sha256WithRSAEncryption
33:33:18:1e:12:6c:f0:0d:76:da:1a:0c:3d:3e:c4:3c:73:e5:
c5:31:4d:91:c3:e3:de:f6:b0:23:97:d1:b5:1b:27:ba:43:e4:
f9:02:35:d2:0e:1a:0d:47:37:2a:f3:33:6e:31:bc:d5:29:0c:
cc:c3:b2:85:a5:67:db:ce:2c:62:8f:26:a7:7b:2d:f7:19:4a:
04:d8:13:76:8c:e3:38:f9:9c:23:7b:f3:d4:87:24:a3:55:4c:
d1:82:f2:55:81:57:b8:2e:4d:05:46:ed:c8:ac:d1:30:1e:5d:
89:3b:02:9f:36:25:3c:f0:d6:da:f6:02:5d:ba:15:2f:df:ff:
d4:18:5a:0b:4d:94:55:21:31:50:7e:35:52:bd:13:16:9f:34:
94:e1:a9:43:2a:c0:d9:94:35:0f:62:7e:28:5c:3d:f8:4b:80:
96:7c:1c:c9:e3:ba:2e:8c:8b:88:7b:60:f7:94:cc:0b:f3:a7:
d5:79:13:e0:1c:b9:20:b4:57:58:78:a3:36:9e:8c:54:21:e8:
11:e6:69:e8:4f:05:64:f4:d2:e3:0c:e0:d4:5d:55:88:93:b9:
e1:4f:cb:08:b9:0a:3d:dd:9c:35:81:28:5f:d7:7d:73:c7:f9:
da:c5:87:4c:36:94:eb:ac:92:96:e3:df:7a:47:46:88:4e:4f:
df:0b:5b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:34 2023 by rpki-client on console-fra.rpki-client.org