Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/7bLfxKPYFMotWoKuPzJbwn938cA.roa
File: 7bLfxKPYFMotWoKuPzJbwn938cA.roa (raw, json)
Hash identifier: 5mtMsNs6purylCtpEEvBix078O85Wi0gzeKsUuu94L8=
Subject key identifier: ED:B2:DF:C4:A3:D8:14:CA:2D:5A:82:AE:3F:32:5B:C2:7F:77:F1:C0
Certificate issuer: /CN=c9fe703d3790cdb8514a603e7a45ee50eeffa962
Certificate serial: 0185E69F89ABBF16DDEC93038AFD1BADAC98
Authority key identifier: C9:FE:70:3D:37:90:CD:B8:51:4A:60:3E:7A:45:EE:50:EE:FF:A9:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/7bLfxKPYFMotWoKuPzJbwn938cA.roa
Signing time: Wed 25 Jan 2023 01:51:33 +0000
ROA not before: Wed 25 Jan 2023 01:51:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201199
IP address blocks: 185.82.103.0/24 maxlen: 24
185.82.102.0/24 maxlen: 24
185.82.101.0/24 maxlen: 24
185.82.100.0/24 maxlen: 24
2a05:8f00::/48 maxlen: 48
2a05:8f00::/29 maxlen: 29
2a05:8f01::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e6:9f:89:ab:bf:16:dd:ec:93:03:8a:fd:1b:ad:ac:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9fe703d3790cdb8514a603e7a45ee50eeffa962
Validity
Not Before: Jan 25 01:51:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=edb2dfc4a3d814ca2d5a82ae3f325bc27f77f1c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:42:9f:01:f0:68:4c:b5:be:20:b3:fa:87:d0:
55:3e:e2:4d:bc:94:91:74:bf:90:33:8b:54:8e:9f:
ea:19:f6:10:8b:37:2d:46:f0:79:a5:25:d4:33:6a:
a3:ae:57:9f:88:04:da:9a:ab:6e:81:e4:6e:4e:0a:
de:7a:a5:5e:8a:87:f4:e2:bc:08:38:fe:9a:98:65:
75:18:9f:f8:c9:28:d5:d5:ac:48:48:9e:e0:56:e5:
d5:88:bb:74:d2:a1:48:6f:cf:43:c1:e8:fd:55:86:
a7:51:2b:fb:ec:68:83:a1:12:d6:d5:d3:41:51:e3:
d6:f7:ae:53:2f:c7:e5:7b:8c:bb:bb:e2:03:a6:df:
53:e3:32:88:f0:fe:19:53:8b:20:70:c5:a3:36:35:
40:d9:a6:6c:9a:ca:49:fe:b9:ee:de:f7:d3:e6:c5:
49:50:ba:40:e0:68:cd:61:27:d2:5f:9a:cc:ee:48:
98:9c:a4:27:bb:d0:e4:8b:81:55:e6:59:d2:e2:9e:
fe:49:d2:01:b1:9d:b0:5e:64:5f:a5:b5:bd:ba:4e:
40:a9:42:62:59:16:94:53:bf:d2:c2:e1:d0:20:7d:
10:c8:2d:a6:a6:9c:9f:80:07:50:aa:30:82:e2:84:
90:c9:b5:83:77:55:5b:d0:23:2a:5d:78:0b:c9:3d:
58:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:B2:DF:C4:A3:D8:14:CA:2D:5A:82:AE:3F:32:5B:C2:7F:77:F1:C0
X509v3 Authority Key Identifier:
keyid:C9:FE:70:3D:37:90:CD:B8:51:4A:60:3E:7A:45:EE:50:EE:FF:A9:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/7bLfxKPYFMotWoKuPzJbwn938cA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.82.100.0/22
IPv6:
2a05:8f00::/29
Signature Algorithm: sha256WithRSAEncryption
86:3d:cd:0b:9e:b7:0f:3a:8f:ea:ac:45:5b:c8:68:34:d6:8b:
04:ef:10:ce:7f:96:5b:3f:06:59:99:46:d2:50:97:18:ca:89:
f1:f0:e7:c4:42:d9:07:fa:fe:5d:2a:f0:d8:f6:df:d3:01:9f:
2e:61:72:4f:8b:a4:d0:d4:8c:29:6c:5f:e5:4e:c7:01:65:79:
5d:0e:fc:77:39:3a:d8:c1:c2:a7:bd:65:18:2b:35:28:f4:31:
1d:49:74:77:ef:08:34:0a:25:30:99:9b:dc:b2:8c:ec:13:f0:
8a:f4:64:6a:f0:83:e4:1c:8d:35:96:16:b7:81:fa:54:ca:3d:
a8:9a:11:74:d4:85:27:ea:85:72:80:cd:2f:fc:86:79:9e:c3:
b4:c1:3d:f4:b9:e2:bd:e2:e1:74:f7:3c:59:91:91:c4:37:2d:
86:77:c0:67:8b:e2:38:fe:25:68:6b:be:90:32:f9:f1:0c:f3:
36:c5:af:83:a1:7e:66:cd:58:02:8d:a3:e7:07:3d:6e:f9:d6:
48:0d:30:19:59:35:f6:39:a2:2e:9d:df:e4:2a:94:f6:12:2b:
54:e7:e8:c9:0c:01:a2:e4:2b:2c:9a:3f:39:3a:08:d6:6e:f9:
c2:a3:ea:13:f5:ce:05:8b:f8:64:10:61:6e:68:d7:ef:ff:2f:
8c:9c:a0:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:19:17 2024 by rpki-client on console-ams.rpki-client.org