Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/hnFbd45JDolbSr0dg2B-qxaWL-M.roa
File: hnFbd45JDolbSr0dg2B-qxaWL-M.roa (raw, json)
Hash identifier: gI7qUEb2hWKPjnQ6mFapg1xsYAA4y8JHXTETM5uZJHk=
Subject key identifier: 86:71:5B:77:8E:49:0E:89:5B:4A:BD:1D:83:60:7E:AB:16:96:2F:E3
Certificate issuer: /CN=297c508d23b38315bbf45b726d22050a46127b8c
Certificate serial: 0185714C119D76A2DD269967F5D790B49681
Authority key identifier: 29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/hnFbd45JDolbSr0dg2B-qxaWL-M.roa
Signing time: Mon 02 Jan 2023 07:04:48 +0000
ROA not before: Mon 02 Jan 2023 07:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44494
IP address blocks: 185.81.52.0/22 maxlen: 22
80.245.16.0/20 maxlen: 20
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:4c:11:9d:76:a2:dd:26:99:67:f5:d7:90:b4:96:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297c508d23b38315bbf45b726d22050a46127b8c
Validity
Not Before: Jan 2 07:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=86715b778e490e895b4abd1d83607eab16962fe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ea:5c:5b:49:0f:f0:95:b5:32:f4:82:ad:b0:
27:9d:83:5a:81:d7:08:6e:f1:94:62:bb:d8:4f:3b:
72:0d:09:4c:7b:24:b2:a7:81:13:65:b8:e5:8b:df:
d0:23:99:d3:24:4e:63:2e:86:27:d5:c0:38:9f:ad:
1e:90:0d:23:fd:9a:2a:e4:bb:be:76:7a:0a:94:e3:
9d:4a:f3:97:b8:53:7e:4e:e0:bc:c7:77:de:ad:a2:
69:0f:c1:0a:f8:0c:7a:9d:f5:87:b1:58:72:a7:12:
84:6c:59:07:b4:fd:b2:5c:53:8a:75:46:52:98:25:
5f:ce:50:bf:03:89:97:3b:26:d4:99:73:f1:1c:08:
43:36:19:cf:5e:32:bc:ba:54:b5:14:ed:c3:98:2c:
d2:5e:2a:5d:31:98:f9:17:3a:36:c4:ba:26:01:5c:
50:fe:51:6a:7c:3a:9e:70:3b:c2:1f:95:72:d1:bc:
e7:72:b8:a7:0a:35:34:dc:a0:5c:58:14:8e:4f:72:
31:fe:cc:65:2a:17:e8:29:51:33:ac:1c:1c:01:16:
65:7b:9d:bb:d2:89:c0:6b:01:b4:80:4e:7c:07:20:
4c:2b:78:45:bb:18:7d:ea:62:f3:a5:21:45:f7:08:
5a:67:e3:93:60:de:3c:cf:55:17:d2:59:cb:79:46:
07:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:71:5B:77:8E:49:0E:89:5B:4A:BD:1D:83:60:7E:AB:16:96:2F:E3
X509v3 Authority Key Identifier:
keyid:29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/hnFbd45JDolbSr0dg2B-qxaWL-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.245.16.0/20
185.81.52.0/22
Signature Algorithm: sha256WithRSAEncryption
87:8f:64:4f:1d:9f:55:fc:fa:9a:4d:1f:69:80:93:4d:66:b8:
82:90:be:54:13:fa:4b:1e:49:a5:1a:76:67:4e:6f:91:4c:dd:
06:d3:e6:8a:5d:7b:3d:d6:d3:9c:c5:6a:d9:01:4e:b0:1c:88:
6b:63:94:f1:36:f2:57:1d:70:be:40:2a:b9:0a:a0:e7:ac:df:
b8:f1:47:ac:69:9c:fc:7f:af:ca:3d:1f:31:f8:0c:49:38:6a:
9f:7b:86:0a:a1:64:41:cc:88:9d:64:18:b3:6c:96:99:8d:ea:
09:dc:59:a1:bd:c6:60:db:cd:54:49:a7:44:d0:3c:6e:d8:3c:
13:1e:72:d9:ef:28:ed:5a:5a:98:61:11:f5:4d:8b:d9:83:c0:
f3:d2:21:54:c6:36:2c:f9:3f:5a:1f:fb:a2:42:5f:e3:45:7a:
85:1e:b2:44:6d:71:00:fc:c9:5e:91:49:f9:68:f7:49:e4:02:
60:ad:47:9b:f2:ba:3f:92:dc:92:4f:ca:f9:3f:95:e8:44:16:
15:84:a3:69:49:c7:1a:7c:1f:20:82:dd:d5:1c:16:55:b8:01:
be:5d:d3:d0:7c:e7:70:7f:d3:43:6c:bf:66:06:a2:3a:14:3b:
f9:e6:2c:b8:99:a4:ab:53:cb:9e:a2:5b:93:70:0d:c1:74:96:
38:d8:32:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 25 10:33:24 2023 by rpki-client on console-fra.rpki-client.org