Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/KF-zhWgV9AOJzyDy3CKg3GQi6_4.roa
File: KF-zhWgV9AOJzyDy3CKg3GQi6_4.roa (raw, json)
Hash identifier: l9OK5mJoFZgjAkzgy7F0rbR+Q8MYwwE/PTexEN/xp18=
Subject key identifier: 28:5F:B3:85:68:15:F4:03:89:CF:20:F2:DC:22:A0:DC:64:22:EB:FE
Certificate issuer: /CN=e71d709d8b184c5a50c9431dccaf649bc8684704
Certificate serial: 018570B991115FC0AA9F1F0A8CA75BC4A391
Authority key identifier: E7:1D:70:9D:8B:18:4C:5A:50:C9:43:1D:CC:AF:64:9B:C8:68:47:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5x1wnYsYTFpQyUMdzK9km8hoRwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/KF-zhWgV9AOJzyDy3CKg3GQi6_4.roa
Signing time: Mon 02 Jan 2023 04:24:47 +0000
ROA not before: Mon 02 Jan 2023 04:24:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59466
IP address blocks: 185.96.164.0/22 maxlen: 22
85.187.180.0/22 maxlen: 22
85.187.190.0/24 maxlen: 24
85.187.187.0/24 maxlen: 24
85.187.188.0/23 maxlen: 23
45.84.172.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b9:91:11:5f:c0:aa:9f:1f:0a:8c:a7:5b:c4:a3:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e71d709d8b184c5a50c9431dccaf649bc8684704
Validity
Not Before: Jan 2 04:24:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=285fb3856815f40389cf20f2dc22a0dc6422ebfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:82:89:d3:10:f0:05:ce:fa:90:a1:a7:3d:5d:
59:7f:2a:21:eb:a9:41:a1:ea:f0:b6:3d:a8:8d:e9:
a1:26:1e:d1:24:f8:81:c1:34:38:a4:51:2a:08:0c:
89:c4:f1:d0:ef:fd:3e:ca:0e:a9:22:86:1e:ff:f8:
e8:bd:66:c1:98:6e:69:99:cc:0e:43:7f:b2:c6:f2:
9c:84:df:80:2a:b6:1a:38:0c:0f:e5:8e:4d:68:96:
de:4f:2c:a8:e9:8b:75:61:e7:3a:5e:a6:55:6d:d1:
ee:40:86:19:e8:47:af:d0:24:11:33:95:81:4a:aa:
7e:e8:1b:97:f6:7c:79:83:1c:04:de:09:79:e4:cb:
70:24:db:48:91:69:8d:dc:bc:d7:22:57:f3:81:68:
09:26:5e:50:0a:ee:d9:e2:72:74:84:24:71:dd:f7:
f6:ca:43:26:fd:7f:43:93:12:cb:76:1e:9d:4c:7d:
86:f5:b5:05:2a:99:ae:83:19:d4:68:01:39:d6:d1:
5f:67:9a:3b:08:4f:57:06:76:49:9d:c3:3c:a8:c6:
35:ee:f7:f0:2a:9b:df:e1:47:9f:81:c4:81:27:11:
22:64:7c:16:55:b3:6c:d8:5b:94:86:6e:98:6c:fb:
c1:93:86:e9:b7:bf:a8:a1:a5:84:ae:bc:6d:54:3e:
83:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:5F:B3:85:68:15:F4:03:89:CF:20:F2:DC:22:A0:DC:64:22:EB:FE
X509v3 Authority Key Identifier:
keyid:E7:1D:70:9D:8B:18:4C:5A:50:C9:43:1D:CC:AF:64:9B:C8:68:47:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5x1wnYsYTFpQyUMdzK9km8hoRwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/KF-zhWgV9AOJzyDy3CKg3GQi6_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.172.0/22
85.187.180.0/22
85.187.187.0-85.187.190.255
185.96.164.0/22
Signature Algorithm: sha256WithRSAEncryption
51:e0:97:ef:b6:e1:cc:08:02:20:ce:4c:d5:04:a3:4e:e0:06:
8c:68:c3:9a:0d:7a:4a:a1:46:af:c8:d8:2c:52:2b:ab:9a:f2:
b3:bf:2b:88:e6:ba:88:3c:3d:07:af:09:af:b0:b7:f1:2e:da:
3b:6c:50:23:28:c0:c3:2e:2a:7a:ad:ea:6a:f3:c8:84:05:e7:
0d:20:6f:cf:ce:33:d0:96:7e:c0:0c:5f:79:9a:c5:be:d4:13:
0c:03:15:9d:e7:90:b5:f5:27:fa:0d:19:fa:06:6d:79:c4:ef:
e3:23:24:3c:11:33:6d:72:d8:f6:9d:8a:25:71:08:66:d6:37:
db:c3:5c:e3:df:7e:a2:f8:55:e4:03:0e:cf:a6:6b:7f:f7:d4:
5d:ad:c6:97:b8:6c:ae:b7:74:89:1d:4c:64:30:77:87:1c:be:
97:3f:52:10:36:96:4d:61:b7:8a:3e:4a:96:08:ed:6d:43:4b:
c9:4f:bc:a7:2f:63:6f:b1:28:ac:ab:36:49:0c:66:67:4e:2f:
74:90:82:72:25:bd:d5:14:7f:31:f6:80:38:89:c2:5f:ea:fa:
11:02:7f:6b:6a:9b:54:4a:90:6f:1b:d5:76:1e:77:12:53:88:
a7:ff:31:ac:aa:60:02:91:d1:ab:46:26:86:8a:04:12:d7:50:
7b:d6:a0:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:23:40 2024 by rpki-client on console-fra.rpki-client.org