Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/8e-u6nWXOQvfONlZB4DoS5dc2S0.roa
File: 8e-u6nWXOQvfONlZB4DoS5dc2S0.roa (raw, json)
Hash identifier: m2dcVI4ZF3s+VJGfMVe+Zx7UK+bZ5SguUfAqD03g2ks=
Subject key identifier: F1:EF:AE:EA:75:97:39:0B:DF:38:D9:59:07:80:E8:4B:97:5C:D9:2D
Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial: 01856D1CD0AF920BA1C93C3CAE3633CD812C
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/8e-u6nWXOQvfONlZB4DoS5dc2S0.roa
Signing time: Sun 01 Jan 2023 11:34:42 +0000
ROA not before: Sun 01 Jan 2023 11:34:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49901
IP address blocks: 185.84.163.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:1c:d0:af:92:0b:a1:c9:3c:3c:ae:36:33:cd:81:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
Validity
Not Before: Jan 1 11:34:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f1efaeea7597390bdf38d9590780e84b975cd92d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ce:c8:05:99:db:d6:5d:97:a3:20:19:bb:04:
c5:3c:22:b6:50:df:00:52:46:2b:2b:71:93:01:2f:
7f:d9:2d:c1:22:f8:b3:b0:8a:df:3e:2c:f6:6d:b0:
75:0c:59:f2:1d:5a:16:6a:88:9b:97:b2:69:01:53:
65:3b:53:4e:b4:4a:ce:a3:72:0c:ac:4c:20:dd:15:
c7:d1:9e:b0:31:af:5c:fd:8c:ed:ef:50:8d:6d:bc:
ec:65:0e:c3:15:af:6a:0f:87:97:8f:ac:66:76:70:
99:ad:df:06:b7:1c:67:98:ba:2b:f8:f5:81:e5:f9:
3a:14:f4:69:fa:2c:c1:53:82:03:9d:89:6f:2a:b2:
fb:1b:04:17:1a:69:d3:90:05:6c:34:7d:b7:a4:15:
c7:42:8f:90:f0:b2:c6:9e:05:10:01:f0:cf:26:fc:
3b:e2:0a:45:80:a7:dd:2d:ca:3a:a4:d5:7e:2d:38:
88:dd:cc:67:35:bf:db:ec:78:8b:1b:e5:12:4f:ff:
0f:27:3e:8a:7f:86:ea:51:96:85:6a:81:e7:48:18:
e1:63:dc:e5:aa:12:b1:ba:2f:1b:58:a8:c3:8a:03:
34:a0:f8:fe:dc:e0:65:9e:d5:fa:9f:95:1e:23:63:
b9:d1:48:82:44:31:18:f1:b2:ec:ca:d9:dd:c3:45:
10:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:EF:AE:EA:75:97:39:0B:DF:38:D9:59:07:80:E8:4B:97:5C:D9:2D
X509v3 Authority Key Identifier:
keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/8e-u6nWXOQvfONlZB4DoS5dc2S0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.163.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:6c:59:a8:1f:2f:60:4a:65:a3:e0:3c:ac:fd:bd:9e:55:40:
d2:c6:20:5b:ce:3b:03:1a:1e:ca:28:01:97:b1:93:f9:a9:2c:
98:33:cb:66:63:2f:99:84:fa:92:2a:eb:e6:d7:d0:60:20:cc:
49:ec:d0:7e:0f:a2:69:a4:dc:9c:6c:74:e5:31:bd:62:93:93:
b6:56:a5:91:f7:11:6a:e2:71:93:f2:9a:70:c0:44:6e:bb:02:
1a:a6:1e:20:7b:d4:be:5a:dd:2d:03:58:4e:53:de:6b:bd:42:
d6:fc:16:c4:86:01:3a:e8:7e:88:61:4c:58:e2:8d:30:c4:7b:
b5:e9:25:da:df:26:84:b2:16:66:68:d4:d9:e1:24:a5:ae:5f:
fc:3c:87:f4:df:53:2f:80:ba:1e:2f:55:1a:09:45:6a:c8:8f:
fd:43:78:e5:8d:3f:18:b4:a1:11:af:52:6a:a2:08:39:08:a6:
63:50:e7:a9:57:ac:06:fc:40:2c:d2:cb:87:23:3f:ec:32:25:
1e:a4:c5:68:cd:31:56:fc:95:87:82:e8:5d:c6:5e:f4:ff:1c:
86:01:cf:a4:3f:6d:42:52:87:71:ec:b1:cc:cd:ef:61:4c:07:
81:e1:0d:cc:df:f6:55:90:d6:9f:49:53:5e:fe:ce:c3:9a:e2:
56:23:c5:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:09 2023 by rpki-client on console-fra.rpki-client.org