Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/e52b30-cd47-4c27-b6fc-d097cd2c7d82/1/brNjzdfg9_LiDsoS-xsDZDhMxBY.roa
File: brNjzdfg9_LiDsoS-xsDZDhMxBY.roa (raw, json)
Hash identifier: iTvFy9ULoy23Il5c5Bo+me+bfDjhdhkqfpge0+dWfhs=
Subject key identifier: 6E:B3:63:CD:D7:E0:F7:F2:E2:0E:CA:12:FB:1B:03:64:38:4C:C4:16
Certificate issuer: /CN=88f6580a229ccfd5369e19e252adcb728cdacd39
Certificate serial: 01856D01BF8CFC8C6B38D22C285F31F9DB28
Authority key identifier: 88:F6:58:0A:22:9C:CF:D5:36:9E:19:E2:52:AD:CB:72:8C:DA:CD:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPZYCiKcz9U2nhniUq3LcozazTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/e52b30-cd47-4c27-b6fc-d097cd2c7d82/1/brNjzdfg9_LiDsoS-xsDZDhMxBY.roa
Signing time: Sun 01 Jan 2023 11:05:09 +0000
ROA not before: Sun 01 Jan 2023 11:05:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399114
IP address blocks: 185.234.115.0/24 maxlen: 24
94.154.8.0/24 maxlen: 24
2a10:e580::/29 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:01:bf:8c:fc:8c:6b:38:d2:2c:28:5f:31:f9:db:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88f6580a229ccfd5369e19e252adcb728cdacd39
Validity
Not Before: Jan 1 11:05:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6eb363cdd7e0f7f2e20eca12fb1b0364384cc416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9a:c5:7e:3b:52:9e:56:71:3b:71:04:84:1e:
15:78:65:21:fa:69:28:bb:f7:65:1b:93:99:1a:32:
71:a4:6f:0e:51:1a:07:a2:1a:87:70:4e:0a:2d:e1:
4c:0f:76:9e:55:3f:c7:3b:7b:f6:6d:54:1c:8d:0a:
91:c0:a0:a6:f4:43:ab:56:b9:bc:5c:97:8c:86:79:
c7:3a:b9:a2:7a:69:bc:e2:12:f5:77:ca:0c:76:3c:
83:e6:8b:03:6e:b4:26:87:eb:c7:db:52:c5:77:61:
e2:aa:9c:14:c0:8b:35:ca:da:8b:55:d0:75:60:ba:
23:00:01:19:18:20:8f:24:fc:f2:92:b4:2e:09:a8:
08:d7:e8:66:0a:dd:9e:09:76:58:56:83:d7:a8:38:
b7:c8:d2:d4:47:89:37:35:5a:da:03:ca:65:51:fc:
b8:c4:2c:42:19:e6:97:df:73:2a:4f:40:4a:37:1e:
36:44:88:97:1a:5c:46:8c:42:27:c6:03:79:d7:93:
e5:0d:ca:3b:b1:72:25:6f:e8:a9:46:8c:1e:89:dd:
ba:a7:63:4b:39:74:07:0e:58:6a:93:69:3d:44:e4:
36:2d:e0:d8:0d:05:c3:8a:28:4c:79:e4:d6:bd:0d:
85:00:cf:f3:95:ef:2f:54:79:ce:25:be:09:df:d5:
7d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:B3:63:CD:D7:E0:F7:F2:E2:0E:CA:12:FB:1B:03:64:38:4C:C4:16
X509v3 Authority Key Identifier:
keyid:88:F6:58:0A:22:9C:CF:D5:36:9E:19:E2:52:AD:CB:72:8C:DA:CD:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPZYCiKcz9U2nhniUq3LcozazTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e52b30-cd47-4c27-b6fc-d097cd2c7d82/1/brNjzdfg9_LiDsoS-xsDZDhMxBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e52b30-cd47-4c27-b6fc-d097cd2c7d82/1/iPZYCiKcz9U2nhniUq3LcozazTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.8.0/24
185.234.115.0/24
IPv6:
2a10:e580::/29
Signature Algorithm: sha256WithRSAEncryption
86:62:29:7c:fb:16:98:41:58:0e:25:93:05:c8:c3:f7:0d:b5:
ab:a0:43:19:0d:8b:43:e7:4c:36:b1:a6:06:e1:0e:0e:d6:cd:
05:dd:55:7d:e4:c9:35:3c:ac:1f:3d:5d:2b:c6:12:d9:69:cd:
6e:e2:01:a2:25:75:66:52:a2:5f:65:60:76:17:ed:61:0c:98:
b0:f0:ef:28:d4:f4:f4:f4:4d:0b:6b:95:f1:60:66:f0:9c:c1:
74:26:c6:25:8c:55:9a:a6:ca:90:d0:ce:54:82:c2:00:37:8e:
26:62:83:c8:07:84:19:b8:27:dc:31:a7:6a:24:0b:81:40:e4:
5d:d2:29:7f:a8:51:36:29:cb:f8:2b:f9:cc:44:e4:27:da:bd:
25:12:93:96:29:e4:b4:f1:66:08:b2:a0:8c:bb:3f:d6:68:31:
d6:66:38:7c:e0:51:45:94:fe:a7:81:04:20:26:09:81:8e:66:
1e:8b:87:33:74:e1:a0:9b:b8:e6:8d:69:0a:85:ec:b8:78:d7:
ef:5b:70:79:78:50:6f:21:f7:bf:ad:a7:33:92:42:72:af:0f:
4b:6e:a8:51:d9:93:a4:c5:99:31:01:95:2a:28:79:ea:3a:bc:
cb:f0:c4:af:7b:fb:63:ff:d6:5a:cf:81:3a:e0:fe:8f:97:66:
c8:6f:87:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:30:49 2024 by rpki-client on console-fra.rpki-client.org