Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/0HvgTrqmt371sC8Rge8a2hE8hyI.roa
File: 0HvgTrqmt371sC8Rge8a2hE8hyI.roa (raw, json)
Hash identifier: Rv0YxjVk7gcrKN8I76vM/yAEqQ6DPjk8vnzA3+fowjk=
Subject key identifier: D0:7B:E0:4E:BA:A6:B7:7E:F5:B0:2F:11:81:EF:1A:DA:11:3C:87:22
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 01856F02443B51F9EDE0C1E103071047A85E
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/0HvgTrqmt371sC8Rge8a2hE8hyI.roa
Signing time: Sun 01 Jan 2023 20:24:57 +0000
ROA not before: Sun 01 Jan 2023 20:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48798
IP address blocks: 85.254.172.0/24 maxlen: 24
80.81.60.0/24 maxlen: 24
85.254.183.0/24 maxlen: 24
85.254.182.0/24 maxlen: 24
185.176.117.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:44:3b:51:f9:ed:e0:c1:e1:03:07:10:47:a8:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 1 20:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d07be04ebaa6b77ef5b02f1181ef1ada113c8722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d3:31:49:9f:5e:0d:15:b9:7d:ec:97:93:53:
43:ac:f3:9b:c0:5e:77:59:c8:6d:23:ad:3b:b2:58:
f4:b0:b0:66:21:06:41:20:d7:b8:71:0b:a1:86:b3:
f9:53:a3:4d:ce:34:72:fe:90:f0:5a:76:fa:05:b9:
ce:e1:b8:46:f3:11:f8:3f:e3:8a:5f:7d:6a:c0:69:
22:02:d7:23:fa:27:30:a6:31:8c:78:cd:d6:53:ff:
e2:f8:e8:5a:f8:6b:1f:be:5a:c1:65:18:16:e9:8e:
bf:06:08:8b:f3:49:d2:da:c0:89:43:8e:60:99:f9:
85:e3:d9:de:22:b8:d0:45:cf:94:2e:6c:30:4e:50:
5a:e0:1d:2c:4b:23:23:fe:50:19:f7:77:8b:99:75:
44:8f:15:a6:0d:01:06:ee:e5:79:7f:cd:4e:04:98:
02:17:6d:b7:50:f9:c1:5b:0f:c2:eb:7a:fe:f9:29:
e3:2d:c1:86:a3:d5:de:8a:f4:bd:c4:26:4e:b5:06:
97:a0:d6:0b:26:91:94:a3:10:5c:f6:91:08:99:fa:
8e:d7:c4:d2:c4:67:ad:f1:cf:e2:64:8c:02:c1:47:
43:6e:39:83:2c:0b:5c:43:0b:1a:7c:6c:b4:01:b1:
30:db:90:0b:d3:f1:a3:11:52:34:4d:6e:d1:5f:0f:
11:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:7B:E0:4E:BA:A6:B7:7E:F5:B0:2F:11:81:EF:1A:DA:11:3C:87:22
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/0HvgTrqmt371sC8Rge8a2hE8hyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.81.60.0/24
85.254.172.0/24
85.254.182.0/23
185.176.117.0/24
Signature Algorithm: sha256WithRSAEncryption
97:fd:4d:5f:b0:b0:46:87:ac:7d:a9:dd:85:f4:6d:59:0f:45:
c4:2a:4f:26:c7:17:53:d3:ed:18:d7:fa:69:e8:a3:e0:66:f2:
af:32:e3:a7:41:2d:0b:b6:d7:1e:a4:f6:1c:5a:0f:c5:9a:6d:
5b:81:eb:f0:2e:a0:74:5d:5f:5f:63:94:32:ca:06:10:32:da:
0c:fb:9b:c0:86:92:5c:76:2a:b7:f6:f6:82:2d:86:94:9f:f3:
27:b0:7c:c3:cf:20:3a:7a:f4:3c:1f:20:2c:c6:86:f1:58:0a:
c3:37:f7:18:6b:b5:f1:24:e1:b6:5d:90:59:09:29:ad:f3:2d:
22:22:a4:76:56:35:12:4b:67:07:0a:e2:65:ca:17:af:bf:96:
aa:06:ce:6e:7c:ce:7a:93:09:6c:a0:06:f9:f2:e8:aa:1f:70:
53:75:dc:96:a8:ee:c1:3c:a5:4e:39:c1:cb:1e:38:f1:72:94:
27:16:19:af:36:d5:3b:45:bf:a9:0e:88:c1:b7:32:bc:a7:f4:
11:d1:09:1f:2b:3c:8c:f8:42:0f:49:1a:98:6c:80:35:db:73:
50:87:92:43:5c:dc:32:bc:45:45:1a:50:04:da:82:ea:d6:18:
72:46:59:39:c3:26:d7:26:e1:82:f1:cb:8e:87:5a:ca:c5:2f:
8b:fe:ed:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:31:48 2024 by rpki-client on console-ams.rpki-client.org