Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DBDOj3ehCEGELNK6tP6NIb79atI.roa
File: DBDOj3ehCEGELNK6tP6NIb79atI.roa (raw, json)
Hash identifier: mzHoy3xQszoszbX5ivJDls/QtkaZ5HtSVNqZSUJcm+0=
Subject key identifier: 0C:10:CE:8F:77:A1:08:41:84:2C:D2:BA:B4:FE:8D:21:BE:FD:6A:D2
Certificate issuer: /CN=0e91de17437a0025fd1ede10f710f17a3080b3ab
Certificate serial: 01856E0AF4DE140FBD2BE5E9DC1096991AD2
Authority key identifier: 0E:91:DE:17:43:7A:00:25:FD:1E:DE:10:F7:10:F1:7A:30:80:B3:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DBDOj3ehCEGELNK6tP6NIb79atI.roa
Signing time: Sun 01 Jan 2023 15:54:49 +0000
ROA not before: Sun 01 Jan 2023 15:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 185.233.132.0/24 maxlen: 24
185.233.135.0/24 maxlen: 24
185.233.134.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:0a:f4:de:14:0f:bd:2b:e5:e9:dc:10:96:99:1a:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e91de17437a0025fd1ede10f710f17a3080b3ab
Validity
Not Before: Jan 1 15:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c10ce8f77a10841842cd2bab4fe8d21befd6ad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c3:46:30:66:39:69:3f:c2:a3:ea:3e:21:f7:
9c:b0:03:f7:56:3f:19:76:3a:60:8c:01:a7:1e:51:
09:71:63:e2:86:29:71:e1:55:87:73:b5:06:aa:c7:
00:25:6a:51:84:8a:f0:03:e5:2e:95:d0:02:82:60:
43:cd:e4:4a:e9:ca:54:83:5c:c9:8a:41:d4:92:58:
d3:02:3b:12:3e:ad:bd:af:3b:29:93:82:a0:12:14:
f9:71:1a:3e:72:4a:ab:55:3f:2a:23:85:52:50:b7:
b9:50:f8:ec:af:2c:0d:b8:c8:fe:fc:13:53:da:5a:
2f:d8:98:c5:c8:a5:e5:6d:44:56:53:47:ea:e0:16:
18:89:52:8c:d2:f5:c5:d4:9d:a9:dd:4b:6d:c7:df:
ff:7f:1c:43:c4:64:f3:fe:14:f2:f6:f2:9c:45:69:
00:f7:d4:0c:61:b8:68:65:50:fe:da:8b:58:ae:99:
88:15:a0:62:ee:ce:8c:64:2b:d2:5a:7a:cd:7c:bb:
94:2f:ed:17:f6:03:37:1a:4a:69:de:36:94:4c:d1:
da:c7:de:9c:a0:52:fe:21:ea:6e:72:3d:b4:58:7f:
91:e0:f1:57:17:40:ba:0c:25:66:ed:19:81:c3:3d:
10:7d:cf:2e:54:da:fd:dd:3f:72:0c:3b:04:5d:84:
81:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:10:CE:8F:77:A1:08:41:84:2C:D2:BA:B4:FE:8D:21:BE:FD:6A:D2
X509v3 Authority Key Identifier:
keyid:0E:91:DE:17:43:7A:00:25:FD:1E:DE:10:F7:10:F1:7A:30:80:B3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DBDOj3ehCEGELNK6tP6NIb79atI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.132.0/24
185.233.134.0/23
Signature Algorithm: sha256WithRSAEncryption
02:55:f4:17:f0:8c:35:90:c4:9f:02:68:26:1a:46:16:75:b0:
f3:ad:ea:07:1f:2c:43:a9:55:ac:f4:65:e7:0e:fe:9c:09:17:
d5:d6:4f:5a:af:fc:ea:56:6a:6b:79:2e:12:5f:b3:15:2c:83:
42:58:77:9e:63:89:bd:68:01:b8:ef:7e:a9:ba:59:b7:63:b8:
2b:b4:d8:8c:ca:b3:e8:4e:6f:c4:c5:28:4e:28:a4:1f:dc:bb:
42:c8:53:39:aa:f3:b4:0c:2c:cb:f6:60:d6:85:e1:4d:a5:b6:
89:93:1b:e8:31:1a:ea:9a:e0:99:92:6f:97:e7:fb:6c:e4:74:
bd:2a:b2:79:d8:ad:92:6b:fa:24:fe:d9:93:06:b2:5e:08:0e:
d2:51:70:75:1a:be:c8:7a:35:f9:c2:38:ee:cb:6c:d1:fc:31:
81:7d:59:40:37:38:ed:1c:0c:48:c7:7a:15:e9:dd:c2:9a:b5:
44:f4:79:df:6d:87:4d:5e:9c:a7:02:5d:5a:54:f9:0b:01:f2:
62:69:a2:81:cf:98:3b:cd:26:4f:3b:f1:f7:60:59:c7:da:93:
d7:37:3f:ee:ea:9a:92:39:c0:88:17:5c:9f:12:3f:6a:9f:19:
9e:69:c1:ea:10:fc:fc:f5:5a:de:fa:b9:86:dc:c4:3d:9a:b5:
01:fc:44:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:31:51 2024 by rpki-client on console-ams.rpki-client.org