Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/lB2v7L5QcecRK0ZWOabxn22A-s0.roa
File: lB2v7L5QcecRK0ZWOabxn22A-s0.roa (raw, json)
Hash identifier: Ck0z+G32bJUR86NH2FZCIpCyHp9PgJKBs5Q91OR3kuo=
Subject key identifier: 94:1D:AF:EC:BE:50:71:E7:11:2B:46:56:39:A6:F1:9F:6D:80:FA:CD
Certificate issuer: /CN=0e91de17437a0025fd1ede10f710f17a3080b3ab
Certificate serial: 01856E0AF3852F1C11670A183CD24DBDC778
Authority key identifier: 0E:91:DE:17:43:7A:00:25:FD:1E:DE:10:F7:10:F1:7A:30:80:B3:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/lB2v7L5QcecRK0ZWOabxn22A-s0.roa
Signing time: Sun 01 Jan 2023 15:54:49 +0000
ROA not before: Sun 01 Jan 2023 15:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205763
IP address blocks: 185.207.124.0/24 maxlen: 24
185.207.125.0/24 maxlen: 24
185.207.127.0/24 maxlen: 24
185.207.126.0/24 maxlen: 24
2a0b:2340::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:0a:f3:85:2f:1c:11:67:0a:18:3c:d2:4d:bd:c7:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e91de17437a0025fd1ede10f710f17a3080b3ab
Validity
Not Before: Jan 1 15:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=941dafecbe5071e7112b465639a6f19f6d80facd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a2:cb:22:b7:36:51:43:d8:d5:fe:32:d8:91:
fe:39:b7:bc:f0:56:7a:09:4f:f3:99:fc:e0:8f:aa:
f7:25:b8:35:3e:5d:b7:04:bf:46:e7:77:b7:6a:b4:
23:7e:f3:d5:14:53:b3:4c:be:bf:39:33:f5:6a:ea:
d0:8f:60:7d:2b:78:0f:18:be:1c:dc:a7:35:40:23:
87:e6:ba:ef:ef:fe:2e:23:88:a4:7f:4b:6c:83:65:
7e:fb:29:f0:27:07:35:9a:26:ba:23:2b:84:5d:81:
c3:12:63:14:7c:52:e6:46:e0:64:ac:67:32:5e:0d:
18:f4:f0:fa:ab:ef:8d:56:03:eb:a6:e9:61:89:10:
7c:14:09:41:49:8c:d8:f9:88:5b:89:18:0e:07:9e:
7a:6e:a4:32:89:11:02:f2:cc:d6:b9:8e:c4:3f:4d:
cf:47:52:c4:77:cd:d8:9c:b7:cf:b4:3e:27:8b:38:
f4:0f:a1:6c:96:2f:e0:af:2a:2d:a9:4d:ff:64:18:
3b:72:ca:cf:65:8d:c4:5f:49:cb:ba:d3:af:f0:54:
ea:b2:21:a0:b0:3e:67:bc:0f:b5:7c:dc:8f:17:87:
94:f9:27:78:43:31:7e:d0:06:eb:82:d0:86:a9:3c:
d1:6f:aa:b5:35:16:2f:36:18:9c:2b:bf:81:8d:c0:
05:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:1D:AF:EC:BE:50:71:E7:11:2B:46:56:39:A6:F1:9F:6D:80:FA:CD
X509v3 Authority Key Identifier:
keyid:0E:91:DE:17:43:7A:00:25:FD:1E:DE:10:F7:10:F1:7A:30:80:B3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/lB2v7L5QcecRK0ZWOabxn22A-s0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.207.124.0/22
IPv6:
2a0b:2340::/29
Signature Algorithm: sha256WithRSAEncryption
4e:15:93:09:6f:95:52:31:0b:5b:8f:fd:f1:ce:bf:d2:4d:5c:
bb:4a:0b:de:e8:0e:be:d4:ce:a7:e6:ac:58:97:d5:82:1d:47:
a9:79:e2:47:98:b5:e3:39:15:8b:c5:ac:3c:bb:83:9d:df:ba:
38:39:58:66:3f:eb:45:14:a4:a3:f7:39:8b:1a:07:98:22:f3:
ae:ac:b8:2e:ff:d8:b9:e7:5f:9c:21:9d:ab:8e:4f:65:cf:77:
ee:de:c7:c0:24:bf:2b:05:6f:52:85:74:ae:16:f1:7a:fb:02:
53:65:7d:28:f0:30:e5:75:57:4b:aa:e8:a3:d6:fa:3e:13:0a:
9b:6e:6e:c4:3e:68:70:c4:de:6a:b9:7f:45:66:29:57:b0:01:
2c:50:df:3a:d3:1b:e8:df:c6:b7:45:81:b6:2f:1c:99:f4:d6:
17:ff:f4:ff:69:7e:77:a0:18:84:a4:b7:dd:e5:5f:18:d9:bc:
3a:2e:7f:36:3c:1a:20:81:80:c1:d6:4f:8c:40:6e:73:1c:50:
de:b3:a4:22:33:7e:bc:f9:bd:3c:0e:4e:99:be:b1:c6:33:e6:
ee:fa:a5:ce:e6:83:3f:2d:a0:5c:2f:e0:b5:17:df:4d:8f:fb:
92:85:54:0e:e4:56:27:7c:21:63:1a:fa:c5:07:41:a1:44:aa:
91:52:61:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 28 15:13:55 2023 by rpki-client on console-fra.rpki-client.org