Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/i9uTK54_869LzEBqnEEaj1DRy1U.roa
File: i9uTK54_869LzEBqnEEaj1DRy1U.roa (raw, json)
Hash identifier: 9wSQBPm3tzWvMGXa/qlxJGk78nxyQhL9fbteL5N7nvs=
Subject key identifier: 8B:DB:93:2B:9E:3F:F3:AF:4B:CC:40:6A:9C:41:1A:8F:50:D1:CB:55
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 0185738FDA279225FFB8303A7B4DCCB337D2
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/i9uTK54_869LzEBqnEEaj1DRy1U.roa
Signing time: Mon 02 Jan 2023 17:38:05 +0000
ROA not before: Mon 02 Jan 2023 17:38:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13627
IP address blocks: 85.202.160.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:8f:da:27:92:25:ff:b8:30:3a:7b:4d:cc:b3:37:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 17:38:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8bdb932b9e3ff3af4bcc406a9c411a8f50d1cb55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:32:7a:52:b5:14:61:33:1f:e9:5c:75:40:48:
ad:fa:29:2b:d1:1b:db:3a:94:9d:9a:0b:c2:fb:e6:
97:c2:32:b0:70:58:e6:a2:47:c9:ca:f3:85:f9:05:
63:aa:c2:d1:24:ba:1c:ac:8c:94:1d:53:05:d4:73:
b5:57:b8:eb:c7:85:6d:0f:e3:e8:08:9a:0d:84:de:
a5:ca:e9:41:75:d0:aa:ce:59:2d:30:c1:2d:59:b2:
69:60:fa:5f:c2:7f:87:c3:2f:31:4e:98:09:8a:90:
a7:72:b7:67:8e:ce:a4:c5:e5:c4:8f:c6:96:9d:4e:
af:58:8a:11:01:6e:28:75:65:49:11:9d:b8:a1:c3:
f4:df:d4:56:9d:c8:80:64:2c:43:7a:79:7b:e6:a5:
c3:66:1f:10:3e:3d:0a:f3:e5:ff:83:aa:8e:52:6e:
98:16:1d:43:bc:bc:79:60:b8:35:ce:a3:14:0c:b7:
8b:20:63:7c:d2:ed:6f:42:26:1c:45:36:5c:65:1f:
51:ee:53:ea:12:52:b1:d7:2e:96:c0:77:04:92:28:
c9:3f:b0:35:4d:99:f1:b6:52:e6:25:80:ff:20:d8:
6c:72:cf:dc:dc:43:bd:88:7d:41:fe:99:9c:ea:24:
c3:d5:7a:1b:fc:8f:63:b2:5f:c4:6f:1c:2e:ec:59:
9d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:DB:93:2B:9E:3F:F3:AF:4B:CC:40:6A:9C:41:1A:8F:50:D1:CB:55
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/i9uTK54_869LzEBqnEEaj1DRy1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.202.160.0/24
Signature Algorithm: sha256WithRSAEncryption
94:5c:cb:24:30:90:7b:ae:c0:e6:e6:ce:27:1a:7d:0a:da:a8:
06:94:56:ed:19:62:7a:f9:b4:dc:1c:75:9c:b0:3e:21:35:3f:
9a:8a:f0:f2:b0:61:64:45:d9:45:47:67:39:c3:da:4a:cb:0a:
cb:29:d4:b0:27:a0:95:d9:a4:8e:7d:33:15:02:9a:44:8d:04:
64:43:1f:0f:e9:82:b7:4f:36:61:fe:43:be:e8:89:93:65:38:
c3:7e:24:4d:58:0f:e9:ea:d7:6d:bb:3b:16:89:65:93:60:c1:
ea:d3:60:26:72:a3:21:a4:b3:b0:a1:a4:b7:b3:be:12:ff:de:
8d:d9:89:2c:53:31:8c:c0:a7:9c:a5:b9:1b:81:7d:d2:e4:df:
16:d9:ed:ed:47:dd:1c:f6:6b:7a:1d:b4:11:7a:b4:07:35:a8:
67:19:7a:22:a9:8e:8e:bf:c3:82:47:30:b6:9b:89:2c:9f:5b:
3f:bd:51:f7:fa:af:c7:79:c4:43:96:7c:e1:f0:44:57:ff:a7:
0c:c1:c6:96:c9:8b:a1:41:1e:11:2a:58:c5:a6:1b:ed:81:0e:
e4:1a:42:0e:57:e8:3c:66:19:5a:28:74:aa:67:0d:1e:56:41:
59:fc:dd:99:c8:12:71:47:8e:71:31:7e:d6:7c:6f:da:5d:99:
3b:8d:dd:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:27 2023 by rpki-client on console-ams.rpki-client.org