Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/7fd500-00b8-454e-8733-99b4d4ace693/1/u2ztaaF18kilfYwsAxpjQp3EhCc.roa
File: u2ztaaF18kilfYwsAxpjQp3EhCc.roa (raw, json)
Hash identifier: /ZOsMQADf2sxwFebGg9OwiN1vhVp0v//mpJe6rY/qWc=
Subject key identifier: BB:6C:ED:69:A1:75:F2:48:A5:7D:8C:2C:03:1A:63:42:9D:C4:84:27
Certificate issuer: /CN=b8b6b49be4d60a072a4ba6ca9793f893b59e4c9e
Certificate serial: 01856CF8378508EE85713331897ED6FB9EC7
Authority key identifier: B8:B6:B4:9B:E4:D6:0A:07:2A:4B:A6:CA:97:93:F8:93:B5:9E:4C:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uLa0m-TWCgcqS6bKl5P4k7WeTJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/7fd500-00b8-454e-8733-99b4d4ace693/1/u2ztaaF18kilfYwsAxpjQp3EhCc.roa
Signing time: Sun 01 Jan 2023 10:54:44 +0000
ROA not before: Sun 01 Jan 2023 10:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44454
IP address blocks: 178.216.88.0/21 maxlen: 32
85.202.144.0/20 maxlen: 32
185.46.104.0/22 maxlen: 32
2a01:8160::/32 maxlen: 64
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:f8:37:85:08:ee:85:71:33:31:89:7e:d6:fb:9e:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8b6b49be4d60a072a4ba6ca9793f893b59e4c9e
Validity
Not Before: Jan 1 10:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bb6ced69a175f248a57d8c2c031a63429dc48427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:2d:6c:e1:8b:89:78:68:07:2e:90:cd:1f:f7:
f4:e2:45:59:94:77:db:a4:47:a8:5d:10:72:51:b6:
c6:04:cc:36:2f:5e:eb:79:a6:a9:46:5f:8f:64:a2:
8c:1a:df:d4:74:25:dd:92:4c:3b:4b:81:78:98:40:
27:1e:71:09:0c:cc:8d:25:d0:78:ab:53:9d:7e:5d:
9e:8f:f4:d6:8d:bd:4b:7c:e3:d5:f4:71:ac:73:04:
4b:29:ed:d0:50:db:dc:bb:d5:4e:87:09:7a:37:a6:
2b:dd:e8:dc:c7:10:d4:61:9e:7b:d3:8b:9e:83:55:
24:00:d4:a9:64:a1:32:fc:3f:d0:ec:3c:ba:0f:90:
30:f5:5c:ca:ad:5d:35:b9:96:7a:3b:a9:52:0e:b7:
dd:c5:46:f5:36:e0:0e:b5:ef:55:85:0a:dc:e3:25:
b0:3c:7e:10:8c:ac:98:d9:1a:89:20:71:7b:1f:b5:
74:46:a3:49:f9:90:e4:40:5d:18:62:b2:6e:d6:6e:
b4:e4:c6:da:58:ec:33:41:46:a8:f5:2c:98:b1:91:
01:5d:25:41:e0:a6:34:0e:a4:16:89:a9:08:83:f4:
82:42:e0:bd:c9:a6:7f:a9:a4:fe:68:c3:e0:f7:9c:
67:b8:a8:ae:69:9b:e2:76:9b:76:96:a4:f4:97:91:
dd:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:6C:ED:69:A1:75:F2:48:A5:7D:8C:2C:03:1A:63:42:9D:C4:84:27
X509v3 Authority Key Identifier:
keyid:B8:B6:B4:9B:E4:D6:0A:07:2A:4B:A6:CA:97:93:F8:93:B5:9E:4C:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uLa0m-TWCgcqS6bKl5P4k7WeTJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/7fd500-00b8-454e-8733-99b4d4ace693/1/u2ztaaF18kilfYwsAxpjQp3EhCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/7fd500-00b8-454e-8733-99b4d4ace693/1/uLa0m-TWCgcqS6bKl5P4k7WeTJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.202.144.0/20
178.216.88.0/21
185.46.104.0/22
IPv6:
2a01:8160::/32
Signature Algorithm: sha256WithRSAEncryption
51:ab:73:c2:04:d2:6d:e3:94:cb:55:d4:6a:7a:fa:9f:d3:26:
43:03:f5:94:d8:03:e5:84:48:6a:d1:d2:85:34:1d:bd:3b:32:
f8:c7:83:e0:be:1b:10:32:7d:9d:8f:b4:39:be:dd:5e:2f:68:
d1:80:07:83:ff:12:6d:7e:8f:21:25:a8:7e:d9:38:b5:68:6d:
c5:34:89:2a:fd:fa:31:97:42:b1:7e:66:a5:d3:14:04:e0:9a:
a7:c8:cf:ad:b1:3a:84:86:1c:3b:f6:33:c1:d6:f8:21:b5:4d:
31:21:fa:e3:d9:31:05:9a:f1:97:34:0f:34:b7:b8:cd:88:26:
7d:9d:28:ea:e5:da:64:4a:45:3e:ef:58:23:ee:f0:e6:62:c7:
1c:10:3a:a8:01:71:ed:bd:8e:1b:1e:b5:a4:c3:04:a1:e2:15:
61:05:30:81:77:50:cf:6c:b0:76:db:e7:60:4d:24:d0:dc:6d:
8e:51:39:98:91:cd:e6:a3:f8:24:62:24:f1:b8:c6:be:3e:e7:
a2:46:01:9d:3e:a7:c0:f5:0b:a3:9c:ad:5f:c8:aa:79:b7:7f:
9a:f3:9f:78:73:ca:b5:23:b5:92:47:44:1e:67:c0:19:29:ce:
7c:04:7a:0e:54:65:f3:06:ba:03:1d:e7:59:43:65:f4:ed:1c:
25:3e:37:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:33:46 2024 by rpki-client on console-fra.rpki-client.org