Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/Bj0noRugbu6JIZ-szOm-vGoVhmk.roa
File: Bj0noRugbu6JIZ-szOm-vGoVhmk.roa (raw, json)
Hash identifier: K+AfHGPcTsc9wVTZzPaVNBp6taFIZk/hmRQhj3XOnYE=
Subject key identifier: 06:3D:27:A1:1B:A0:6E:EE:89:21:9F:AC:CC:E9:BE:BC:6A:15:86:69
Certificate issuer: /CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba
Certificate serial: 01856C780F4572AE80CBED9637C1CF2D7450
Authority key identifier: 9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/Bj0noRugbu6JIZ-szOm-vGoVhmk.roa
Signing time: Sun 01 Jan 2023 08:34:45 +0000
ROA not before: Sun 01 Jan 2023 08:34:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35758
IP address blocks: 5.253.186.0/24 maxlen: 24
185.219.162.0/24 maxlen: 24
185.114.205.0/24 maxlen: 24
45.130.32.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:78:0f:45:72:ae:80:cb:ed:96:37:c1:cf:2d:74:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba
Validity
Not Before: Jan 1 08:34:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=063d27a11ba06eee89219faccce9bebc6a158669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b0:71:b7:8e:2d:0b:2d:22:ec:7a:58:79:82:
5b:f5:9e:62:16:2f:a8:04:cc:2d:77:f2:e1:21:90:
2c:4a:30:e6:94:6b:4e:89:16:bf:7f:b0:94:f2:95:
c5:b5:12:17:86:fe:56:ae:7d:03:a0:30:d3:9c:b2:
48:03:7c:5e:9c:a6:3e:70:83:f3:72:20:4c:52:27:
e3:2d:47:55:c2:aa:87:c7:13:4d:f9:a4:1a:82:7c:
ad:76:ea:d7:03:7f:da:32:42:7d:4a:ec:16:ac:7e:
4a:12:52:ec:7b:e2:ed:19:54:c3:e9:2c:f6:ef:60:
da:fe:8e:0c:07:38:f5:1a:93:c8:d8:a6:71:58:02:
a2:07:76:44:e5:5f:4e:93:b0:98:1a:66:3e:1e:ab:
cd:07:58:07:92:94:03:51:ac:bd:0c:79:c7:aa:25:
27:31:de:a1:34:71:88:da:a4:86:a5:d7:72:e0:fb:
b5:83:f9:f5:41:e8:67:c2:17:77:54:07:17:f2:94:
41:e3:59:f2:6e:db:09:32:f0:27:ed:f6:e2:7a:40:
2d:26:7d:56:ca:a0:8b:41:49:02:34:9d:46:d7:80:
db:35:3f:af:d0:2b:db:cb:8e:52:49:5b:15:c3:1f:
e7:1f:93:c0:9a:a9:5a:4e:e7:a9:28:92:1d:05:1a:
d4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:3D:27:A1:1B:A0:6E:EE:89:21:9F:AC:CC:E9:BE:BC:6A:15:86:69
X509v3 Authority Key Identifier:
keyid:9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/Bj0noRugbu6JIZ-szOm-vGoVhmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.186.0/24
45.130.32.0/24
185.114.205.0/24
185.219.162.0/24
Signature Algorithm: sha256WithRSAEncryption
93:b9:3c:5a:f4:b1:d8:97:24:55:cc:e0:71:70:a0:10:42:cf:
39:fd:81:39:78:29:2c:be:21:ae:0b:36:0e:4a:e3:69:a4:52:
91:45:50:d9:40:2c:87:ac:6e:67:00:1d:93:d7:80:56:59:03:
5a:7c:af:de:17:52:bf:a2:89:9b:4c:26:ef:03:7f:eb:ea:48:
4c:ec:4c:4b:a0:e8:66:f9:70:58:c2:5e:70:19:df:cf:0d:77:
0a:25:3f:4f:4f:4a:31:2d:de:cf:c4:6c:7d:ab:b5:4e:33:d7:
79:5c:f0:97:4a:59:04:ab:61:92:03:40:2d:82:b1:9c:36:f8:
03:05:fd:0e:c6:8f:f0:13:bc:19:81:8a:48:69:47:76:97:bc:
9c:c3:3f:85:59:a2:89:dc:b9:08:42:f6:b5:c1:51:d4:2e:f4:
41:f7:41:e5:b0:81:08:94:cd:79:2d:92:7e:67:56:7e:8e:56:
09:e4:1a:1a:16:fc:11:41:fc:02:26:28:23:0b:9d:f3:42:71:
15:67:53:b1:ea:3a:23:63:ab:b3:ba:3a:6a:ac:84:1d:72:a7:
09:4e:7b:01:c2:27:3c:ff:6f:98:f9:80:e3:48:30:d6:66:93:
1a:97:76:a2:e8:d0:d5:53:3a:95:c2:3d:e9:48:26:c6:38:8a:
b1:bd:9b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:49 2023 by rpki-client on console-fra.rpki-client.org