Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/1-ArTcZhuza0OX1ilTVTap-R9ndI.roa
File: 1-ArTcZhuza0OX1ilTVTap-R9ndI.roa (raw, json)
Hash identifier: Ie4Uv6gvyCON4Bbl/0XmHhzhMgiEEZUNGLdO8Pc/Cmo=
Subject key identifier: F8:0A:D3:71:98:6E:CD:AD:0E:5F:58:A5:4D:54:DA:A7:E4:7D:9D:D2
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018C44EAD6BC25EA4181FF132D2BCE7CDAAC
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/1-ArTcZhuza0OX1ilTVTap-R9ndI.roa
Signing time: Thu 07 Dec 2023 15:34:50 +0000
ROA not before: Thu 07 Dec 2023 15:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7029
IP address blocks: 185.255.99.0/24 maxlen: 24
194.180.238.0/24 maxlen: 24
195.138.120.0/24 maxlen: 24
185.15.136.0/23 maxlen: 24
89.32.126.0/24 maxlen: 24
92.118.108.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:44:ea:d6:bc:25:ea:41:81:ff:13:2d:2b:ce:7c:da:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Dec 7 15:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f80ad371986ecdad0e5f58a54d54daa7e47d9dd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:86:96:5a:93:df:04:af:b2:be:c7:a1:6e:62:
fc:79:bd:a0:11:14:1a:ac:e6:4b:fb:3b:7b:14:e8:
d8:d8:34:bd:25:6d:ea:9c:79:9e:bc:e4:49:cb:5e:
cc:46:55:90:42:a1:ad:64:2a:9e:a2:49:a0:3e:d6:
c5:9b:7c:50:36:a2:cc:4f:8d:50:eb:29:87:fb:81:
7f:9b:88:92:d9:a1:96:4a:14:a6:4e:a5:74:c9:c7:
66:5e:a9:30:f9:6a:2b:5d:ca:69:cb:e9:79:24:d5:
7c:cc:15:9a:c4:38:27:2f:56:87:cf:b2:d2:d1:39:
43:f8:8d:6f:cb:f3:98:ee:0a:42:d3:ac:ae:7e:20:
85:33:09:54:94:14:06:8b:20:ce:53:cb:5e:1c:a2:
92:bf:3d:87:4e:aa:37:18:8c:5d:96:b7:3f:52:d6:
40:e2:71:fc:86:03:69:92:f6:0f:79:e7:d1:9d:3b:
aa:c8:0c:45:da:9a:64:b6:85:49:63:87:21:86:fe:
84:da:66:5e:6e:6b:57:08:fc:19:92:04:e1:88:b6:
4a:1b:06:9e:cc:e6:d6:fb:5a:28:2b:4d:74:e2:f5:
b3:f6:65:d5:b6:e9:bd:13:c9:62:fa:59:bc:22:0c:
b7:f1:66:c2:89:3c:cf:6c:ec:d2:73:dd:03:68:b8:
c6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:0A:D3:71:98:6E:CD:AD:0E:5F:58:A5:4D:54:DA:A7:E4:7D:9D:D2
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/1-ArTcZhuza0OX1ilTVTap-R9ndI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.32.126.0/24
92.118.108.0/24
185.15.136.0/23
185.255.99.0/24
194.180.238.0/24
195.138.120.0/24
Signature Algorithm: sha256WithRSAEncryption
50:75:64:f9:97:7d:30:90:47:dd:82:a4:db:2f:54:b8:20:a9:
d4:54:8e:5f:eb:22:a7:62:be:05:78:9d:94:33:94:da:d7:b7:
ff:51:58:ac:f6:6e:2b:2a:4e:c2:97:ab:2d:57:80:a0:c6:a7:
a8:78:60:98:22:ed:b4:77:03:91:13:bb:b9:07:99:f8:67:5a:
54:cb:52:69:1e:f4:91:a0:42:74:99:dc:4d:5c:d1:ec:29:8e:
d1:5c:7f:6b:a6:1f:df:43:04:65:93:9b:ae:84:c3:90:36:b4:
ca:f4:e8:9a:e8:7c:4b:82:a3:66:ac:43:08:21:87:cd:47:b6:
57:63:75:f9:1e:b9:83:5f:22:b7:1e:60:b8:b2:bc:60:99:92:
b7:4b:2f:37:20:c8:2b:c1:f1:25:1b:a6:5c:89:64:22:ea:7e:
45:75:72:d0:a8:da:65:8e:2e:57:65:c9:d9:0a:2f:39:fd:f8:
67:eb:fc:cb:c5:85:8a:96:78:b9:87:a8:03:5b:9e:61:be:00:
24:64:d7:26:5f:bf:00:03:7c:7c:b0:6a:15:54:8c:ad:92:a8:
df:85:d8:20:33:88:d5:7d:ce:a6:98:b8:12:c0:f7:de:6d:a3:
b7:2e:17:73:a4:e2:d6:e7:f8:40:54:6e:00:0f:cc:e9:e5:6e:
df:d8:b5:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 7 16:42:11 2023 by rpki-client on console-ams.rpki-client.org