Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/uIZGL0XzFqn2bsaxHGGm89jgJR8.roa
File: uIZGL0XzFqn2bsaxHGGm89jgJR8.roa (raw, json)
Hash identifier: ICCiHEs99N2EHrHsVYjPqZHHx9Cjo81lfDuVRRnw2mQ=
Subject key identifier: B8:86:46:2F:45:F3:16:A9:F6:6E:C6:B1:1C:61:A6:F3:D8:E0:25:1F
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018571A7A82EE29CAFDA6F5244FB5758F7F8
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/uIZGL0XzFqn2bsaxHGGm89jgJR8.roa
Signing time: Mon 02 Jan 2023 08:44:51 +0000
ROA not before: Mon 02 Jan 2023 08:44:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62071
IP address blocks: 185.212.8.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:a7:a8:2e:e2:9c:af:da:6f:52:44:fb:57:58:f7:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 2 08:44:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b886462f45f316a9f66ec6b11c61a6f3d8e0251f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:28:04:e8:78:e0:c2:f5:2c:02:26:ea:c2:08:
59:a3:b9:07:79:68:90:61:20:f0:74:2c:81:e2:48:
99:d4:80:9b:84:48:8f:37:44:bc:8b:f8:3b:44:c7:
31:87:b3:d2:57:b2:91:97:be:ca:09:e9:db:a9:fd:
5f:fb:72:5b:8e:e3:48:6e:e0:d7:91:2a:d8:2c:56:
0c:d7:b7:b6:10:0f:d4:19:fc:d1:81:6f:e7:c8:5b:
43:5a:7a:98:ea:6a:a8:86:9d:36:2c:42:70:48:ad:
5e:7d:5f:59:60:64:64:0e:a2:6c:64:b3:c6:02:5f:
44:58:55:ee:51:31:b3:7f:d2:7b:1c:fc:65:d5:a6:
ef:55:8e:33:84:a3:96:91:bb:c4:a5:2e:b0:46:47:
0b:e3:1d:8e:b5:2b:10:2f:9b:5e:4d:25:2a:24:ed:
57:13:30:4a:9c:25:00:e6:1b:70:8a:83:8f:04:31:
c2:06:52:a5:fe:fe:69:7e:a5:a6:9c:51:b3:0b:37:
f1:19:d8:1c:10:7d:49:05:22:04:b9:48:e1:b2:b4:
38:dc:29:b0:ff:70:4c:6e:3e:0b:79:fe:a2:2f:06:
2b:38:e2:d0:b5:57:f0:40:52:4f:f9:64:b1:b4:39:
a1:9c:81:b6:e6:da:7a:fa:60:49:7c:67:05:9a:c4:
d2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:86:46:2F:45:F3:16:A9:F6:6E:C6:B1:1C:61:A6:F3:D8:E0:25:1F
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/uIZGL0XzFqn2bsaxHGGm89jgJR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.8.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:c8:d4:bf:61:ba:8c:9d:41:be:72:1b:b3:26:f9:72:09:28:
6d:28:a2:de:50:6c:f2:3f:0b:9a:95:95:e2:00:d3:a7:92:48:
26:79:21:d1:ee:33:51:82:5f:1b:f9:28:05:28:db:6f:f5:fb:
05:c6:42:39:1d:18:7c:f1:2a:09:49:b5:47:39:a1:c9:54:72:
a7:ff:fe:49:8d:73:fa:c6:72:f7:b1:a9:85:ba:83:7d:00:1e:
3f:96:e4:b1:1f:f8:3c:b3:79:a6:4e:3e:2a:1d:b9:cb:4a:12:
0c:a3:47:6d:c8:4f:c5:b4:d6:b9:88:e5:13:39:76:d5:26:a3:
5a:6e:52:99:fa:6a:61:6f:9d:a2:89:19:ea:e3:6e:05:6a:8a:
01:1d:95:86:cd:52:85:cd:ac:47:2b:b8:74:62:95:2a:20:f1:
fb:e5:58:d1:dd:1b:04:88:c8:b6:f6:d4:ff:0e:a8:b3:14:ae:
e0:26:13:8d:be:94:10:70:80:b3:18:c6:e1:3f:1c:1d:03:04:
bd:13:df:d5:e1:4a:83:91:dd:9d:44:bd:37:b1:85:39:97:d6:
b1:fc:e6:cf:0d:58:64:16:24:69:68:81:31:b5:cf:91:6e:6d:
a0:12:cc:ae:b0:e8:95:5c:cd:fa:fc:d6:86:02:b8:05:7f:f6:
18:da:7c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:21 2024 by rpki-client on console-fra.rpki-client.org