Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/Su2QTt00j07jBi7-2vmxV7CXd8w.roa
File: Su2QTt00j07jBi7-2vmxV7CXd8w.roa (raw, json)
Hash identifier: ouWZA1wWuVWWBsEgUOrwIQbfxwT1pD+5dxpRtig5D4E=
Subject key identifier: 4A:ED:90:4E:DD:34:8F:4E:E3:06:2E:FE:DA:F9:B1:57:B0:97:77:CC
Certificate issuer: /CN=b0a7252aa643d0dbc42da410e9c20f5703368cd8
Certificate serial: 018572F11BBDE893B975D576C389F73EF54E
Authority key identifier: B0:A7:25:2A:A6:43:D0:DB:C4:2D:A4:10:E9:C2:0F:57:03:36:8C:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sKclKqZD0NvELaQQ6cIPVwM2jNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/Su2QTt00j07jBi7-2vmxV7CXd8w.roa
Signing time: Mon 02 Jan 2023 14:44:41 +0000
ROA not before: Mon 02 Jan 2023 14:44:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21067
IP address blocks: 185.110.149.0/24 maxlen: 24
185.110.150.0/24 maxlen: 24
185.110.151.0/24 maxlen: 24
185.110.148.0/22 maxlen: 22
185.110.148.0/24 maxlen: 24
2a06:5844::/30 maxlen: 30
2a06:5840::/29 maxlen: 29
2a06:5840::/30 maxlen: 30
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:f1:1b:bd:e8:93:b9:75:d5:76:c3:89:f7:3e:f5:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0a7252aa643d0dbc42da410e9c20f5703368cd8
Validity
Not Before: Jan 2 14:44:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4aed904edd348f4ee3062efedaf9b157b09777cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:10:88:ca:94:19:8d:9f:60:81:f9:90:92:69:
ad:5b:c1:2f:24:f3:82:eb:47:d3:90:2c:43:f2:42:
db:72:ce:d8:1a:75:fb:3f:7c:be:04:12:7f:bd:76:
08:d9:29:73:22:e8:81:c9:06:ca:16:ae:bb:d5:92:
4b:f6:01:a2:f4:98:a7:87:cc:1f:5f:0b:4d:c5:bb:
d9:9e:cb:1d:f9:ba:ba:a3:9f:ef:8a:e6:13:ec:bf:
ee:22:ea:fd:6d:c3:5b:65:bd:54:0f:29:dd:99:a1:
f3:8f:a6:01:4e:5f:8d:85:2a:85:aa:17:c0:b8:f0:
25:58:2e:fb:5a:f6:0c:28:12:d0:2c:e8:d5:59:e1:
32:c6:bf:2c:4f:05:02:3b:70:b5:75:4d:ec:da:6f:
5a:a2:c7:2d:99:ec:80:03:6a:d1:ce:14:65:6f:a4:
39:43:e2:e7:e8:1f:ad:ec:95:8a:2f:16:16:50:c3:
1e:8e:81:ff:65:38:17:61:01:07:4b:63:19:01:42:
f8:2d:33:ec:c3:44:15:d7:97:6c:81:74:7d:46:18:
9c:c0:0a:b8:3c:57:99:1a:43:d0:78:f4:43:6f:23:
da:25:3d:5f:98:42:e1:18:a0:ca:15:e0:1f:64:28:
3d:93:e4:a7:01:15:4d:6f:85:c4:2d:02:98:90:40:
df:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:ED:90:4E:DD:34:8F:4E:E3:06:2E:FE:DA:F9:B1:57:B0:97:77:CC
X509v3 Authority Key Identifier:
keyid:B0:A7:25:2A:A6:43:D0:DB:C4:2D:A4:10:E9:C2:0F:57:03:36:8C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKclKqZD0NvELaQQ6cIPVwM2jNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/Su2QTt00j07jBi7-2vmxV7CXd8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/sKclKqZD0NvELaQQ6cIPVwM2jNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.110.148.0/22
IPv6:
2a06:5840::/29
Signature Algorithm: sha256WithRSAEncryption
6d:3e:54:20:92:bf:28:69:bf:5f:bf:9a:8f:bc:c7:3b:29:85:
99:b1:2a:4b:dd:86:9c:7a:68:32:c9:d1:d4:81:4e:c4:61:28:
18:92:ac:3d:d9:ca:d8:ab:2c:71:09:7d:2f:e3:f9:b6:19:12:
37:bc:b1:9d:6d:ec:93:b2:0f:b7:21:4a:d6:08:24:ec:02:18:
35:3b:7f:c4:9e:91:21:e3:9e:ca:fb:10:19:53:61:79:aa:58:
d1:21:56:a1:11:1c:72:b9:96:7c:1f:d2:89:dd:ee:a3:95:4f:
6a:58:38:1a:e5:71:d8:66:64:5d:91:b5:fe:b7:94:66:d1:5f:
0f:44:98:c4:62:ae:5b:2f:0c:b1:cd:3a:36:57:af:0d:9a:bf:
95:db:fd:78:06:83:1c:5f:28:e7:2f:ce:dc:73:dc:60:03:ee:
68:65:61:e1:86:08:42:56:74:99:45:87:f4:1f:ce:23:10:71:
64:9e:15:36:d3:27:ea:2d:ae:d8:51:e3:2b:ad:e6:6d:e0:cf:
9b:55:50:af:87:db:21:b6:a1:97:8d:07:5d:7e:6b:75:d5:1e:
bc:c6:d9:69:42:c0:1f:5f:9f:a7:90:a0:23:ab:73:13:38:14:
e8:c6:f4:0a:99:16:eb:06:69:b5:14:f9:24:03:c9:ff:aa:83:
98:41:c6:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:36 2023 by rpki-client on console-fra.rpki-client.org