Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/i8uQgORigb6prBhp3RPCwyTMUWM.roa
File: i8uQgORigb6prBhp3RPCwyTMUWM.roa (raw, json)
Hash identifier: YxX2quHP2k3ZgClvDnOqESOBYBqI8x4Gp2H2MZGpUww=
Subject key identifier: 8B:CB:90:80:E4:62:81:BE:A9:AC:18:69:DD:13:C2:C3:24:CC:51:63
Certificate issuer: /CN=52eb03d211996e99a49e3c3f9ce4b3f2a15723c5
Certificate serial: 01856DDD41FD8A4E5034CE16156E9796F053
Authority key identifier: 52:EB:03:D2:11:99:6E:99:A4:9E:3C:3F:9C:E4:B3:F2:A1:57:23:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UusD0hGZbpmknjw_nOSz8qFXI8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/i8uQgORigb6prBhp3RPCwyTMUWM.roa
Signing time: Sun 01 Jan 2023 15:04:54 +0000
ROA not before: Sun 01 Jan 2023 15:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47267
IP address blocks: 91.199.17.0/24 maxlen: 24
185.182.160.0/22 maxlen: 22
185.182.160.0/24 maxlen: 24
185.182.161.0/24 maxlen: 24
185.182.162.0/24 maxlen: 24
185.182.163.0/24 maxlen: 24
2a0f:eb80:1::/48 maxlen: 48
2001:67c:69c::/48 maxlen: 48
2a0f:eb80:a::/48 maxlen: 48
2a0f:eb80::/32 maxlen: 32
2a0f:eb80::/48 maxlen: 48
2a0f:eb80:f::/48 maxlen: 48
2a0f:eb80::/44 maxlen: 44
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:dd:41:fd:8a:4e:50:34:ce:16:15:6e:97:96:f0:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52eb03d211996e99a49e3c3f9ce4b3f2a15723c5
Validity
Not Before: Jan 1 15:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8bcb9080e46281bea9ac1869dd13c2c324cc5163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a3:ab:a6:75:a1:7d:a1:24:d1:8e:82:45:8d:
0d:8c:34:37:93:12:47:ee:ee:7f:35:35:fa:9a:8c:
38:09:35:77:62:5c:26:a3:83:03:9a:3a:db:33:12:
6e:0e:ab:0d:cd:a1:c3:0a:cf:73:2e:c6:ce:0f:c6:
da:1e:05:92:dc:62:f8:40:5b:b8:b5:49:a2:42:20:
0c:7f:c1:0a:69:dd:94:1f:3d:b4:6c:95:4a:3a:56:
65:45:08:4c:fe:14:c1:e9:7c:9b:21:f0:f6:b5:60:
4e:44:21:d0:68:6b:65:78:1c:fb:02:38:2b:23:5b:
5c:23:4f:3a:64:67:5e:e6:ac:71:17:3e:c1:f5:a5:
49:68:5e:a4:5a:f7:bb:11:41:4e:da:16:ae:d7:14:
e8:b4:51:f9:b3:7b:bc:7e:a8:14:ed:05:1c:c9:ab:
4b:9d:8e:b9:bf:c7:0e:cf:29:d7:bf:46:2c:e5:24:
f6:44:6b:36:69:9f:7f:73:cd:a4:57:fd:03:36:b3:
d2:0b:71:2e:30:a9:dd:5e:c2:41:ba:59:f9:a5:66:
e4:6c:8f:4e:50:78:09:d4:ce:fb:b8:52:f2:85:03:
b7:de:5d:06:39:0f:eb:05:e2:bc:e5:ae:5d:31:6f:
0e:e7:a4:7c:c8:a9:c2:a4:30:5c:c6:c8:e3:ba:2a:
26:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:CB:90:80:E4:62:81:BE:A9:AC:18:69:DD:13:C2:C3:24:CC:51:63
X509v3 Authority Key Identifier:
keyid:52:EB:03:D2:11:99:6E:99:A4:9E:3C:3F:9C:E4:B3:F2:A1:57:23:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UusD0hGZbpmknjw_nOSz8qFXI8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/i8uQgORigb6prBhp3RPCwyTMUWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.17.0/24
185.182.160.0/22
IPv6:
2001:67c:69c::/48
2a0f:eb80::/32
Signature Algorithm: sha256WithRSAEncryption
47:f2:bc:3f:0b:6e:da:66:c3:c3:5b:c0:86:9a:86:b5:af:05:
2d:fb:e8:1b:d2:94:c2:05:7d:b4:2c:22:f1:4b:89:67:51:37:
c3:b8:d4:ea:69:06:23:1f:6a:16:4a:d1:15:38:65:dd:48:ec:
f5:d3:5d:71:d8:95:62:4a:30:c5:42:a1:71:28:fa:73:0b:d1:
97:9b:3d:d4:67:54:8a:91:0b:bb:c5:da:37:0f:09:f4:09:60:
38:ba:d4:08:6e:59:c7:28:1e:6e:5e:c1:09:ba:28:2f:c6:ac:
42:a5:80:57:97:7e:92:5f:cd:e9:40:51:01:af:3a:a3:d1:a9:
ca:53:6e:39:61:4c:7b:6a:28:87:83:38:df:aa:b9:e9:89:26:
b3:0b:5d:12:58:33:21:65:6b:fc:9f:17:5d:52:f9:3b:6f:4f:
3f:c6:41:54:9b:3e:2d:6d:e2:21:18:01:16:bf:76:26:f9:13:
3d:02:8a:6d:81:38:5d:86:bf:80:cc:80:55:08:87:d1:1d:53:
c1:ae:91:f9:94:71:a0:6f:ed:3f:21:97:88:71:05:ec:7f:bf:
41:27:0d:05:a5:7b:4c:d0:75:2c:e5:5e:d6:2a:5b:9d:d5:c0:
6d:e9:73:8e:84:3b:c6:de:4e:a0:ed:2f:91:4b:a5:42:98:3a:
22:a5:71:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:29:46 2024 by rpki-client on console-ams.rpki-client.org