Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/Le5_rapu2By3ebnWc6__IA_1_9I.roa
File: Le5_rapu2By3ebnWc6__IA_1_9I.roa (raw, json)
Hash identifier: tvC6W99KP6er71gRxS6jJY3+yXUsIcWc9dQdrtnryEs=
Subject key identifier: 2D:EE:7F:AD:AA:6E:D8:1C:B7:79:B9:D6:73:AF:FF:20:0F:F5:FF:D2
Certificate issuer: /CN=8f90f6b75e913f2782ed549eb72172c59cc47af1
Certificate serial: 018630930131A07D33A3013EA1705C68E40F
Authority key identifier: 8F:90:F6:B7:5E:91:3F:27:82:ED:54:9E:B7:21:72:C5:9C:C4:7A:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5D2t16RPyeC7VSetyFyxZzEevE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/Le5_rapu2By3ebnWc6__IA_1_9I.roa
Signing time: Wed 08 Feb 2023 10:29:45 +0000
ROA not before: Wed 08 Feb 2023 10:29:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203924
IP address blocks: 185.113.144.0/22 maxlen: 22
185.146.36.0/22 maxlen: 22
185.216.120.0/22 maxlen: 22
85.117.252.0/22 maxlen: 22
193.105.0.0/24 maxlen: 24
2a06:6a40::/29 maxlen: 29
2a0b:b640::/29 maxlen: 29
2a07:4d00::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:30:93:01:31:a0:7d:33:a3:01:3e:a1:70:5c:68:e4:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f90f6b75e913f2782ed549eb72172c59cc47af1
Validity
Not Before: Feb 8 10:29:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2dee7fadaa6ed81cb779b9d673afff200ff5ffd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d2:e4:60:ca:39:2d:a1:77:6b:82:d7:c9:dc:
25:e1:e4:63:4e:1a:5d:3f:20:61:e0:9d:32:72:95:
1c:84:c3:6f:50:df:5e:ec:4f:11:68:ec:75:9f:e6:
38:ef:99:4c:96:00:e7:40:52:ea:2f:6d:62:79:52:
3f:5d:68:fc:c4:0e:2d:9f:fc:2b:95:d3:5b:fd:73:
90:ed:e3:8b:ac:f6:b1:70:d8:4f:86:9e:19:59:2d:
b3:19:4a:7c:0f:ad:1c:c6:11:15:0b:42:0d:fe:0b:
99:46:01:33:fa:be:18:55:21:2c:ba:f0:47:fd:92:
34:c4:68:49:1f:ee:6e:b8:f1:0a:29:b4:00:17:58:
5e:15:75:04:2f:f6:a1:50:fd:00:55:cf:0f:34:c6:
73:45:0c:0b:64:e5:02:b9:42:d0:09:ba:4c:74:90:
9d:7d:cc:3a:51:44:1a:6c:32:cc:94:f0:a7:69:0f:
64:58:86:cd:b4:d2:bd:e7:fa:8d:15:ae:70:22:3e:
7e:b4:5c:41:5b:4c:1d:49:00:31:2a:30:04:00:13:
bc:12:4e:20:4a:9b:b0:e1:52:f6:ee:27:65:33:37:
69:b5:30:9e:59:45:e2:c7:a8:f4:92:99:16:c4:94:
19:3a:dd:1e:0d:93:74:12:ec:ad:5c:5b:0f:d4:50:
99:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:EE:7F:AD:AA:6E:D8:1C:B7:79:B9:D6:73:AF:FF:20:0F:F5:FF:D2
X509v3 Authority Key Identifier:
keyid:8F:90:F6:B7:5E:91:3F:27:82:ED:54:9E:B7:21:72:C5:9C:C4:7A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5D2t16RPyeC7VSetyFyxZzEevE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/Le5_rapu2By3ebnWc6__IA_1_9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.117.252.0/22
185.113.144.0/22
185.146.36.0/22
185.216.120.0/22
193.105.0.0/24
IPv6:
2a06:6a40::/29
2a07:4d00::/29
2a0b:b640::/29
Signature Algorithm: sha256WithRSAEncryption
23:f7:1b:eb:da:92:6f:f2:f1:7c:8c:4e:ef:d9:27:c6:af:02:
79:cc:15:16:20:9e:75:7d:86:0e:bd:38:28:9b:7e:08:c7:1d:
3e:4f:1f:47:c2:82:f5:d7:eb:68:30:74:f3:06:b5:da:97:e0:
24:80:56:ae:75:e5:a1:53:57:0f:7c:8c:6c:ea:86:a3:ad:79:
be:94:79:cc:06:38:95:f9:39:eb:4a:dd:7b:ed:b0:bc:a8:2c:
74:54:19:3e:2b:0d:6d:2f:db:7c:61:e5:bd:1e:58:e2:65:5d:
5b:7c:8e:f5:40:5e:5a:7e:ac:19:fa:0f:97:46:d6:31:15:fb:
ad:82:53:bb:78:a4:f4:7d:79:0f:00:77:8f:b2:5f:44:72:4b:
14:dd:ee:ca:13:10:81:79:cf:3c:d2:8d:2b:b7:82:3c:64:58:
5a:1f:30:49:89:51:89:80:0a:22:d5:3e:89:c2:3f:14:57:55:
67:06:8a:a8:ad:0f:c7:c2:39:ed:c5:f7:97:bb:76:03:e0:fb:
16:b5:c1:30:9b:f5:f9:dc:42:72:ed:89:a2:19:f9:92:ea:b1:
4a:01:63:05:73:95:43:dc:f2:3a:57:4e:d7:b2:d0:6b:13:da:
93:e0:7e:36:ae:f8:c7:e4:40:47:00:07:2f:8e:b2:da:d0:36:
c4:dc:2e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:56 2023 by rpki-client on console-fra.rpki-client.org