Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/lMazryinGoI2rzWktkm6QkB0SOQ.roa
File: lMazryinGoI2rzWktkm6QkB0SOQ.roa (raw, json)
Hash identifier: jH7yyp/tOWkegCjsH32mvEv3RESBG530hk/ZbxD1Aio=
Subject key identifier: 94:C6:B3:AF:28:A7:1A:82:36:AF:35:A4:B6:49:BA:42:40:74:48:E4
Certificate issuer: /CN=46815ca15d72a5a696f8bcdf486f5801966772bb
Certificate serial: 018ABCFD15E692BE8D0209AF3653D2D4CFEE
Authority key identifier: 46:81:5C:A1:5D:72:A5:A6:96:F8:BC:DF:48:6F:58:01:96:67:72:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RoFcoV1ypaaW-LzfSG9YAZZncrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/lMazryinGoI2rzWktkm6QkB0SOQ.roa
Signing time: Fri 22 Sep 2023 13:03:37 +0000
ROA not before: Fri 22 Sep 2023 13:03:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207213
IP address blocks: 185.160.196.0/24 maxlen: 24
185.160.197.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:bc:fd:15:e6:92:be:8d:02:09:af:36:53:d2:d4:cf:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46815ca15d72a5a696f8bcdf486f5801966772bb
Validity
Not Before: Sep 22 13:03:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=94c6b3af28a71a8236af35a4b649ba42407448e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:fc:54:f3:c0:69:5a:db:08:7d:d0:00:63:22:
11:ac:87:23:f4:d7:ae:c0:b3:fe:51:fd:53:cd:e1:
2c:37:bd:03:b5:87:96:56:9b:2c:5d:29:33:02:51:
06:91:34:b2:e2:5b:5f:b3:e7:19:c7:8a:36:cb:f6:
60:3e:88:05:84:58:af:f4:ab:cc:e7:96:82:49:5c:
86:b0:86:35:cf:67:e8:18:ef:26:c8:14:5d:73:e0:
d4:6b:a2:6c:50:f8:0f:dc:99:d2:f0:2d:e9:63:6a:
e1:20:ac:c0:ad:7b:b3:c4:a2:80:70:92:49:c1:80:
51:02:3b:e3:6f:21:1b:e0:63:d5:dd:39:6f:a0:fa:
b8:ad:ae:8f:5a:68:d6:69:28:42:0d:a4:bc:05:29:
83:37:53:d5:8a:3c:c5:dd:d8:87:d9:66:24:a7:60:
57:f4:fc:07:bd:12:42:47:2e:90:23:1d:e4:65:e4:
9b:ab:58:ca:11:a3:dc:00:94:62:c9:9d:53:9f:d4:
3a:47:f4:2f:30:09:c0:f6:bb:cf:d5:46:f2:21:a0:
e9:4d:b9:00:73:51:1a:3f:c2:df:f8:db:4d:be:95:
c1:db:d1:26:7f:cf:87:1a:17:d8:c3:d3:5e:00:d3:
c0:f1:d1:25:e1:8d:7a:ec:ca:e8:b2:58:9a:97:e5:
48:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C6:B3:AF:28:A7:1A:82:36:AF:35:A4:B6:49:BA:42:40:74:48:E4
X509v3 Authority Key Identifier:
keyid:46:81:5C:A1:5D:72:A5:A6:96:F8:BC:DF:48:6F:58:01:96:67:72:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RoFcoV1ypaaW-LzfSG9YAZZncrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/lMazryinGoI2rzWktkm6QkB0SOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.196.0/23
Signature Algorithm: sha256WithRSAEncryption
42:94:d5:55:d6:13:73:33:e2:f6:f9:db:af:c2:01:fd:4d:e5:
ba:21:d1:5b:18:d8:e1:86:fc:ad:f2:fd:a5:62:51:dd:5f:29:
63:10:0c:89:6f:87:0e:2b:a2:ea:92:c9:29:b6:7f:bd:a5:0a:
14:cf:57:b8:52:b0:2a:44:03:af:2f:80:56:74:4b:e8:7c:2d:
bc:9b:38:cb:86:04:9b:36:15:6a:31:6e:a4:f0:18:bd:44:ff:
eb:2c:e8:0a:70:3f:f8:a2:a0:fe:21:70:98:11:9a:ca:31:db:
c8:e3:11:07:a8:ad:3d:e0:f3:62:53:32:be:b3:e8:d4:44:c0:
27:45:4a:e3:95:3c:7c:a0:74:b4:36:b5:6b:81:44:fe:27:bd:
88:25:69:ac:ec:41:8e:33:84:92:6f:78:9c:bd:cb:49:91:e2:
5f:f6:31:e9:84:bb:30:4f:2f:6d:f1:a4:9d:39:3d:0e:4e:77:
01:23:55:da:e5:9b:23:2d:3c:de:73:49:d9:3b:86:ff:b4:51:
94:8e:5a:87:a4:43:2a:8f:01:19:a3:9a:4a:5b:c1:51:2a:99:
49:96:95:7f:0c:b9:80:5e:b9:cd:ce:dc:83:53:0f:26:b9:cc:
7f:3b:d8:96:ca:95:e3:b2:d0:f8:d1:d1:92:2f:60:5f:92:42:
d5:03:f4:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:50:41 2024 by rpki-client on console-fra.rpki-client.org