Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/A4nJ5v-bpY2mVUeZunVg_EDfLd8.roa
File: A4nJ5v-bpY2mVUeZunVg_EDfLd8.roa (raw, json)
Hash identifier: Qz6MddXaHMAIXdyaXL57EqrJ9WbSN0VoYDBI0aUz7cc=
Subject key identifier: 03:89:C9:E6:FF:9B:A5:8D:A6:55:47:99:BA:75:60:FC:40:DF:2D:DF
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01856ED4C66250513BEB3A3DBB76794FA78B
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/A4nJ5v-bpY2mVUeZunVg_EDfLd8.roa
Signing time: Sun 01 Jan 2023 19:35:16 +0000
ROA not before: Sun 01 Jan 2023 19:35:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43160
IP address blocks: 185.244.230.0/24 maxlen: 24
185.244.229.0/24 maxlen: 24
185.244.231.0/24 maxlen: 24
185.28.51.0/24 maxlen: 24
185.246.13.0/24 maxlen: 24
185.246.15.0/24 maxlen: 24
185.231.187.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:c6:62:50:51:3b:eb:3a:3d:bb:76:79:4f:a7:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 1 19:35:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0389c9e6ff9ba58da6554799ba7560fc40df2ddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0e:a7:c8:99:d5:31:36:5a:bc:04:39:a1:1d:
6c:fc:8c:7d:d5:73:e6:d3:53:a4:ef:5d:7a:6a:ce:
ef:1a:8d:45:3d:c8:2a:e1:f1:d1:6f:f0:64:67:35:
f7:b5:36:7d:5a:14:fb:f6:c5:ab:f0:2d:a7:82:ec:
fa:35:ee:2d:09:35:9c:01:d3:87:42:42:43:9e:d8:
ba:83:12:4c:b4:45:a2:7f:4b:08:77:28:4b:07:20:
33:f8:9d:4b:16:85:96:f4:6c:94:83:c9:f7:5a:58:
f0:c7:5f:0f:cb:4a:41:7d:64:bc:5f:f3:58:fe:af:
7c:a1:15:85:48:74:07:57:8c:fa:c7:9d:e0:4d:1d:
3f:d9:05:e6:7d:ed:fd:00:52:42:27:44:fd:73:45:
53:09:01:34:9c:6c:de:da:89:8a:98:07:a8:0d:f8:
57:e9:ed:4b:22:3e:45:fd:85:f3:5f:14:46:75:99:
7a:3e:e4:e4:0f:69:fd:10:0a:fd:43:96:89:e8:17:
d4:dc:7c:e7:04:be:0f:ed:51:86:d7:5c:34:f7:5a:
34:44:77:84:62:2b:96:c2:f1:e7:0c:94:83:bf:32:
d7:25:c1:cd:30:7e:37:02:6a:2d:0f:c1:de:7d:35:
86:1a:e1:67:9e:1b:54:6b:1d:3c:d7:84:3b:38:46:
ec:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:89:C9:E6:FF:9B:A5:8D:A6:55:47:99:BA:75:60:FC:40:DF:2D:DF
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/A4nJ5v-bpY2mVUeZunVg_EDfLd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.28.51.0/24
185.231.187.0/24
185.244.229.0-185.244.231.255
185.246.13.0/24
185.246.15.0/24
Signature Algorithm: sha256WithRSAEncryption
15:c6:1a:0b:ed:9c:f1:83:a9:a9:30:5d:ab:7f:e8:cd:10:cc:
ab:9b:e5:34:d0:99:2e:d5:bc:b4:0e:be:f1:fa:a2:a6:45:77:
24:5b:06:6b:e8:ba:8d:26:42:42:7f:57:9e:46:1e:61:58:77:
d8:9d:2a:7a:73:12:32:b8:5c:88:a0:87:12:45:c4:d9:c7:bb:
fd:86:7d:49:3c:55:05:70:2c:17:ae:6a:a7:4d:19:b8:17:73:
29:0a:d9:e3:19:58:ad:9d:c8:a0:ed:98:5b:1a:a1:09:cb:de:
e2:21:92:41:3a:14:fb:2f:4e:72:44:f9:d4:66:9b:d6:17:96:
f0:5a:c1:91:3a:0b:43:6a:22:6e:8b:ac:0c:05:d1:35:fd:56:
5a:82:4b:9a:a6:fd:81:dc:e6:d2:b6:99:5c:60:a2:46:58:d3:
0d:1f:8a:71:0e:c0:be:46:67:99:81:e4:dd:80:f6:52:a4:71:
ee:de:96:b3:84:91:79:f1:28:b6:b3:88:25:55:86:6c:e4:fb:
3a:13:74:2e:6d:6a:44:53:1e:94:aa:bd:7a:0c:c5:97:76:1b:
76:8d:21:09:46:a5:58:1c:e8:e7:0c:53:85:f6:67:ed:84:56:
f6:5d:ed:df:5d:a6:3b:e7:78:20:9b:7a:b2:09:78:a4:98:21:
5e:96:c5:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:25:47 2024 by rpki-client on console-fra.rpki-client.org