Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/8ZHZgiw8SnxA4FUnlh-lP8VBp3A.roa
File: 8ZHZgiw8SnxA4FUnlh-lP8VBp3A.roa (raw, json)
Hash identifier: pAmXFgoHb4CP03GLbOrZR91sPVkhy7pYT99qQW/c7yM=
Subject key identifier: F1:91:D9:82:2C:3C:4A:7C:40:E0:55:27:96:1F:A5:3F:C5:41:A7:70
Certificate issuer: /CN=2588b1b560f998eccd3a6eff40543b59204d67b8
Certificate serial: 0185706722C8CBC84088D38F17EDFAFFA314
Authority key identifier: 25:88:B1:B5:60:F9:98:EC:CD:3A:6E:FF:40:54:3B:59:20:4D:67:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/8ZHZgiw8SnxA4FUnlh-lP8VBp3A.roa
Signing time: Mon 02 Jan 2023 02:54:45 +0000
ROA not before: Mon 02 Jan 2023 02:54:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198013
IP address blocks: 94.185.123.0/24 maxlen: 24
94.185.97.0/24 maxlen: 24
94.185.96.0/19 maxlen: 19
94.185.98.0/24 maxlen: 24
94.185.104.0/22 maxlen: 22
94.185.103.0/24 maxlen: 24
94.185.102.0/24 maxlen: 24
94.185.101.0/24 maxlen: 24
94.185.100.0/24 maxlen: 24
94.185.99.0/24 maxlen: 24
94.185.110.0/24 maxlen: 24
94.185.109.0/24 maxlen: 24
94.185.108.0/24 maxlen: 24
94.185.112.0/24 maxlen: 24
94.185.113.0/24 maxlen: 24
2a03:4580::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:22:c8:cb:c8:40:88:d3:8f:17:ed:fa:ff:a3:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2588b1b560f998eccd3a6eff40543b59204d67b8
Validity
Not Before: Jan 2 02:54:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f191d9822c3c4a7c40e05527961fa53fc541a770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:46:47:bf:38:f5:2b:ec:cc:20:6a:7d:37:3c:
4a:01:4f:03:73:a9:40:40:73:ac:64:9f:f5:f6:ce:
16:02:0f:0a:78:6f:be:12:5f:80:b4:d4:f1:5e:48:
07:8c:b8:81:2e:14:96:33:6d:86:5b:ff:3b:e9:ee:
ba:28:53:6d:0e:b3:8f:14:2f:9d:18:5b:58:3e:b2:
20:1c:2e:ce:17:d6:03:d8:fc:be:f4:60:b8:31:a9:
85:96:d4:c4:7b:80:70:f1:66:7a:c9:ae:3e:eb:73:
25:cf:28:5b:e9:c2:4a:c5:f1:01:2a:7e:8c:2b:67:
b9:d6:2d:99:9a:c8:c1:b4:e8:36:55:e2:f2:88:c2:
a2:cb:10:a1:84:54:40:a6:bf:72:fd:e4:64:64:4e:
87:47:6d:61:1c:5b:1c:1e:9d:7a:ec:95:b3:69:72:
35:7d:87:8f:62:19:90:1d:3c:a8:81:27:64:e6:0c:
94:86:f2:b2:ad:0f:e2:6e:42:b3:84:c9:11:3f:27:
e0:7d:ad:46:95:3e:bd:ef:8d:03:5a:3d:df:4e:82:
2c:af:73:c9:84:ed:dc:c8:58:16:ef:41:70:83:02:
43:57:71:c0:bf:48:71:24:94:78:b3:1f:75:1b:25:
bd:2b:cc:02:05:7e:15:a9:28:0c:36:ac:da:02:0d:
28:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:91:D9:82:2C:3C:4A:7C:40:E0:55:27:96:1F:A5:3F:C5:41:A7:70
X509v3 Authority Key Identifier:
keyid:25:88:B1:B5:60:F9:98:EC:CD:3A:6E:FF:40:54:3B:59:20:4D:67:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/8ZHZgiw8SnxA4FUnlh-lP8VBp3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.185.96.0/19
IPv6:
2a03:4580::/32
Signature Algorithm: sha256WithRSAEncryption
ab:6d:46:af:19:46:8b:07:cb:7c:cd:4c:17:39:c7:25:03:9b:
15:21:92:1d:4a:b6:4f:47:67:e0:b7:95:66:40:1a:de:17:a4:
fc:f8:82:62:53:9e:3c:5a:91:79:79:cc:93:3e:8f:a6:d8:ec:
73:bd:8e:3a:0a:06:e4:17:1c:04:ec:03:b1:ce:1a:d7:22:ec:
9c:a0:6f:ef:2d:72:fd:8d:d1:9d:e3:f3:28:d6:20:51:e8:b8:
7d:38:5d:7b:a1:f9:c4:06:e1:3d:bd:ba:30:bc:38:9f:84:da:
91:cb:ac:2e:3a:f2:d5:a2:4e:a0:aa:65:18:4c:7e:3e:01:ff:
75:c9:ad:e6:4a:82:8b:6e:54:2e:40:1d:80:63:85:ea:98:5d:
72:08:a7:80:6e:9c:cc:4b:32:86:a7:f5:1a:18:6c:5f:05:fa:
9a:b0:1d:1c:6c:36:88:95:62:26:bf:62:ec:17:cb:b8:5d:78:
57:01:2f:04:6f:0f:a4:48:18:f1:cc:60:ca:f1:31:51:b8:e4:
4c:82:71:a3:59:ae:81:cc:9c:0a:5e:ed:38:76:4b:d2:c0:6c:
43:41:06:88:5d:a7:d0:29:f9:0e:d4:85:38:49:12:ab:d8:cb:
6e:a2:4e:ce:6f:ec:cd:06:8a:ff:9e:9f:82:8d:9d:f0:e7:a8:
e2:ef:30:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 08:37:44 2023 by rpki-client on console-fra.rpki-client.org