Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/yMLiP8_HgU28pL9zE2chj37a8d4.roa
File: yMLiP8_HgU28pL9zE2chj37a8d4.roa (raw, json)
Hash identifier: WRBnfEfPG610Wi4N/Wu88xqj5Cdk+7TwDL0RE5A7J20=
Subject key identifier: C8:C2:E2:3F:CF:C7:81:4D:BC:A4:BF:73:13:67:21:8F:7E:DA:F1:DE
Certificate issuer: /CN=1bf14e8d0b3defb0304270130d1147ae0dd92d8b
Certificate serial: 018751DC242BE31B589ABD660EC872013301
Authority key identifier: 1B:F1:4E:8D:0B:3D:EF:B0:30:42:70:13:0D:11:47:AE:0D:D9:2D:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/yMLiP8_HgU28pL9zE2chj37a8d4.roa
Signing time: Wed 05 Apr 2023 14:39:54 +0000
ROA not before: Wed 05 Apr 2023 14:39:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33846
IP address blocks: 185.223.104.0/22 maxlen: 22
141.91.0.0/16 maxlen: 16
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:51:dc:24:2b:e3:1b:58:9a:bd:66:0e:c8:72:01:33:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf14e8d0b3defb0304270130d1147ae0dd92d8b
Validity
Not Before: Apr 5 14:39:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c8c2e23fcfc7814dbca4bf731367218f7edaf1de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:af:88:0a:06:ba:ba:ab:c3:09:e8:77:f9:15:
37:2b:d6:22:50:5a:bd:ec:9b:31:2c:48:8d:b3:9b:
6d:e6:eb:25:b9:59:15:e0:29:65:77:5f:2d:d9:fe:
da:02:07:35:42:19:6c:23:35:2d:2c:75:f8:28:e5:
68:4f:89:62:87:a8:49:ab:b7:24:e6:41:1b:d3:b6:
2a:5d:19:18:0d:f0:c1:b0:ad:08:ee:8f:72:34:e8:
de:4c:d9:e4:3a:53:05:0c:e1:86:91:d9:68:bc:2a:
94:bb:0a:b2:88:8f:34:a7:46:b5:e7:a6:40:b5:17:
68:4f:2b:48:2c:7e:8d:62:fd:f3:c3:5e:bb:b7:cf:
ff:58:4f:49:ab:6a:b5:ad:7b:a2:9c:e9:bc:f4:30:
94:cb:93:79:0d:65:be:3c:68:fa:8c:6a:c7:af:12:
ea:d0:2c:04:ba:ae:96:8f:b2:de:f7:d5:ff:56:3a:
12:5c:31:88:f0:b5:37:e7:15:06:38:d0:3d:b5:bf:
73:6f:0f:cd:45:77:fd:d9:36:b5:67:bf:d7:8f:00:
31:b0:95:b9:91:fa:cf:22:db:b2:f0:20:b6:dd:59:
2a:e2:21:86:b7:9d:ad:24:e8:bd:b7:15:4e:f2:60:
a4:23:4f:fc:7c:1f:9f:6f:8f:1e:3b:dd:5c:60:48:
02:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:C2:E2:3F:CF:C7:81:4D:BC:A4:BF:73:13:67:21:8F:7E:DA:F1:DE
X509v3 Authority Key Identifier:
keyid:1B:F1:4E:8D:0B:3D:EF:B0:30:42:70:13:0D:11:47:AE:0D:D9:2D:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/yMLiP8_HgU28pL9zE2chj37a8d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.91.0.0/16
185.223.104.0/22
Signature Algorithm: sha256WithRSAEncryption
23:ce:5a:4b:4a:98:31:be:72:0e:99:4e:b3:57:5c:f3:df:4f:
00:f4:f1:04:66:f0:e3:c4:9b:97:3e:47:92:1c:37:31:66:1c:
81:39:12:38:01:7e:aa:a7:eb:6c:15:ed:dc:3e:3e:1a:90:d8:
c4:d3:00:68:5f:80:96:09:9b:f6:74:62:48:81:85:36:9b:54:
b8:7e:e7:ef:cc:e5:8a:9b:d1:51:49:7c:aa:c8:13:cb:76:fb:
42:8d:c4:78:30:fc:51:17:90:63:69:0d:04:8a:11:cc:ad:44:
04:f7:20:37:6e:92:b2:43:2a:e5:75:3f:db:c7:29:de:c2:26:
52:ac:21:cf:b1:a7:64:d3:77:60:c2:af:b7:f4:5b:47:cb:f2:
a7:9b:bd:40:a2:a5:9f:6b:fe:85:51:cb:d6:19:92:76:2b:2b:
8a:ab:67:9f:1d:30:f2:60:f4:7a:03:71:7a:42:1f:d1:aa:c1:
dd:12:36:5e:d6:ed:6d:19:fc:67:89:64:f2:5a:06:e9:02:89:
58:66:82:13:ac:e3:92:0f:9b:38:52:26:66:02:87:4c:af:a7:
4b:fa:61:76:df:51:1b:93:99:52:de:f5:9d:5d:f1:75:81:b8:
2b:e7:0d:01:af:43:87:04:d9:ad:fa:88:d9:60:af:7d:01:55:
eb:a4:99:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:56:48 2023 by rpki-client on console-fra.rpki-client.org