Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/IpPIAGAiNZV-a4p7THGY1fjJJ7g.roa
File: IpPIAGAiNZV-a4p7THGY1fjJJ7g.roa (raw, json)
Hash identifier: xKxqnRs6pFrGmVcmeFHXm2JWrBOirrQTDtJl+VKg9po=
Subject key identifier: 22:93:C8:00:60:22:35:95:7E:6B:8A:7B:4C:71:98:D5:F8:C9:27:B8
Certificate issuer: /CN=c3eb70743815fe445c958a3c5117ef2753d30f7e
Certificate serial: 01856D418AB9EEBEBAE04477F2FEE5A27C42
Authority key identifier: C3:EB:70:74:38:15:FE:44:5C:95:8A:3C:51:17:EF:27:53:D3:0F:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w-twdDgV_kRclYo8URfvJ1PTD34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/IpPIAGAiNZV-a4p7THGY1fjJJ7g.roa
Signing time: Sun 01 Jan 2023 12:14:49 +0000
ROA not before: Sun 01 Jan 2023 12:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198297
IP address blocks: 185.86.134.0/24 maxlen: 24
185.86.135.0/24 maxlen: 24
185.86.134.0/23 maxlen: 23
185.86.133.0/24 maxlen: 24
185.86.132.0/23 maxlen: 23
185.86.132.0/22 maxlen: 22
185.86.132.9/32 maxlen: 32
185.86.132.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:41:8a:b9:ee:be:ba:e0:44:77:f2:fe:e5:a2:7c:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3eb70743815fe445c958a3c5117ef2753d30f7e
Validity
Not Before: Jan 1 12:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2293c800602235957e6b8a7b4c7198d5f8c927b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2f:06:b8:7a:9d:fa:7a:99:65:11:bb:d1:5a:
fd:91:c3:ea:53:b3:af:bf:af:72:71:ab:80:83:9d:
85:0a:00:d4:3d:ef:90:1b:5d:c3:ca:dd:81:0e:85:
62:22:c2:e5:bb:65:53:46:f5:a0:af:12:fd:68:91:
1d:96:11:cd:19:fa:a9:a9:04:0a:12:df:3b:10:2f:
c1:ba:b6:6d:28:7d:25:45:6d:da:aa:16:45:06:d4:
56:5c:4e:14:26:97:75:6a:ce:b5:77:78:61:97:55:
bf:9f:90:77:cb:00:73:24:33:df:50:81:e7:4d:3a:
33:13:69:f0:48:77:83:4a:66:a1:53:eb:49:1e:6c:
03:74:c5:4d:e7:07:de:8b:58:a7:49:fe:d7:61:51:
a2:34:1d:4b:f2:05:17:26:f6:9f:81:7b:ff:04:3a:
33:2d:d1:4c:0d:88:3b:db:1b:12:27:62:5f:4f:d5:
78:7d:3f:ac:2d:85:ba:ad:1b:cd:79:03:79:31:4f:
27:27:bc:26:af:36:26:a2:47:40:db:66:55:bb:02:
97:89:ff:2f:ab:e5:74:eb:43:20:ff:25:23:32:5b:
77:b8:b5:57:5a:5d:10:40:19:5e:e2:77:5b:bc:a0:
15:2f:a6:dd:ea:b6:7d:aa:88:21:21:fe:de:68:85:
a2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:93:C8:00:60:22:35:95:7E:6B:8A:7B:4C:71:98:D5:F8:C9:27:B8
X509v3 Authority Key Identifier:
keyid:C3:EB:70:74:38:15:FE:44:5C:95:8A:3C:51:17:EF:27:53:D3:0F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-twdDgV_kRclYo8URfvJ1PTD34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/IpPIAGAiNZV-a4p7THGY1fjJJ7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/w-twdDgV_kRclYo8URfvJ1PTD34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.132.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:6b:86:e0:30:02:f8:42:eb:9b:de:40:15:36:e0:3d:55:4c:
80:12:8c:52:fd:55:74:22:0d:ee:f0:3c:5b:a3:15:79:13:a5:
c6:f0:dd:b3:4a:20:c3:bc:b2:1f:5b:c3:bc:cd:61:f7:a3:39:
83:19:04:83:4e:d2:2f:07:0a:e9:85:51:2b:2b:08:83:a7:92:
db:e8:96:85:e9:64:0c:15:c6:6b:f2:5b:ed:b9:da:f3:d5:a1:
7d:e1:ce:7f:9a:c0:d8:91:8e:81:16:8a:65:fc:6b:61:4d:bc:
b6:fc:47:f6:c4:84:54:b1:9c:a7:51:7c:d6:a6:d4:15:27:a9:
d0:ba:24:13:7e:eb:6e:db:0a:0e:15:d0:17:d7:04:14:b6:b1:
52:50:8b:b4:c0:92:df:f0:0b:78:18:b3:5a:f2:57:18:fb:0d:
6d:28:83:b3:7e:16:56:8e:f4:10:f2:b2:2b:a9:19:58:eb:4f:
79:be:40:02:c0:a8:09:e2:ad:4b:04:92:4a:d1:e1:c3:41:ca:
46:0f:f7:6b:c8:d9:f6:94:5b:68:81:42:2f:29:d5:6f:6a:b0:
56:9f:e7:83:90:29:ab:d2:50:a7:46:27:f6:6d:0d:40:12:85:
7a:0d:13:83:c0:36:20:7c:30:4e:b2:d3:5c:66:77:5c:8c:52:
23:37:17:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:34:38 2024 by rpki-client on console-fra.rpki-client.org