Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/8O7vK90johzvVpZX916mvDU1bys.roa
File: 8O7vK90johzvVpZX916mvDU1bys.roa (raw, json)
Hash identifier: I2Meo7nJI5XtOycb5SR1wiOaoaslU8dCCzCQDpgOnGo=
Subject key identifier: F0:EE:EF:2B:DD:23:A2:1C:EF:56:96:57:F7:5E:A6:BC:35:35:6F:2B
Certificate issuer: /CN=b0bfb0fc298965476bc10f58792bf286c14d9ff1
Certificate serial: 01856BD360503994B66DEC35A159CF429F77
Authority key identifier: B0:BF:B0:FC:29:89:65:47:6B:C1:0F:58:79:2B:F2:86:C1:4D:9F:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/8O7vK90johzvVpZX916mvDU1bys.roa
Signing time: Sun 01 Jan 2023 05:34:52 +0000
ROA not before: Sun 01 Jan 2023 05:34:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203904
IP address blocks: 185.118.44.0/24 maxlen: 24
185.118.47.0/24 maxlen: 24
185.118.46.0/24 maxlen: 24
185.118.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:31:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:d3:60:50:39:94:b6:6d:ec:35:a1:59:cf:42:9f:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0bfb0fc298965476bc10f58792bf286c14d9ff1
Validity
Not Before: Jan 1 05:34:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f0eeef2bdd23a21cef569657f75ea6bc35356f2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4b:22:1b:c5:d5:c5:a2:98:2c:8d:6e:81:ed:
e8:34:89:92:ba:a1:dc:9d:1f:f3:8f:fb:03:74:13:
f5:62:0a:49:6e:78:e4:7f:ad:6d:f9:74:1b:7e:a1:
16:6c:ef:2f:38:1e:a7:3e:40:91:9f:0b:f1:8c:4c:
59:57:29:5e:b5:33:b0:fb:dc:46:5b:53:92:f2:b9:
8f:19:33:fe:0c:52:29:f4:59:73:d0:bf:3f:1b:b8:
90:04:a9:69:e2:89:43:0a:25:5f:ef:f6:33:20:77:
f2:42:1f:af:95:8d:cd:c0:40:32:be:70:ae:0e:bf:
0a:b6:27:6e:73:d6:1e:72:d9:48:34:3c:bf:3d:63:
7d:95:23:42:43:81:15:33:4a:b6:62:80:39:d4:ba:
b1:f1:dd:0c:42:d1:18:f1:56:0a:c6:dc:ab:21:2f:
76:93:5c:74:ed:a6:ec:fb:3a:e8:62:f4:54:11:95:
09:b1:0f:ed:fc:1e:6f:e8:68:6e:0b:84:fb:94:3f:
2c:83:b8:1e:61:49:89:9d:bd:0b:39:47:9f:e3:f4:
73:40:c0:13:34:17:a4:e4:0a:76:16:a7:d3:62:b0:
14:da:b9:ef:71:2d:4c:e4:8e:e8:ad:e8:f1:94:8d:
ee:a0:6b:dc:93:3f:2f:04:46:5b:3d:74:f9:42:63:
1d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:EE:EF:2B:DD:23:A2:1C:EF:56:96:57:F7:5E:A6:BC:35:35:6F:2B
X509v3 Authority Key Identifier:
keyid:B0:BF:B0:FC:29:89:65:47:6B:C1:0F:58:79:2B:F2:86:C1:4D:9F:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/8O7vK90johzvVpZX916mvDU1bys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.118.44.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:8f:d8:d2:07:2a:6f:56:42:35:39:42:33:eb:7d:2c:47:30:
32:93:ac:32:c7:d9:a7:ee:9b:37:d1:17:e1:d9:6d:cf:76:76:
1f:bc:aa:d8:c2:fb:67:7e:33:46:86:68:1d:46:62:8c:1a:59:
a6:16:b1:bf:4f:21:53:a7:6e:0f:ed:0a:03:6f:47:df:8e:ed:
00:da:f3:65:9f:ba:96:16:76:ce:5d:7e:8a:bd:73:05:c2:b4:
74:ba:7f:0a:55:28:d7:09:69:cf:c3:f2:2f:a7:4a:78:f6:b0:
a0:5c:35:c3:72:66:66:06:61:18:83:ab:b5:f9:be:54:e6:68:
44:88:57:aa:00:f2:e8:1e:cd:30:a0:5c:ca:e9:e9:4a:4a:cf:
de:12:6a:18:3b:f7:c2:09:e5:74:87:29:7c:1c:f3:87:95:d3:
0e:90:7b:cb:1b:ff:33:48:a3:d0:27:12:78:a6:63:9d:c4:3e:
10:15:d6:0d:99:17:60:16:a0:61:dd:0d:f6:7e:30:7d:8e:0b:
54:ae:41:19:42:ff:15:9d:a3:e3:b5:88:2b:bd:eb:b2:10:69:
1e:99:1b:60:e6:54:89:de:67:4d:ac:08:ac:70:f4:a9:48:cd:
49:cf:51:f2:f9:29:92:c2:ee:5a:7f:a8:a8:9e:3b:9d:24:0f:
d4:ab:0b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:21 2024 by rpki-client on console-ams.rpki-client.org