Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/IXSC8hAZ__vo2TywUi07pD3kICg.roa
File: IXSC8hAZ__vo2TywUi07pD3kICg.roa (raw, json)
Hash identifier: /DZfOwiB9l/UoVNDl2dTRh3udUggZ0l3j35wJeCfAkM=
Subject key identifier: 21:74:82:F2:10:19:FF:FB:E8:D9:3C:B0:52:2D:3B:A4:3D:E4:20:28
Certificate issuer: /CN=dfd524a05d477b82fbca93e7a504aa31a3ad6863
Certificate serial: 0189CF62ADE4819137724139B3940F7EBE58
Authority key identifier: DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/IXSC8hAZ__vo2TywUi07pD3kICg.roa
Signing time: Mon 07 Aug 2023 09:44:57 +0000
ROA not before: Mon 07 Aug 2023 09:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201021
IP address blocks: 185.106.20.0/24 maxlen: 24
185.106.23.0/24 maxlen: 24
185.106.22.0/24 maxlen: 24
185.106.21.0/24 maxlen: 24
185.28.62.0/24 maxlen: 24
185.28.61.0/24 maxlen: 24
185.28.60.0/24 maxlen: 24
185.103.197.0/24 maxlen: 24
185.103.196.0/24 maxlen: 24
185.103.198.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:cf:62:ad:e4:81:91:37:72:41:39:b3:94:0f:7e:be:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd524a05d477b82fbca93e7a504aa31a3ad6863
Validity
Not Before: Aug 7 09:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=217482f21019fffbe8d93cb0522d3ba43de42028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:40:7a:43:a1:13:8e:18:06:c3:c5:af:df:07:
3f:a6:de:b2:74:72:6a:ed:13:9a:f5:cb:d7:78:b2:
41:c6:4e:da:d8:2b:7c:0c:9d:88:7a:dd:af:fc:1a:
54:42:f4:13:35:c1:80:1c:48:1f:91:d7:0e:56:91:
6a:b2:3d:7c:39:95:b7:f1:74:9b:0f:1e:ff:e8:f8:
a7:0a:b4:d0:42:ca:24:35:66:ab:c9:e1:0e:a7:36:
1a:83:bc:20:9e:ce:d8:66:b4:34:1e:43:e3:4d:9e:
e7:35:c3:e3:e6:f4:a7:34:56:40:46:bc:bf:c2:a5:
8d:b7:e0:da:90:df:0d:cd:04:e2:5b:ad:bc:23:af:
b5:76:64:eb:92:78:be:be:d2:f7:27:57:ec:dd:46:
76:5f:29:58:c3:85:76:c3:49:a0:72:db:35:d8:bf:
b5:94:c6:81:bf:07:d2:af:24:a3:96:88:1b:78:fa:
b4:51:23:e9:55:53:22:20:43:0e:8c:58:96:52:f4:
d1:6e:65:b7:52:e5:d1:4a:b7:7c:bd:01:6c:fc:5d:
d9:d8:b6:02:a1:34:db:b9:43:99:57:2d:f2:0c:f9:
64:13:f1:6a:87:35:1c:59:3a:20:50:c4:59:97:0f:
dd:0b:cd:68:95:c7:f4:41:72:4c:c1:ca:57:ce:b4:
af:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:74:82:F2:10:19:FF:FB:E8:D9:3C:B0:52:2D:3B:A4:3D:E4:20:28
X509v3 Authority Key Identifier:
keyid:DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/IXSC8hAZ__vo2TywUi07pD3kICg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.28.60.0-185.28.62.255
185.103.196.0-185.103.198.255
185.106.20.0/22
Signature Algorithm: sha256WithRSAEncryption
76:9f:e4:1c:5b:cb:65:4c:3e:a0:c0:2e:dc:07:bf:a0:31:e4:
61:50:27:fe:ff:06:fc:2a:df:c2:4c:7d:e5:0b:13:46:9c:a9:
38:41:32:d3:83:16:8b:4e:7b:6c:a5:46:f0:a1:58:9a:a6:49:
4d:67:23:88:a0:61:4a:4a:29:2f:aa:ba:08:f7:b0:03:f9:46:
07:50:9d:d2:08:7c:67:19:62:76:ff:f5:13:1c:ef:91:2c:45:
58:1d:ce:ea:68:13:d1:e3:e1:82:d1:e0:24:c1:56:c9:f2:12:
3c:f1:a2:ef:a4:07:b3:c3:c1:61:3a:ab:a2:d5:4c:d4:0b:66:
a0:5b:e1:8e:3d:a0:e1:02:56:32:75:98:2d:6d:8c:15:a3:9d:
33:f7:b6:8d:f0:ee:3b:02:5d:2e:81:64:ec:fd:93:4b:a8:9d:
c3:fe:b2:a6:39:d1:fa:c5:d2:2c:b5:c7:bd:a4:d2:12:32:ac:
c8:a3:b7:2a:64:e9:5b:9d:85:6c:72:a4:bb:7e:5c:3f:84:f9:
fe:cb:4e:22:5e:d7:f5:af:23:dd:ba:0f:24:b0:90:9f:94:33:
a4:e2:ff:e3:a5:58:8c:35:3c:96:f9:f6:00:54:7d:2a:14:d5:
ec:c1:7b:6c:32:a2:03:9c:25:f8:de:8b:ca:25:04:ef:c2:03:
51:83:cf:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:58 2024 by rpki-client on console-fra.rpki-client.org