Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/kfFZuct3m9pt8GnyIVSlUxLqkE4.roa
File: kfFZuct3m9pt8GnyIVSlUxLqkE4.roa (raw, json)
Hash identifier: 6LsWdDRAUoHjZygv80DN3Q4n7eEtItbN7+ogX3ERaXA=
Subject key identifier: 91:F1:59:B9:CB:77:9B:DA:6D:F0:69:F2:21:54:A5:53:12:EA:90:4E
Certificate issuer: /CN=297194f4b52b9ff433f2bf0d16b58c11c7cf1131
Certificate serial: 01857169DCA0AF51C8E76B6BE3E35E6F43A8
Authority key identifier: 29:71:94:F4:B5:2B:9F:F4:33:F2:BF:0D:16:B5:8C:11:C7:CF:11:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXGU9LUrn_Qz8r8NFrWMEcfPETE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/kfFZuct3m9pt8GnyIVSlUxLqkE4.roa
Signing time: Mon 02 Jan 2023 07:37:21 +0000
ROA not before: Mon 02 Jan 2023 07:37:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205940
IP address blocks: 185.201.140.0/23 maxlen: 23
185.201.142.0/24 maxlen: 24
2a0a:c540::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:69:dc:a0:af:51:c8:e7:6b:6b:e3:e3:5e:6f:43:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297194f4b52b9ff433f2bf0d16b58c11c7cf1131
Validity
Not Before: Jan 2 07:37:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=91f159b9cb779bda6df069f22154a55312ea904e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:79:38:6c:e9:18:03:0c:88:4b:a3:4e:de:21:
79:f0:07:0f:5f:b9:fb:5f:26:89:d8:e4:2b:dd:b0:
17:55:b3:2f:7e:b3:69:89:7b:b5:7c:00:d3:d0:93:
94:ab:ab:24:74:77:2d:15:11:a8:03:f0:e2:a1:81:
55:0e:72:5b:01:62:36:79:f7:06:c6:27:26:ac:80:
19:00:4a:69:b2:00:a6:bd:6b:2e:7a:97:fb:72:ae:
69:ca:0e:02:97:58:4c:27:7e:06:63:13:d0:5b:91:
84:2f:bc:c5:c0:2b:2d:b5:d7:ea:cd:37:27:2a:4c:
3c:93:23:12:65:a0:94:5c:fd:1f:f7:da:40:0b:77:
5f:ce:a3:c2:78:14:cc:b6:93:1d:9a:8d:0e:9d:57:
47:58:a5:33:32:e2:e1:bc:dc:16:8a:1c:95:bc:89:
d3:43:43:1e:96:7e:a2:db:7e:55:b0:50:96:97:e5:
79:39:5e:6c:0b:8d:27:c7:3c:6b:2e:29:96:68:98:
74:c7:b5:2a:a4:7d:14:3f:e2:58:e0:7a:33:8a:b6:
89:4c:a5:f9:f3:a7:26:f4:49:7f:d5:20:80:6b:50:
51:70:c0:b8:b4:cd:6c:ba:c8:09:ce:26:fc:8c:7f:
3b:47:8f:c4:3d:26:73:21:c8:17:1e:5b:94:00:91:
16:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:F1:59:B9:CB:77:9B:DA:6D:F0:69:F2:21:54:A5:53:12:EA:90:4E
X509v3 Authority Key Identifier:
keyid:29:71:94:F4:B5:2B:9F:F4:33:F2:BF:0D:16:B5:8C:11:C7:CF:11:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXGU9LUrn_Qz8r8NFrWMEcfPETE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/kfFZuct3m9pt8GnyIVSlUxLqkE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/KXGU9LUrn_Qz8r8NFrWMEcfPETE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.140.0-185.201.142.255
IPv6:
2a0a:c540::/29
Signature Algorithm: sha256WithRSAEncryption
62:96:7b:23:21:0a:e4:13:ab:b0:e3:b0:36:2f:67:1d:2a:e3:
e9:40:45:c7:80:66:cb:f1:2d:dc:12:2d:f7:36:a0:5a:c8:f4:
12:53:45:60:cc:ee:5b:09:5a:b9:ed:33:b8:dc:ad:71:ed:e4:
43:5f:2a:3a:01:8f:79:03:4e:83:78:39:d1:ce:2c:e7:00:e0:
4d:e5:1c:c2:0f:ad:23:cd:50:5c:54:65:da:bc:a4:15:04:db:
60:07:17:6d:69:b3:e0:de:b6:46:31:1b:b1:46:3b:87:5f:4b:
be:81:47:da:d2:29:fd:93:0c:27:ec:56:3b:41:bf:05:69:20:
c4:3f:e8:48:62:ba:1f:b8:05:f4:4e:13:32:f5:43:90:1b:17:
b8:6b:09:48:7f:53:37:7a:8d:a8:b3:a8:52:2c:d4:6b:ba:00:
9b:5b:1e:27:d3:dc:34:66:2b:a6:9f:41:49:69:19:d7:e2:f4:
9e:6c:96:11:75:ab:19:1a:7a:de:55:af:62:97:5e:35:df:cd:
64:17:14:97:43:45:86:e5:12:d0:f6:1d:28:18:63:fc:f0:5c:
52:4e:ba:51:83:68:7d:67:13:1a:bd:ba:59:6e:72:8b:0a:2a:
40:be:0d:a1:8d:32:55:aa:16:17:07:14:3a:1a:44:b7:a7:67:
a1:9f:00:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:15:09 2024 by rpki-client on console-fra.rpki-client.org