Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/92c8a4-4a95-486d-9993-3f7aa446f7a8/1/o0e6XP06g0sAkLJXZe1yKCAqazY.roa
File: o0e6XP06g0sAkLJXZe1yKCAqazY.roa (raw, json)
Hash identifier: 4UIldN2kn3uCgvnQ1/lmFm+U5NAjXE8G1ijn1U7VeZE=
Subject key identifier: A3:47:BA:5C:FD:3A:83:4B:00:90:B2:57:65:ED:72:28:20:2A:6B:36
Certificate issuer: /CN=ea9d376d5441f48b3dd508515b16fe95c5a11782
Certificate serial: 01856FA70805CE591B66203FD53DA3030C45
Authority key identifier: EA:9D:37:6D:54:41:F4:8B:3D:D5:08:51:5B:16:FE:95:C5:A1:17:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6p03bVRB9Is91QhRWxb-lcWhF4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/92c8a4-4a95-486d-9993-3f7aa446f7a8/1/o0e6XP06g0sAkLJXZe1yKCAqazY.roa
Signing time: Sun 01 Jan 2023 23:24:55 +0000
ROA not before: Sun 01 Jan 2023 23:24:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30925
IP address blocks: 194.124.196.0/22 maxlen: 22
185.220.212.0/22 maxlen: 22
185.226.76.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:a7:08:05:ce:59:1b:66:20:3f:d5:3d:a3:03:0c:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea9d376d5441f48b3dd508515b16fe95c5a11782
Validity
Not Before: Jan 1 23:24:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a347ba5cfd3a834b0090b25765ed7228202a6b36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0a:b5:a0:73:ec:26:f2:68:27:64:c4:45:05:
b3:06:0e:47:0c:0f:d2:90:07:48:b9:41:cd:ed:c0:
08:89:c1:68:14:01:e4:9e:7f:ee:64:57:f3:13:4b:
43:fd:85:4d:f7:8f:f5:4a:aa:52:1e:3c:02:a6:8a:
85:b2:85:ae:80:82:c7:14:a6:42:d3:05:b5:6e:e7:
87:2a:7c:78:29:5c:a9:2d:33:25:37:2c:3a:08:93:
08:3b:e1:09:72:8f:6f:f2:82:c1:8c:b5:63:cf:fb:
71:82:20:b8:87:46:95:b6:83:46:40:13:bf:99:94:
03:be:49:a1:d1:af:5d:74:4f:02:a3:10:12:31:a6:
36:d1:b3:7a:bc:2c:2e:02:3f:7c:14:59:3a:c5:df:
09:aa:32:3a:08:a5:23:dd:92:0d:01:4e:69:43:b5:
73:a3:cb:9f:94:d6:13:ce:6d:f5:9f:f1:ab:fa:a1:
88:49:26:d3:30:a2:48:e6:f9:c9:2a:75:50:12:68:
1c:6e:80:2e:be:65:34:3c:0f:4a:62:35:84:b9:76:
ee:7b:57:9d:70:b2:a9:1f:95:c4:5d:ac:41:c1:a5:
0c:6a:63:6c:fa:13:37:81:e3:7d:19:61:99:60:fb:
ec:d9:3c:94:70:71:1f:d1:5a:c7:30:ac:cb:4b:b0:
1f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:47:BA:5C:FD:3A:83:4B:00:90:B2:57:65:ED:72:28:20:2A:6B:36
X509v3 Authority Key Identifier:
keyid:EA:9D:37:6D:54:41:F4:8B:3D:D5:08:51:5B:16:FE:95:C5:A1:17:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6p03bVRB9Is91QhRWxb-lcWhF4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/92c8a4-4a95-486d-9993-3f7aa446f7a8/1/o0e6XP06g0sAkLJXZe1yKCAqazY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/92c8a4-4a95-486d-9993-3f7aa446f7a8/1/6p03bVRB9Is91QhRWxb-lcWhF4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.212.0/22
185.226.76.0/22
194.124.196.0/22
Signature Algorithm: sha256WithRSAEncryption
23:08:8e:96:93:72:5b:56:76:0c:22:63:de:9f:74:c8:b3:bc:
5e:d6:54:d6:9c:af:2d:9e:82:ae:33:76:67:66:2e:4f:b9:fc:
98:b3:0c:0a:e9:8a:23:da:5b:51:17:ef:e8:dd:3d:a9:f5:df:
80:7e:bc:a1:4e:bd:80:ff:f1:c8:ba:ec:cd:67:86:2c:61:ba:
ad:46:cc:cb:fa:8b:8c:19:7b:cd:fa:6c:a7:ec:2c:db:6d:23:
45:6a:36:a6:b5:4c:23:a1:68:25:5c:bd:76:ff:25:7a:58:7e:
17:a9:f3:0d:f4:d3:6d:f6:e2:71:2b:db:21:f4:07:bf:67:be:
7e:16:7c:19:81:10:b9:75:43:f9:27:3f:e6:40:eb:2d:72:c3:
f2:52:fe:3b:c7:aa:39:f7:f1:69:c5:71:b9:7b:3e:7d:21:2e:
70:78:d6:a3:8b:8e:8a:7e:98:43:db:82:dc:30:4e:36:e3:f2:
46:7f:15:2d:68:0f:3a:5c:e5:0c:90:d0:9e:36:2b:ef:13:5c:
d7:f4:a7:d1:a1:03:34:6f:e8:58:a7:df:ed:2c:8d:44:52:89:
94:7c:ac:52:d8:92:57:ce:87:c2:c2:f3:25:6a:8d:a7:fb:f7:
97:bb:44:1d:ed:3a:4f:83:91:e2:32:31:29:0e:78:2b:36:85:
81:c5:c3:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:08 2023 by rpki-client on console-fra.rpki-client.org