Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/7_7acI_7boQrIXDD4RVTJk_P0p0.roa
File: 7_7acI_7boQrIXDD4RVTJk_P0p0.roa (raw, json)
Hash identifier: jhoQN3KrWkHGlmsO97BOvPYi/N3r4ucvwF/4IQKaBvs=
Subject key identifier: EF:FE:DA:70:8F:FB:6E:84:2B:21:70:C3:E1:15:53:26:4F:CF:D2:9D
Certificate issuer: /CN=845d042f65e1b1303a44e43e0e02748a75837b44
Certificate serial: 0185CE5203DF907F51EEEF29B47883624988
Authority key identifier: 84:5D:04:2F:65:E1:B1:30:3A:44:E4:3E:0E:02:74:8A:75:83:7B:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/7_7acI_7boQrIXDD4RVTJk_P0p0.roa
Signing time: Fri 20 Jan 2023 08:35:59 +0000
ROA not before: Fri 20 Jan 2023 08:35:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201789
IP address blocks: 185.54.163.0/24 maxlen: 24
185.54.162.0/24 maxlen: 24
185.54.161.0/24 maxlen: 24
185.54.160.0/24 maxlen: 24
185.241.213.0/24 maxlen: 24
185.241.214.0/24 maxlen: 24
185.119.88.0/24 maxlen: 24
185.119.91.0/24 maxlen: 24
2a0c:bf80:1b::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ce:52:03:df:90:7f:51:ee:ef:29:b4:78:83:62:49:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845d042f65e1b1303a44e43e0e02748a75837b44
Validity
Not Before: Jan 20 08:35:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=effeda708ffb6e842b2170c3e11553264fcfd29d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ab:e6:57:e7:f3:05:d8:92:76:70:14:62:c3:
bd:c9:bf:d9:c6:e0:36:5c:11:3c:09:34:e8:c5:6f:
dd:42:3a:d9:da:3b:0c:1e:8f:5b:e0:82:ef:24:14:
02:e4:9c:3f:17:58:ac:d8:1f:7f:33:dd:35:03:45:
fe:2e:39:8c:d4:fd:02:8e:4d:cb:64:ec:91:b3:b2:
71:de:8f:18:bd:b8:43:94:99:ba:dd:bf:30:51:2a:
1b:ee:92:ce:2f:81:7e:11:70:d4:66:2c:da:e7:84:
18:4a:f0:d6:f7:81:95:0a:92:0d:d8:3f:d1:cb:23:
af:6a:86:0b:15:23:95:bf:e4:31:2f:bd:ee:d0:52:
26:8e:f5:ef:92:ef:23:c7:f4:8c:46:ca:9a:e4:b8:
92:4e:07:ea:9f:7a:28:9d:6f:f0:1b:61:aa:af:d1:
c8:21:5f:eb:61:3d:a8:08:8d:d1:c0:1c:39:37:a4:
ae:f8:29:4b:cf:a6:2d:1c:44:96:cf:3d:c7:e5:89:
b8:fe:3f:77:87:86:2a:84:f7:95:10:b5:41:66:c1:
66:cd:93:94:03:f8:36:ce:6c:ea:d3:8d:9d:1e:02:
c7:10:c5:cd:de:c0:87:f0:49:fe:49:f9:21:01:dc:
e7:25:e1:94:33:09:ea:e1:67:f6:b5:3e:3c:d8:60:
53:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:FE:DA:70:8F:FB:6E:84:2B:21:70:C3:E1:15:53:26:4F:CF:D2:9D
X509v3 Authority Key Identifier:
keyid:84:5D:04:2F:65:E1:B1:30:3A:44:E4:3E:0E:02:74:8A:75:83:7B:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/7_7acI_7boQrIXDD4RVTJk_P0p0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.160.0/22
185.119.88.0/24
185.119.91.0/24
185.241.213.0-185.241.214.255
IPv6:
2a0c:bf80:1b::/48
Signature Algorithm: sha256WithRSAEncryption
40:32:2d:13:1f:d9:45:89:79:00:4e:be:b9:d9:bb:37:f9:a8:
56:b0:48:4a:9d:c6:2c:96:cd:f8:b9:91:f3:bd:ec:ef:eb:35:
c1:61:32:fe:d5:0f:bf:57:48:ed:45:04:a0:26:78:30:4d:6a:
26:8c:44:30:b0:cd:e8:08:f6:59:7a:ac:cd:22:e7:ba:ac:dd:
20:ba:38:5d:e3:c5:14:e6:55:84:da:52:26:b3:83:79:bd:f9:
71:b4:14:75:9c:9c:b4:a6:ca:c6:62:36:84:0f:e0:4f:77:7a:
08:61:1f:0a:6d:39:05:09:70:b8:c8:85:ba:31:5e:ab:de:c7:
4d:d5:dd:b1:84:ee:3b:a1:bb:fe:97:d8:00:ca:9c:8f:ba:1c:
95:d7:a9:68:07:ea:77:e3:e8:e0:4c:f7:25:4c:8f:23:71:b5:
70:56:58:88:12:6e:bc:6d:ab:20:eb:57:30:db:05:c3:70:73:
b7:da:71:df:de:1c:9c:94:e2:8a:34:c0:4b:2e:f7:c1:3a:ed:
c1:4e:11:c7:86:d8:d4:b2:b7:0d:03:86:d6:c3:fa:ff:3d:4c:
d5:f3:41:0c:81:4d:f3:84:96:30:8e:5e:39:6d:76:f6:08:43:
49:9f:67:d9:fb:bd:98:a5:05:6c:a3:50:09:7a:49:76:79:21:
19:56:93:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:30:13 2024 by rpki-client on console-ams.rpki-client.org