Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/d00210-d685-48b2-8e53-bb2fdca78245/1/uFz0xCxfh8zc9WvRreRgoGksh8I.roa
File: uFz0xCxfh8zc9WvRreRgoGksh8I.roa (raw, json)
Hash identifier: e35aUpl4qB9nVXGSbpj0XXM6XaAl2oxhDtQnBTFoYmE=
Subject key identifier: B8:5C:F4:C4:2C:5F:87:CC:DC:F5:6B:D1:AD:E4:60:A0:69:2C:87:C2
Certificate issuer: /CN=133f456d2b82cc6d80b7b1ac571b4787f1569b60
Certificate serial: 01857246BD37C8DB43CFE4D7C0C93D4D137E
Authority key identifier: 13:3F:45:6D:2B:82:CC:6D:80:B7:B1:AC:57:1B:47:87:F1:56:9B:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ez9FbSuCzG2At7GsVxtHh_FWm2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/d00210-d685-48b2-8e53-bb2fdca78245/1/uFz0xCxfh8zc9WvRreRgoGksh8I.roa
Signing time: Mon 02 Jan 2023 11:38:36 +0000
ROA not before: Mon 02 Jan 2023 11:38:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210585
IP address blocks: 185.23.211.0/24 maxlen: 24
185.23.208.0/24 maxlen: 24
185.23.209.0/24 maxlen: 24
185.23.210.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:bd:37:c8:db:43:cf:e4:d7:c0:c9:3d:4d:13:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133f456d2b82cc6d80b7b1ac571b4787f1569b60
Validity
Not Before: Jan 2 11:38:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b85cf4c42c5f87ccdcf56bd1ade460a0692c87c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ea:e4:b7:34:43:59:46:6e:2b:26:05:1b:30:
ee:19:9d:89:b8:1c:21:49:d5:fa:8a:42:ae:4e:4d:
11:70:22:4a:15:ec:2d:ff:a8:83:63:87:84:74:f5:
41:e8:08:86:09:44:d7:18:4f:a8:f7:8d:73:45:46:
5e:59:70:0e:5a:ca:68:8e:5c:97:ba:67:da:7d:dd:
7d:99:ef:9d:9b:a2:8e:91:48:e8:24:76:9a:76:26:
1c:8b:eb:3b:21:e3:74:fc:b9:7a:db:42:b3:74:88:
36:76:d1:44:8c:91:e9:40:75:1c:64:6d:64:28:5c:
92:58:40:9d:77:0b:0e:cb:d8:f5:4a:3b:1c:3f:cc:
f0:e9:23:dc:b3:e1:60:49:41:9d:da:cf:19:a0:09:
76:66:a4:0e:cc:fc:72:a1:fd:15:a4:d0:a6:de:a2:
4e:05:63:e7:b2:e5:91:33:3c:d1:96:dc:13:55:39:
68:ae:34:70:a4:98:03:d8:56:44:81:10:72:8b:9c:
99:7e:0a:38:f0:5f:d9:64:d5:ae:9d:35:23:98:1e:
09:8a:2a:b4:74:ab:ae:ba:51:97:2e:1e:6a:25:9c:
ef:50:95:04:ee:79:74:6e:cd:61:11:92:ba:06:b8:
e1:51:94:8f:a5:6d:12:48:66:9d:67:32:d6:26:e2:
2b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:5C:F4:C4:2C:5F:87:CC:DC:F5:6B:D1:AD:E4:60:A0:69:2C:87:C2
X509v3 Authority Key Identifier:
keyid:13:3F:45:6D:2B:82:CC:6D:80:B7:B1:AC:57:1B:47:87:F1:56:9B:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ez9FbSuCzG2At7GsVxtHh_FWm2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d00210-d685-48b2-8e53-bb2fdca78245/1/uFz0xCxfh8zc9WvRreRgoGksh8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d00210-d685-48b2-8e53-bb2fdca78245/1/Ez9FbSuCzG2At7GsVxtHh_FWm2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.208.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:8b:36:df:a5:b8:8c:3f:fa:83:93:bd:68:c4:07:21:f6:93:
12:46:da:a8:61:61:66:8b:96:ef:2a:45:8b:4e:ca:d1:8f:45:
ae:c3:82:af:b5:76:48:a5:27:66:56:47:93:d0:15:b5:58:fd:
5e:ec:93:2b:88:5c:dd:6c:16:60:f2:45:1c:ec:3f:20:5f:e7:
b5:db:4e:fc:9e:df:aa:db:c0:d0:56:ab:3a:61:b4:d0:47:8c:
c6:3e:ce:4e:9e:af:2e:48:6c:58:61:61:f3:37:35:4c:a2:a1:
7a:cf:ba:b5:36:4a:e3:a7:b3:fc:fa:29:13:99:9e:46:67:03:
e3:30:fe:14:1a:c0:91:b4:1a:fe:01:f2:00:e0:51:ca:0c:be:
0a:89:b1:1d:05:e1:be:11:44:03:87:37:31:cb:ad:1d:e7:89:
24:ed:55:2d:49:03:71:38:77:0d:06:e1:90:d5:3e:14:1c:04:
6b:ba:73:4c:bd:fe:ed:38:9a:22:6d:56:dc:36:03:46:80:c1:
df:7b:c2:c9:94:b8:5d:9f:e6:17:12:b0:f4:4a:61:de:10:2c:
91:0d:96:c5:60:d1:40:a2:b5:bd:e0:9d:c1:0b:c5:31:a5:f4:
9d:d6:e4:0e:d1:f7:44:9f:e0:85:b7:c9:43:95:ed:7b:65:c4:
fd:38:2f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:24 2024 by rpki-client on console-fra.rpki-client.org