Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/EXevM-O9F04A4hM5dHqjitEkzao.roa
File: EXevM-O9F04A4hM5dHqjitEkzao.roa (raw, json)
Hash identifier: VYGFXddD0nmjotDKB5Pc3pG/klZkWTPNWp1USrqGySk=
Subject key identifier: 11:77:AF:33:E3:BD:17:4E:00:E2:13:39:74:7A:A3:8A:D1:24:CD:AA
Certificate issuer: /CN=d1e013ec8a5c56df241a9b2563d111f8e543bf91
Certificate serial: 018A4B6C02E314E50186740DB49B2E19EB8D
Authority key identifier: D1:E0:13:EC:8A:5C:56:DF:24:1A:9B:25:63:D1:11:F8:E5:43:BF:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/EXevM-O9F04A4hM5dHqjitEkzao.roa
Signing time: Thu 31 Aug 2023 11:48:04 +0000
ROA not before: Thu 31 Aug 2023 11:48:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 185.85.74.0/24 maxlen: 24
185.85.72.0/24 maxlen: 24
185.85.75.0/24 maxlen: 24
185.85.73.0/24 maxlen: 24
185.160.30.0/24 maxlen: 24
2a05:abc0::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4b:6c:02:e3:14:e5:01:86:74:0d:b4:9b:2e:19:eb:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1e013ec8a5c56df241a9b2563d111f8e543bf91
Validity
Not Before: Aug 31 11:48:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1177af33e3bd174e00e21339747aa38ad124cdaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e5:dc:7b:0d:09:06:4e:21:fb:41:4f:57:01:
62:e0:1b:ce:23:85:1a:cc:a4:28:91:46:f5:4d:06:
2f:dd:e8:4f:8f:96:bb:b9:9b:b3:58:49:82:6d:cb:
07:fd:3e:3b:3e:3a:81:ca:53:63:07:88:7e:aa:cf:
d2:32:03:f8:a7:49:f5:51:de:3b:26:aa:08:5f:24:
ac:8c:82:ce:f1:3a:65:fe:6c:d5:ee:d4:69:ab:f4:
14:91:68:a2:4f:dd:e5:78:71:e6:f8:21:ce:57:65:
04:a1:57:2f:63:d0:51:48:27:7c:e2:d5:09:be:38:
93:c5:73:8d:cc:17:3f:4d:22:06:28:6a:4c:ec:a3:
d4:07:cd:47:fe:30:29:32:52:a4:1a:9d:92:a9:2f:
69:63:53:8d:62:06:80:5b:c1:9d:e1:47:6a:14:ce:
69:4c:67:34:af:9f:bd:f6:68:a9:3a:4c:5b:90:47:
35:84:e8:79:73:0c:8e:4e:6a:6a:5f:45:cf:66:1c:
70:5f:1f:d3:5e:e3:8e:e8:59:d8:98:64:df:77:c7:
23:6f:71:dc:6f:d1:0d:ca:8b:9f:ba:02:6c:cc:77:
8b:68:e5:ca:0d:0d:9a:04:35:d1:38:fa:49:2d:32:
9e:e6:7c:bd:ba:16:05:e4:93:9a:2d:dc:98:1f:68:
32:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:77:AF:33:E3:BD:17:4E:00:E2:13:39:74:7A:A3:8A:D1:24:CD:AA
X509v3 Authority Key Identifier:
keyid:D1:E0:13:EC:8A:5C:56:DF:24:1A:9B:25:63:D1:11:F8:E5:43:BF:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/EXevM-O9F04A4hM5dHqjitEkzao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.85.72.0/22
185.160.30.0/24
IPv6:
2a05:abc0::/29
Signature Algorithm: sha256WithRSAEncryption
9d:2e:0e:7a:58:4c:52:2e:85:ab:80:03:7a:fb:e2:99:cf:96:
6d:dc:5e:cb:e9:f6:c4:86:15:17:01:1a:55:1d:78:32:bb:5a:
9c:db:e2:33:be:2a:98:ef:63:cc:80:fc:10:ff:9c:2b:81:fe:
2b:b8:6c:91:c2:e6:29:e3:4a:0a:6d:b1:8c:14:11:a9:46:5b:
01:1d:83:f4:8b:5f:e5:6f:c2:08:c2:18:8a:53:5e:44:23:e5:
46:1f:9d:8e:ae:d0:43:cc:10:68:36:bc:46:ff:75:d4:04:80:
9d:58:cc:df:6a:7c:8c:bd:01:26:f7:0d:c2:c6:06:4d:eb:24:
61:33:81:8f:ca:bd:da:e4:39:16:12:d1:d7:d0:29:e5:e9:93:
fa:f8:c3:b2:af:c9:54:f5:4e:e5:31:8d:98:b3:3e:e8:bd:0c:
b9:ea:60:ef:fa:74:64:12:0f:75:fb:3e:62:2f:16:a9:9f:e6:
72:78:b9:b1:48:b9:05:23:88:f5:dd:30:b3:7e:2c:66:72:2f:
96:a3:b2:84:95:00:47:e6:57:dc:38:af:06:36:3c:b7:7d:7c:
a0:aa:d5:43:c6:1a:70:f5:74:31:6e:d9:4a:92:ef:6d:f0:b5:
3f:b9:eb:ad:93:59:8e:31:77:55:7d:a8:23:93:c1:d5:96:13:
39:5d:4a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 9 07:33:23 2023 by rpki-client on console-ams.rpki-client.org