Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/p6Fbt9e1FlAuLAID-x244dbgDNc.roa
File: p6Fbt9e1FlAuLAID-x244dbgDNc.roa (raw, json)
Hash identifier: jSuXpu+rw7IrK1Easfw9J/yin39/niC2aca89zKSnRA=
Subject key identifier: A7:A1:5B:B7:D7:B5:16:50:2E:2C:02:03:FB:1D:B8:E1:D6:E0:0C:D7
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 018571C322476C262DFF1C8C54372802B276
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/p6Fbt9e1FlAuLAID-x244dbgDNc.roa
Signing time: Mon 02 Jan 2023 09:14:51 +0000
ROA not before: Mon 02 Jan 2023 09:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207631
IP address blocks: 185.133.209.0/24 maxlen: 24
185.197.134.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:c3:22:47:6c:26:2d:ff:1c:8c:54:37:28:02:b2:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 2 09:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a7a15bb7d7b516502e2c0203fb1db8e1d6e00cd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:fe:e6:a2:10:5d:c7:b1:03:97:cb:8b:98:16:
64:c2:b6:f6:8a:43:28:f0:94:eb:ae:cd:89:46:ce:
04:52:e9:54:3e:54:09:e1:98:5e:71:d3:56:45:69:
7a:1d:f5:c6:4e:c9:80:69:d3:8a:ad:b7:df:9f:b0:
d9:2d:b7:da:f1:e2:d2:2a:cf:e9:9c:4f:ea:a1:d4:
0f:62:45:6d:d4:0c:e6:16:e2:ed:b9:3a:71:24:d9:
47:2a:48:af:94:76:85:2c:3e:3e:6d:1c:0b:75:ab:
50:e3:cc:72:92:8c:ab:66:29:69:76:32:1e:80:4a:
dd:7a:09:3b:26:e2:f0:2b:9f:f2:63:08:fe:e4:54:
3e:24:4e:e4:ec:04:67:0e:5a:13:98:c7:6e:69:db:
20:b1:52:5a:69:bc:7d:d4:b7:ee:69:40:73:b7:fa:
9e:d4:26:eb:f9:04:37:fd:a5:74:b7:e7:2c:41:a9:
86:68:02:f2:50:d9:89:b3:d2:cd:fb:ee:f9:04:69:
6a:c5:6e:e3:ad:d7:5f:af:1c:61:06:aa:75:f8:ac:
f2:b3:2f:51:71:ec:d2:86:0f:da:73:59:2d:82:27:
4c:f5:d8:7d:a6:d7:7b:e0:95:c6:9e:7c:57:cb:79:
77:44:e5:77:2d:ec:cf:cb:6a:27:fe:1a:b3:90:f6:
bd:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A1:5B:B7:D7:B5:16:50:2E:2C:02:03:FB:1D:B8:E1:D6:E0:0C:D7
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/p6Fbt9e1FlAuLAID-x244dbgDNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.209.0/24
185.197.134.0/24
Signature Algorithm: sha256WithRSAEncryption
94:b6:ff:d7:6d:ac:c5:e6:3f:74:f8:81:ac:db:2f:f0:05:eb:
59:0c:e3:01:d6:32:31:26:3b:c3:d4:4a:bc:bf:59:09:7a:db:
d9:2e:70:5f:8d:19:0e:7b:37:cb:fd:34:13:fb:65:81:3b:c5:
ad:4f:bd:f4:1d:39:d2:b5:88:ac:3d:73:68:49:16:3e:4d:00:
b0:fc:17:36:c5:b3:dc:16:98:4e:74:5c:0c:6f:da:d1:02:9c:
87:f9:4f:8e:a4:13:3e:a1:f5:1d:76:80:fd:b7:c5:da:a1:68:
26:69:55:85:d5:eb:cf:f0:9b:5a:7a:d0:a6:32:22:9a:d0:ce:
a2:03:67:cb:78:56:17:b0:6b:90:35:5c:b4:bd:e0:9e:93:13:
69:08:60:a8:ba:b8:22:b6:91:1d:28:bf:9e:f9:1c:5e:64:d8:
35:20:01:e9:5a:16:4f:df:b7:f5:3f:04:fe:18:3c:3e:7e:fb:
40:ce:a0:1a:72:3a:54:65:83:40:2d:a4:5d:2a:4e:1c:54:81:
f2:71:27:71:5b:6d:da:2b:5d:ea:00:84:4f:a0:f9:26:93:03:
09:8e:81:8f:26:5f:2a:e3:7b:97:82:26:b3:9f:3d:f4:16:66:
d6:ba:3f:a7:f3:b2:66:cc:19:dc:f3:68:89:95:92:f3:7c:fd:
a9:e0:25:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:35:16 2024 by rpki-client on console-fra.rpki-client.org