Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/C4hgxqZ1HdAuUzAPTB-eLB39f44.roa
File: C4hgxqZ1HdAuUzAPTB-eLB39f44.roa (raw, json)
Hash identifier: HfbIvZKDS332JresysOcOo8bmXjL/autI89tm/wMGYA=
Subject key identifier: 0B:88:60:C6:A6:75:1D:D0:2E:53:30:0F:4C:1F:9E:2C:1D:FD:7F:8E
Certificate issuer: /CN=e4e17e07b04dc76c9d6c91fafc2d5a8402c64b8e
Certificate serial: 01856E4B09BCD29C1CFA7E4B1ECBE38E7BC0
Authority key identifier: E4:E1:7E:07:B0:4D:C7:6C:9D:6C:91:FA:FC:2D:5A:84:02:C6:4B:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5OF-B7BNx2ydbJH6_C1ahALGS44.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/C4hgxqZ1HdAuUzAPTB-eLB39f44.roa
Signing time: Sun 01 Jan 2023 17:04:49 +0000
ROA not before: Sun 01 Jan 2023 17:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206141
IP address blocks: 185.155.188.0/22 maxlen: 22
147.28.48.0/20 maxlen: 20
2a07:9540::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:4b:09:bc:d2:9c:1c:fa:7e:4b:1e:cb:e3:8e:7b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4e17e07b04dc76c9d6c91fafc2d5a8402c64b8e
Validity
Not Before: Jan 1 17:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b8860c6a6751dd02e53300f4c1f9e2c1dfd7f8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:15:fc:21:6b:9e:31:0d:16:03:10:ae:b7:63:
5e:00:0c:69:52:83:42:ea:17:1d:94:67:58:41:87:
9b:b5:32:cd:a0:d0:de:84:8f:3b:d9:8b:38:9d:09:
e9:5d:8a:61:a9:d7:db:98:12:91:15:c6:64:85:ec:
9d:89:80:98:22:77:af:b2:94:70:6a:f8:ac:a7:8a:
12:1a:8d:81:03:01:0b:9e:3f:b8:49:76:92:1f:1c:
71:a7:98:ed:48:d9:21:c4:cc:1a:48:9f:86:02:60:
0c:df:93:e5:b3:43:11:42:1c:97:cd:d1:6d:40:77:
02:6a:72:41:e8:ce:37:46:19:94:23:5c:61:ac:ed:
75:05:d9:e4:ee:f3:21:31:db:4e:1b:23:81:ac:30:
21:11:11:5e:ce:ea:f5:31:f7:48:1a:5f:12:32:7e:
7e:06:83:bb:e8:f9:53:de:77:57:0c:92:88:1d:d0:
f1:40:b3:92:28:ac:ce:42:6a:68:3a:33:d3:72:e6:
c0:33:e2:0c:15:51:3d:b7:9d:71:9a:dd:9b:57:94:
70:b5:0e:0b:e6:27:e2:13:dd:64:e2:c6:42:78:28:
e3:42:ca:5f:44:16:17:3a:a8:ab:06:14:af:3e:11:
59:ec:fa:e8:f9:c9:31:18:ca:69:92:a2:4f:da:8c:
10:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:88:60:C6:A6:75:1D:D0:2E:53:30:0F:4C:1F:9E:2C:1D:FD:7F:8E
X509v3 Authority Key Identifier:
keyid:E4:E1:7E:07:B0:4D:C7:6C:9D:6C:91:FA:FC:2D:5A:84:02:C6:4B:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5OF-B7BNx2ydbJH6_C1ahALGS44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/C4hgxqZ1HdAuUzAPTB-eLB39f44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.28.48.0/20
185.155.188.0/22
IPv6:
2a07:9540::/29
Signature Algorithm: sha256WithRSAEncryption
50:5e:5b:a6:55:0a:f8:de:9a:52:68:b6:2b:09:9f:6a:9c:bd:
d6:1c:3f:01:af:b5:e8:a2:28:39:20:a7:3d:f5:b2:9f:4f:72:
6c:59:aa:92:46:4e:29:de:99:d2:9b:d9:55:4b:f5:5a:41:fb:
d3:24:80:d0:fd:dc:f8:28:2f:82:6d:60:d6:36:a4:b1:30:80:
55:57:65:83:e4:3c:13:05:dd:67:b9:f3:64:5a:15:6b:d9:cf:
89:31:d3:3c:ae:36:d2:2b:ba:fe:fb:c4:b8:48:a5:f2:b2:6b:
9f:f2:f5:b2:76:3f:9d:16:52:a9:fa:3e:1e:68:9f:12:06:9a:
9c:f2:6f:2b:15:ac:c7:15:e9:09:6d:7e:84:ab:a8:f1:e4:5f:
13:20:16:fb:3b:b5:c3:9b:5a:bf:d6:82:a3:53:3c:e9:85:b8:
cc:bb:f5:09:57:63:ee:90:15:73:a1:01:bc:99:01:1d:42:0b:
9d:34:80:6c:d4:97:14:93:cd:23:65:d3:41:fb:29:b8:00:b2:
47:83:5e:fa:7a:1e:37:ea:2a:7f:c7:5e:0d:a0:1e:aa:77:a6:
3c:f5:6a:d6:60:0b:61:63:35:6f:60:00:79:ba:35:0f:c2:8b:
3a:df:a6:c2:12:18:89:47:7a:d6:42:a8:a0:1d:61:af:29:1c:
01:13:3e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:40:02 2024 by rpki-client on console-fra.rpki-client.org