Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/9r6Gy66VnkdVyuffq6i2VrbC9VQ.roa
File: 9r6Gy66VnkdVyuffq6i2VrbC9VQ.roa (raw, json)
Hash identifier: 997MIEbxdJ8r7ATso3yo0VdPDZcjLNA0Qq3VS9S/ymw=
Subject key identifier: F6:BE:86:CB:AE:95:9E:47:55:CA:E7:DF:AB:A8:B6:56:B6:C2:F5:54
Certificate issuer: /CN=84f824d32df1a5113d82101345d785a38addbde5
Certificate serial: 0185727A290843B4FEA9A39952D00B2AABA5
Authority key identifier: 84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/9r6Gy66VnkdVyuffq6i2VrbC9VQ.roa
Signing time: Mon 02 Jan 2023 12:34:46 +0000
ROA not before: Mon 02 Jan 2023 12:34:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2856
IP address blocks: 188.172.160.0/21 maxlen: 21
188.172.160.0/20 maxlen: 20
188.172.168.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:7a:29:08:43:b4:fe:a9:a3:99:52:d0:0b:2a:ab:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f824d32df1a5113d82101345d785a38addbde5
Validity
Not Before: Jan 2 12:34:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f6be86cbae959e4755cae7dfaba8b656b6c2f554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:56:e6:df:73:4e:cf:4d:18:9f:94:b1:1a:ac:
a1:45:31:a2:34:bf:87:bc:32:ef:28:c6:12:bd:b2:
1d:95:6f:32:fa:af:4d:1d:ee:b4:af:bc:60:53:a0:
f3:cb:1a:ce:bb:c3:65:03:ec:aa:8f:bd:87:02:ff:
25:9c:65:05:9e:3c:bb:64:2a:c6:b0:e4:80:43:10:
38:e7:45:61:5c:41:cd:62:ed:0f:81:a0:4d:0c:8c:
d7:83:44:9e:67:c3:1e:8e:6c:b0:ac:df:fd:23:85:
ad:a4:29:e3:26:ed:60:31:d6:c5:57:da:be:b3:be:
8b:d7:db:d8:07:fa:94:c2:8a:ee:f6:2c:f1:71:98:
2b:69:ec:f0:85:e5:53:2d:43:c1:a4:ef:46:95:ab:
fc:49:c4:68:b8:2c:da:61:0a:de:99:08:27:d5:76:
6c:a3:5e:83:ce:b7:2b:92:2b:74:66:58:d8:d7:0a:
26:e3:06:be:47:ac:5b:5b:7b:bb:fb:c0:f0:cf:6e:
3f:88:92:11:63:52:d1:fc:bd:8b:77:7b:24:1e:c2:
77:a1:47:38:c7:09:e5:c4:8b:cc:ee:f6:f1:71:f1:
91:b3:e7:33:fa:80:6f:75:56:9d:6a:8a:00:59:c5:
1a:1d:8b:a1:2c:98:c3:ea:9a:6c:cb:a7:1d:7c:63:
60:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:BE:86:CB:AE:95:9E:47:55:CA:E7:DF:AB:A8:B6:56:B6:C2:F5:54
X509v3 Authority Key Identifier:
keyid:84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/9r6Gy66VnkdVyuffq6i2VrbC9VQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.172.160.0/20
Signature Algorithm: sha256WithRSAEncryption
30:5a:4f:b5:52:06:23:4d:2d:06:3f:34:eb:ed:45:9c:b4:fd:
70:51:37:42:bd:0b:cc:39:0b:46:62:3e:22:5c:77:42:7f:df:
4e:ea:4a:e2:c6:d9:21:6a:4a:1f:9b:9d:0f:1c:0f:4e:88:20:
f8:56:2c:29:17:d7:80:bf:ec:c3:b9:87:9e:eb:44:8e:2d:6e:
a7:8a:b9:34:15:18:4d:95:91:cc:2d:ee:f7:1c:ae:0b:bf:c4:
f8:cf:b7:c8:b5:94:52:fb:bd:be:54:14:f3:f9:85:64:5d:49:
30:af:b6:0c:7b:b1:2d:0f:68:bc:61:d8:c0:cb:ef:2d:21:d1:
e1:fb:96:3b:30:3e:e3:06:4c:ee:5c:60:c0:88:7c:92:19:b3:
7c:29:ff:6f:8b:e0:51:d1:24:0c:8f:3a:53:50:db:b7:29:ff:
07:9b:e1:e4:47:84:fd:4d:5d:fc:e9:60:28:e6:a4:bb:49:63:
3b:ed:e9:94:0f:b2:d4:fc:99:10:43:c4:4e:c6:57:a0:92:73:
e8:da:f6:84:0f:9f:c7:94:4a:ca:f8:db:d2:5c:4b:d2:cc:9c:
8f:07:ce:83:07:84:b6:76:29:8a:84:fd:b1:59:05:b1:bb:0d:
eb:35:c2:51:fa:51:81:bd:fb:e5:1d:5a:a3:a7:df:8f:c1:ca:
68:6a:74:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:50 2024 by rpki-client on console-fra.rpki-client.org