Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/c4bfd4-a0a1-4334-860a-4fa537dbe2e9/1/82hl3Lks9TvhV54TvpUYqbRnftA.roa
File: 82hl3Lks9TvhV54TvpUYqbRnftA.roa (raw, json)
Hash identifier: G8d2X/+If9a8odhufBYsz3BP28iXOFfe9eTC1Ju5BGg=
Subject key identifier: F3:68:65:DC:B9:2C:F5:3B:E1:57:9E:13:BE:95:18:A9:B4:67:7E:D0
Certificate issuer: /CN=e8a32e8a6ac6f6ec37860ee7c07eb8df93147779
Certificate serial: 01856EC200BDF00922E784A351BB9FEC03DB
Authority key identifier: E8:A3:2E:8A:6A:C6:F6:EC:37:86:0E:E7:C0:7E:B8:DF:93:14:77:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KMuimrG9uw3hg7nwH6435MUd3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/c4bfd4-a0a1-4334-860a-4fa537dbe2e9/1/82hl3Lks9TvhV54TvpUYqbRnftA.roa
Signing time: Sun 01 Jan 2023 19:14:45 +0000
ROA not before: Sun 01 Jan 2023 19:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3292
IP address blocks: 185.143.148.0/22 maxlen: 22
91.142.112.0/20 maxlen: 20
2a00:17b0::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:c2:00:bd:f0:09:22:e7:84:a3:51:bb:9f:ec:03:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8a32e8a6ac6f6ec37860ee7c07eb8df93147779
Validity
Not Before: Jan 1 19:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f36865dcb92cf53be1579e13be9518a9b4677ed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:6e:9d:67:fd:18:a5:e4:82:07:4d:df:30:0d:
22:72:ab:a8:50:69:57:d2:90:c6:b8:ce:a5:d4:16:
83:fe:dc:b4:c9:59:70:b1:bf:c2:99:3f:bb:b0:7a:
1a:ad:63:c8:11:6c:c0:c6:8c:32:04:bb:e4:41:c7:
f7:c3:9e:ea:dd:16:15:9a:ed:b6:e1:45:e8:6a:06:
01:f3:c5:62:03:27:6d:53:c4:b6:2b:40:4c:b4:6a:
f5:75:68:52:2a:6e:38:74:37:ba:fc:91:3c:bc:4d:
e9:32:a1:85:2f:d3:f6:69:ae:64:34:1a:ef:24:e8:
d7:3c:e0:45:4e:0a:4d:a0:8c:e7:da:cd:fd:80:0c:
a8:50:5a:7e:ed:a9:47:3e:a1:85:a7:50:25:41:4d:
0a:21:da:e4:d0:c3:4f:b5:8f:c7:75:6c:2b:d4:a1:
8f:9b:04:a1:0a:49:26:12:3c:04:03:e6:a9:69:1b:
83:25:5a:5c:56:6c:56:65:81:67:cb:34:40:52:f8:
eb:5d:09:85:74:bd:96:5e:3a:10:99:67:2f:43:da:
07:27:c6:dc:8f:fa:b0:63:1f:f4:73:94:9a:69:2d:
ee:5a:ae:51:fa:31:89:9a:e3:42:fa:02:ec:98:6d:
39:86:db:fa:c3:21:00:fe:36:54:ab:9b:1b:5a:61:
40:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:68:65:DC:B9:2C:F5:3B:E1:57:9E:13:BE:95:18:A9:B4:67:7E:D0
X509v3 Authority Key Identifier:
keyid:E8:A3:2E:8A:6A:C6:F6:EC:37:86:0E:E7:C0:7E:B8:DF:93:14:77:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KMuimrG9uw3hg7nwH6435MUd3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c4bfd4-a0a1-4334-860a-4fa537dbe2e9/1/82hl3Lks9TvhV54TvpUYqbRnftA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c4bfd4-a0a1-4334-860a-4fa537dbe2e9/1/6KMuimrG9uw3hg7nwH6435MUd3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.142.112.0/20
185.143.148.0/22
IPv6:
2a00:17b0::/32
Signature Algorithm: sha256WithRSAEncryption
b3:2d:e7:a7:70:e1:22:cf:71:2f:2c:90:5b:c0:52:16:0a:02:
10:f6:d4:3f:65:92:c5:11:2c:02:67:d2:40:20:bc:cd:55:c9:
35:b2:7b:80:8b:e0:7a:04:45:ea:d2:17:0a:97:38:1f:7d:21:
a2:f6:97:dc:54:fe:a3:7a:78:4b:20:46:89:be:c0:b4:03:11:
26:25:54:f0:3b:ba:db:41:ce:da:58:8a:16:68:10:a8:19:5c:
c7:87:7c:cd:0d:49:db:02:52:c1:36:35:76:8c:4c:3a:6e:e4:
45:e4:fe:10:a9:d4:77:12:14:be:3f:fd:b4:78:ba:5d:83:95:
b3:dc:9b:56:6c:46:b6:da:fc:66:ca:8d:60:2e:1c:55:82:95:
d0:e1:78:a5:88:43:91:db:de:11:fe:52:41:4b:8c:dc:cb:f8:
bf:a3:d6:ef:52:e1:9c:06:3b:88:d1:b4:e6:00:41:a1:98:86:
8e:67:dd:44:ff:ba:07:ff:48:7d:30:0c:69:79:bd:e9:1d:05:
3a:04:1a:ef:67:7f:10:db:c4:cb:79:10:e5:b4:9b:1b:1f:28:
3d:99:e5:7e:97:43:3b:16:10:a2:4a:f1:c4:be:ef:af:4b:bf:
06:f2:14:d8:09:36:8b:e1:15:5b:e1:31:4f:0a:60:88:f9:77:
75:80:70:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:14:35 2024 by rpki-client on console-ams.rpki-client.org