Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/u-8_oxPrt-ru67ZDj2vOWR3xWIg.roa
File: u-8_oxPrt-ru67ZDj2vOWR3xWIg.roa (raw, json)
Hash identifier: 4Mhrz99WO0ef/YN+f8l2RLVKrGSnE/orhMJaBd1Ic8o=
Subject key identifier: BB:EF:3F:A3:13:EB:B7:EA:EE:EB:B6:43:8F:6B:CE:59:1D:F1:58:88
Certificate issuer: /CN=d47d79c78a830699781b3e4331be092597c34b90
Certificate serial: 0185701EE601F1259321BF1FB2EB360725B7
Authority key identifier: D4:7D:79:C7:8A:83:06:99:78:1B:3E:43:31:BE:09:25:97:C3:4B:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1H15x4qDBpl4Gz5DMb4JJZfDS5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/u-8_oxPrt-ru67ZDj2vOWR3xWIg.roa
Signing time: Mon 02 Jan 2023 01:35:51 +0000
ROA not before: Mon 02 Jan 2023 01:35:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197558
IP address blocks: 185.103.224.0/22 maxlen: 22
185.10.148.0/22 maxlen: 24
77.237.252.0/22 maxlen: 22
185.98.48.0/22 maxlen: 22
46.253.48.0/20 maxlen: 24
2a00:6400::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:1e:e6:01:f1:25:93:21:bf:1f:b2:eb:36:07:25:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d47d79c78a830699781b3e4331be092597c34b90
Validity
Not Before: Jan 2 01:35:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bbef3fa313ebb7eaeeebb6438f6bce591df15888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:52:42:09:44:d6:be:b7:a3:4e:ff:6f:78:ea:
77:88:a7:a6:1c:ef:ef:7f:e8:02:36:5e:9c:02:da:
7d:a6:0d:ef:0c:cd:b1:63:d8:43:5f:76:90:14:e0:
c3:37:70:20:52:24:c3:fa:5b:d8:de:d0:cd:4c:da:
7a:7b:a1:03:a0:88:4b:a5:0e:ea:41:1e:1d:75:39:
9d:f3:9d:b3:1c:e8:68:e1:dc:6a:4c:bb:c9:c6:31:
02:3e:47:96:0c:c8:5c:7e:a9:35:23:15:60:b0:73:
c7:fa:24:76:cf:75:10:c0:2a:af:e7:cf:b9:93:69:
05:ed:89:69:ca:21:64:72:5b:c8:57:00:bd:d7:de:
b0:f6:32:99:04:6d:2d:8b:be:54:e4:9a:bc:7d:d4:
63:95:20:f4:97:6a:3e:f7:38:39:16:6e:13:21:4b:
0e:c3:3d:d5:4b:a9:ac:13:10:3b:65:d0:ff:a2:9a:
28:9c:02:6b:93:67:9a:26:05:98:f1:86:2a:3b:62:
88:d6:a4:3e:f2:a0:e1:91:8b:59:6b:b6:0b:98:07:
24:d3:dd:05:77:92:92:b3:f3:97:0b:db:68:53:c5:
3a:f7:e8:94:76:7c:e9:a9:a2:0b:ff:35:fa:37:f2:
a5:8c:f2:25:cc:77:91:08:09:7e:5e:88:1a:18:d4:
10:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:EF:3F:A3:13:EB:B7:EA:EE:EB:B6:43:8F:6B:CE:59:1D:F1:58:88
X509v3 Authority Key Identifier:
keyid:D4:7D:79:C7:8A:83:06:99:78:1B:3E:43:31:BE:09:25:97:C3:4B:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1H15x4qDBpl4Gz5DMb4JJZfDS5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/u-8_oxPrt-ru67ZDj2vOWR3xWIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.48.0/20
77.237.252.0/22
185.10.148.0/22
185.98.48.0/22
185.103.224.0/22
IPv6:
2a00:6400::/32
Signature Algorithm: sha256WithRSAEncryption
25:6f:dd:e0:21:1c:31:6c:6a:be:c9:cf:b5:34:9e:05:8b:32:
eb:f7:d5:10:50:39:c0:15:5c:ba:09:f6:a0:85:81:6b:d1:1b:
6a:91:8e:56:9e:1f:ee:18:57:aa:ff:17:f0:67:fe:aa:1b:66:
51:89:1e:77:dd:fe:07:1f:66:35:93:5f:99:a5:91:8b:94:a7:
ed:ed:d3:57:d7:7f:38:cb:34:80:f0:3f:3f:74:58:86:8b:eb:
66:44:79:98:be:b4:ee:9d:46:b2:a0:a9:ec:ae:36:9e:b7:e4:
cd:46:71:10:6f:55:f5:07:6c:66:e5:17:1f:1a:8f:65:fb:69:
61:55:e1:f0:e2:7e:83:3e:db:59:01:cb:2e:72:e0:8c:95:1f:
49:50:4e:27:aa:ba:1a:e0:b7:38:92:65:ff:f9:52:b5:44:b2:
12:1e:79:8e:56:52:28:d9:32:e5:93:95:8d:9e:31:57:ef:9e:
70:30:fc:64:c0:41:1d:f9:2c:29:5e:ab:6e:06:c8:0c:3b:89:
63:5e:27:de:12:26:3b:45:59:0e:d7:a4:b9:a6:94:5e:d0:fa:
af:b9:1e:25:18:3a:07:b4:59:8b:a8:8e:51:0f:68:c4:5a:8f:
d4:37:9b:ab:ae:69:13:5c:c5:cc:99:16:ba:04:98:30:3f:f3:
3a:c5:5e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:22:16 2024 by rpki-client on console-ams.rpki-client.org