Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/hF-pITXjVqSOXbpzVtHDRd-8crU.roa
File: hF-pITXjVqSOXbpzVtHDRd-8crU.roa (raw, json)
Hash identifier: mPfnnoHBkBuD/+DHYhH5TDM0yRQI/4zpYwE89QFMF7c=
Subject key identifier: 84:5F:A9:21:35:E3:56:A4:8E:5D:BA:73:56:D1:C3:45:DF:BC:72:B5
Certificate issuer: /CN=ddead919b85a13051d0208b7e28ddccb398b14d6
Certificate serial: 018779D875189D57A9850FB4E0ABB9E2EB79
Authority key identifier: DD:EA:D9:19:B8:5A:13:05:1D:02:08:B7:E2:8D:DC:CB:39:8B:14:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3erZGbhaEwUdAgi34o3cyzmLFNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/hF-pITXjVqSOXbpzVtHDRd-8crU.roa
Signing time: Thu 13 Apr 2023 09:00:41 +0000
ROA not before: Thu 13 Apr 2023 09:00:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42845
IP address blocks: 193.28.233.0/24 maxlen: 24
185.135.124.0/22 maxlen: 22
185.232.224.0/22 maxlen: 22
185.40.224.0/22 maxlen: 22
194.150.92.0/22 maxlen: 22
185.185.116.0/22 maxlen: 22
2a00:7200::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:79:d8:75:18:9d:57:a9:85:0f:b4:e0:ab:b9:e2:eb:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddead919b85a13051d0208b7e28ddccb398b14d6
Validity
Not Before: Apr 13 09:00:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=845fa92135e356a48e5dba7356d1c345dfbc72b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:13:07:e9:e4:d8:05:5c:d5:57:7e:83:15:41:
c2:0f:e9:6c:5b:14:bc:c0:09:3c:68:62:8f:0e:e0:
8f:4b:ef:ee:b3:38:04:20:82:78:32:a4:18:c3:a4:
32:fa:0f:f8:9d:d4:5e:73:88:35:a0:56:7d:a6:0c:
4e:95:b2:f2:f1:c0:58:be:d8:7b:20:be:0c:da:13:
d5:62:45:92:6b:0c:f9:82:d7:28:c3:a5:5b:45:01:
21:66:46:7a:5e:54:58:30:f0:81:1b:b4:c2:ce:82:
b0:71:cd:cf:1a:a9:ff:2d:68:10:40:35:b1:d9:66:
f2:3b:15:68:b3:8c:38:db:72:80:7f:ed:30:ad:55:
c1:78:cb:64:54:74:08:df:69:ed:90:ef:9c:9e:a2:
4d:1d:d6:a3:98:45:86:2e:4f:0d:1d:ea:4a:c8:38:
82:47:70:d4:69:93:7b:b5:7f:aa:94:10:8e:70:ea:
99:67:7f:8d:1d:49:d3:f1:cb:d0:1d:78:a8:94:8d:
e7:2d:cb:6d:a0:7c:31:1c:8c:cf:44:bc:cd:06:25:
66:d8:54:75:25:5a:01:29:e8:82:57:d1:94:ee:a6:
8b:77:f9:18:1e:f1:30:14:7e:15:b1:0f:84:84:9f:
0b:5c:73:18:a1:f3:0d:d0:7f:60:88:ff:a3:ee:33:
4f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:5F:A9:21:35:E3:56:A4:8E:5D:BA:73:56:D1:C3:45:DF:BC:72:B5
X509v3 Authority Key Identifier:
keyid:DD:EA:D9:19:B8:5A:13:05:1D:02:08:B7:E2:8D:DC:CB:39:8B:14:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3erZGbhaEwUdAgi34o3cyzmLFNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/hF-pITXjVqSOXbpzVtHDRd-8crU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.40.224.0/22
185.135.124.0/22
185.185.116.0/22
185.232.224.0/22
193.28.233.0/24
194.150.92.0/22
IPv6:
2a00:7200::/32
Signature Algorithm: sha256WithRSAEncryption
0e:db:dc:07:96:ae:d9:f5:6d:01:91:bb:59:29:29:8a:d5:a6:
c3:f2:56:6c:10:9e:43:af:a0:a4:25:03:06:46:af:1b:0b:e0:
62:c6:b1:ad:b5:3e:11:72:7b:e7:90:f9:86:c9:1a:f1:08:72:
6c:69:21:39:63:30:2d:12:80:b8:de:5d:60:04:dd:6c:45:db:
89:e3:49:f5:58:13:00:ea:63:6b:62:21:84:c0:d0:e6:fd:c9:
1c:1d:96:e2:35:a0:52:ce:cf:c1:01:ab:ef:bf:d9:fa:1d:37:
a3:a7:1c:98:19:6d:a7:d9:f9:16:01:df:d7:ac:f1:0e:9a:bf:
59:fe:3b:3c:cb:f3:d4:a7:cb:93:e7:82:07:30:32:c3:3b:47:
f7:95:c4:e6:1d:d3:8e:6b:e2:e6:75:cf:c7:26:c4:75:07:84:
68:c1:45:e9:77:8e:e1:8e:d2:83:a7:20:6d:17:05:9f:90:93:
00:ea:04:14:16:47:eb:c4:1b:cd:50:02:02:03:8c:21:08:ad:
22:55:01:8c:9c:13:6a:f0:72:a7:f2:87:17:f4:f5:51:92:fe:
a3:f1:3b:6c:6c:2e:72:c3:b3:47:83:3f:7e:81:45:2a:df:2e:
5e:db:c1:f4:01:51:1f:e2:8d:31:fe:2d:57:2d:6e:0a:83:1a:
41:0a:ca:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:50 2023 by rpki-client on console-ams.rpki-client.org