Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/rEH93X5_43mOwQuZ-BkZuzMztLo.roa
File: rEH93X5_43mOwQuZ-BkZuzMztLo.roa (raw, json)
Hash identifier: LRdo2IbTU32d+r7PBgXcT8z+XN00BoPBIz+5hlBaJ3Q=
Subject key identifier: AC:41:FD:DD:7E:7F:E3:79:8E:C1:0B:99:F8:19:19:BB:33:33:B4:BA
Certificate issuer: /CN=971aeeea8798f76ec9a434e75637ecd881092ec2
Certificate serial: 018573685A94E30B4C06874E3FEF0191D9B5
Authority key identifier: 97:1A:EE:EA:87:98:F7:6E:C9:A4:34:E7:56:37:EC:D8:81:09:2E:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/rEH93X5_43mOwQuZ-BkZuzMztLo.roa
Signing time: Mon 02 Jan 2023 16:54:56 +0000
ROA not before: Mon 02 Jan 2023 16:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202699
IP address blocks: 185.117.8.0/24 maxlen: 24
185.117.11.0/24 maxlen: 24
185.117.9.0/24 maxlen: 24
185.117.10.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:68:5a:94:e3:0b:4c:06:87:4e:3f:ef:01:91:d9:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971aeeea8798f76ec9a434e75637ecd881092ec2
Validity
Not Before: Jan 2 16:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ac41fddd7e7fe3798ec10b99f81919bb3333b4ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:96:a1:9f:31:f7:45:97:52:14:fa:78:1c:15:
6e:85:46:30:4e:22:74:ae:bc:6e:b4:36:57:c5:16:
62:77:c4:a8:3a:25:60:9e:9b:66:64:6e:03:2f:d9:
8a:04:8c:00:15:fe:d5:7b:e8:c5:91:a3:e9:b0:16:
5f:04:c4:95:1a:c7:44:93:f8:ba:18:78:4c:a4:3e:
08:54:26:09:6f:51:57:80:b6:cb:37:29:e6:47:70:
65:8a:db:cc:23:7e:a5:d2:d6:44:59:56:9c:3a:5d:
9f:3d:0f:98:cc:e4:9c:f6:1d:dc:71:a0:c8:5a:24:
4d:c6:25:60:ca:ff:a3:fb:ce:9a:5b:ab:cb:a2:47:
62:25:f0:97:12:86:e6:88:7b:6c:7f:e5:fd:88:54:
5b:ce:7d:75:5a:ed:2d:2a:6b:ca:dc:ce:1a:2c:da:
58:b4:2f:d5:47:d1:0d:57:a8:72:01:ea:b0:af:f8:
9a:03:2d:07:a0:24:64:f0:1b:9e:71:24:35:f2:32:
d9:65:1a:56:a4:f4:f0:ca:97:a6:b0:60:f6:ce:d9:
e5:06:20:f9:cf:64:3a:f1:d1:64:92:ff:8e:85:e1:
46:92:a4:74:86:47:10:b5:bd:1a:ff:f2:9d:e6:aa:
0b:e3:9e:46:4e:06:1f:08:80:17:21:1a:a5:15:95:
aa:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:41:FD:DD:7E:7F:E3:79:8E:C1:0B:99:F8:19:19:BB:33:33:B4:BA
X509v3 Authority Key Identifier:
keyid:97:1A:EE:EA:87:98:F7:6E:C9:A4:34:E7:56:37:EC:D8:81:09:2E:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/rEH93X5_43mOwQuZ-BkZuzMztLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.8.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:25:7c:95:69:b9:12:b2:c0:bf:59:ad:32:e0:b1:29:c8:30:
77:b1:50:93:14:40:62:54:4a:e7:a6:ad:7c:d3:b6:9d:c6:5e:
d8:85:84:b1:f6:cd:60:ec:91:80:95:93:28:28:f8:15:1a:b0:
fe:2a:3e:6e:ab:60:3b:41:eb:d1:d9:44:49:e3:6f:09:a1:7b:
1b:87:23:91:dd:c4:4f:d5:e9:bc:f8:00:10:5d:fa:17:66:08:
a5:c6:4a:81:d3:64:84:a7:fa:35:56:e8:47:a7:9a:7e:aa:4f:
cf:89:bb:bf:d1:79:b0:19:fc:c3:90:25:8c:9b:13:fb:6d:96:
dd:f3:ee:65:0d:db:f6:70:2a:c2:ef:50:3a:32:b7:c4:d2:a7:
e9:b4:9d:3d:1c:e1:7a:99:56:76:fa:4d:f8:6c:10:87:ee:85:
7a:dd:a0:63:50:9e:f0:ba:6d:5c:de:ef:5f:8f:c8:8a:50:1c:
a3:0f:e1:dd:37:83:e0:2e:c4:c7:b5:c9:b1:96:69:a8:5b:65:
a6:82:af:66:cc:65:4a:b6:b9:59:bf:cb:96:6f:1a:2d:18:65:
88:59:3f:a3:29:9e:28:e9:c8:67:70:80:81:40:9f:de:a3:fa:
76:c9:20:27:3c:aa:14:d2:10:ae:af:b4:33:16:39:9e:05:34:
58:b6:14:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:37:24 2024 by rpki-client on console-fra.rpki-client.org