Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/IG8zxw-FOomeLct9jVrnXx4sxHs.roa
File: IG8zxw-FOomeLct9jVrnXx4sxHs.roa (raw, json)
Hash identifier: gFXZr5HjFCMP2G9XgQ+7mQ1S4K2gV+bzPS+xRoifWPw=
Subject key identifier: 20:6F:33:C7:0F:85:3A:89:9E:2D:CB:7D:8D:5A:E7:5F:1E:2C:C4:7B
Certificate issuer: /CN=87e965e78831a88ba8fa419432a9d7bac9db38a3
Certificate serial: 018C0FFAC4227EE82C2E190B29E574224A15
Authority key identifier: 87:E9:65:E7:88:31:A8:8B:A8:FA:41:94:32:A9:D7:BA:C9:DB:38:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h-ll54gxqIuo-kGUMqnXusnbOKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/IG8zxw-FOomeLct9jVrnXx4sxHs.roa
Signing time: Mon 27 Nov 2023 08:52:21 +0000
ROA not before: Mon 27 Nov 2023 08:52:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210275
IP address blocks: 83.229.65.0/24 maxlen: 24
185.169.32.0/22 maxlen: 24
176.105.148.0/22 maxlen: 24
185.35.78.0/23 maxlen: 24
2a13:2400::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:0f:fa:c4:22:7e:e8:2c:2e:19:0b:29:e5:74:22:4a:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87e965e78831a88ba8fa419432a9d7bac9db38a3
Validity
Not Before: Nov 27 08:52:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=206f33c70f853a899e2dcb7d8d5ae75f1e2cc47b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:5c:34:d5:ce:aa:ed:1a:f5:fb:92:53:9f:0e:
5a:6f:b7:3d:49:d9:99:b8:60:69:7e:0e:e3:89:88:
c9:a3:2f:7a:11:b6:d3:33:b3:d6:17:15:8f:e8:71:
07:cd:f9:17:89:ee:3e:7b:0e:fb:d9:a1:a7:b7:79:
a5:7a:9e:47:84:62:64:63:ed:0b:dc:83:8e:b1:24:
b4:18:61:d5:48:18:be:2d:2a:89:b0:f8:e5:4d:ee:
01:1d:44:61:8a:1e:de:7b:30:6c:46:dc:29:11:5c:
3a:86:51:bd:fb:07:7b:26:f0:8a:30:70:09:51:a7:
a3:52:c2:e9:97:fa:5b:eb:56:dd:c4:3a:c8:83:54:
91:c2:af:3e:24:37:0d:6c:55:7d:ff:3f:54:c2:ce:
9a:69:c4:59:6b:0e:70:f8:d5:d8:6a:5c:c6:7d:b6:
1f:8c:7e:8b:24:38:77:da:c0:37:c1:5f:00:93:94:
a1:0c:89:5e:9d:b6:bc:9e:84:8c:89:0b:41:0b:a9:
19:76:40:a1:08:7a:86:f3:32:60:a1:92:59:40:02:
d8:fd:f7:27:ce:26:77:06:2e:25:c9:83:c7:9d:ae:
5a:d5:98:93:53:6b:09:9b:08:5d:3d:74:af:0a:5f:
ee:f0:b7:7b:b2:2b:c8:d1:c6:52:e6:cf:95:d7:6f:
4a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:6F:33:C7:0F:85:3A:89:9E:2D:CB:7D:8D:5A:E7:5F:1E:2C:C4:7B
X509v3 Authority Key Identifier:
keyid:87:E9:65:E7:88:31:A8:8B:A8:FA:41:94:32:A9:D7:BA:C9:DB:38:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h-ll54gxqIuo-kGUMqnXusnbOKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/IG8zxw-FOomeLct9jVrnXx4sxHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/h-ll54gxqIuo-kGUMqnXusnbOKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.229.65.0/24
176.105.148.0/22
185.35.78.0/23
185.169.32.0/22
IPv6:
2a13:2400::/29
Signature Algorithm: sha256WithRSAEncryption
ae:2a:60:a1:79:31:9d:e8:8c:56:98:d7:a4:bb:b7:7e:6a:08:
41:7c:13:95:df:da:f9:16:8b:43:5d:95:e3:61:e6:ac:1d:5b:
e9:cc:9d:95:5a:17:b6:d9:c3:2d:9f:40:d3:73:49:ee:5e:88:
92:d4:72:ee:6f:92:56:e2:2c:fa:ed:d3:c6:09:ca:75:a1:5e:
ad:94:e0:be:d1:c3:7a:9b:1f:c1:91:25:2f:89:b8:12:1c:c4:
d6:12:61:a3:54:84:ba:9f:00:46:02:eb:33:65:dd:aa:16:4a:
85:5c:62:15:78:8b:b0:eb:53:0a:61:fc:d0:b0:33:c5:7a:dc:
fa:02:86:3c:12:49:09:93:ca:5d:5d:13:6e:ca:2f:c3:8a:49:
2a:8c:97:f0:37:4b:1d:f3:7c:a1:a4:22:01:22:0d:66:f6:6d:
ae:a9:52:4b:be:e4:c2:e8:91:46:7b:7a:2a:ef:2c:80:db:c2:
4a:45:ba:30:3c:1d:3f:30:99:3c:a1:d3:7b:ba:10:64:14:37:
d6:ec:57:08:95:08:64:8a:bd:18:18:56:b4:75:50:f3:24:8d:
28:38:1b:48:60:68:72:e8:a2:da:c5:76:a9:eb:02:0d:11:9d:
8e:eb:d3:40:69:f3:bb:ac:e4:d5:77:1f:66:fa:74:a5:8d:8c:
2f:b9:b2:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:14:40 2024 by rpki-client on console-ams.rpki-client.org