Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/KLDFnpiHh0rXwv9k0hep86OIFls.roa
File: KLDFnpiHh0rXwv9k0hep86OIFls.roa (raw, json)
Hash identifier: x8x5Z5E9KS/gIu0vu5P4NHYBMCar2HmqG88zvvr4aag=
Subject key identifier: 28:B0:C5:9E:98:87:87:4A:D7:C2:FF:64:D2:17:A9:F3:A3:88:16:5B
Certificate issuer: /CN=e5cf78f5f339ee777da749210a96eced96b7f2e7
Certificate serial: 018571F0DD47216667262C952379860A6A43
Authority key identifier: E5:CF:78:F5:F3:39:EE:77:7D:A7:49:21:0A:96:EC:ED:96:B7:F2:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5c949fM57nd9p0khCpbs7Za38uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/KLDFnpiHh0rXwv9k0hep86OIFls.roa
Signing time: Mon 02 Jan 2023 10:04:48 +0000
ROA not before: Mon 02 Jan 2023 10:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1921
IP address blocks: 185.80.190.0/24 maxlen: 24
185.80.191.0/24 maxlen: 24
185.80.188.0/24 maxlen: 24
185.80.189.0/24 maxlen: 24
2a05:7f00:188::/48 maxlen: 48
2a05:7f00:190::/48 maxlen: 48
2a05:7f00:189::/48 maxlen: 48
2a05:7f00:191::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:f0:dd:47:21:66:67:26:2c:95:23:79:86:0a:6a:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5cf78f5f339ee777da749210a96eced96b7f2e7
Validity
Not Before: Jan 2 10:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=28b0c59e9887874ad7c2ff64d217a9f3a388165b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:70:de:46:0e:9c:6a:01:8f:aa:e1:99:4f:4e:
d5:45:8a:9e:07:18:be:2d:90:34:d3:2d:2f:9d:16:
95:87:8b:3f:af:5e:e7:f2:4e:e6:83:6e:15:f9:02:
71:3b:02:9f:ab:b9:23:0e:07:1c:1e:6f:6d:09:6b:
f1:e9:58:a1:18:83:23:ed:18:9d:37:ac:dd:bf:5b:
a2:5a:03:6e:6c:f0:c3:88:e0:f7:f9:e5:6a:e5:a5:
b1:5f:42:98:8a:f4:2c:9b:95:74:8c:7b:f0:af:ce:
76:34:02:ad:e2:7e:c8:da:a1:29:32:16:5d:ba:ac:
8f:b5:75:20:24:7b:fb:b9:54:a7:a7:02:c1:1e:80:
ae:b7:32:a5:53:87:5e:01:07:17:f6:94:3a:5a:37:
77:c0:03:e8:18:43:b5:18:32:12:35:36:d2:b9:1a:
d8:e7:da:fc:85:7e:d6:3f:f9:c2:9c:c4:39:ee:60:
41:3d:bf:45:9d:b5:fb:63:97:e1:0d:43:4b:67:1b:
93:43:77:c1:13:26:dd:57:7d:fa:1c:56:9c:7a:fa:
22:e4:06:b3:84:80:c0:7e:6a:03:74:2f:e5:45:6d:
ba:8b:7b:54:cb:af:91:2c:d5:1e:b7:f3:8f:4a:41:
55:18:af:13:9e:b4:bb:c4:cd:2d:26:48:aa:63:15:
92:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B0:C5:9E:98:87:87:4A:D7:C2:FF:64:D2:17:A9:F3:A3:88:16:5B
X509v3 Authority Key Identifier:
keyid:E5:CF:78:F5:F3:39:EE:77:7D:A7:49:21:0A:96:EC:ED:96:B7:F2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c949fM57nd9p0khCpbs7Za38uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/KLDFnpiHh0rXwv9k0hep86OIFls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.80.188.0/22
IPv6:
2a05:7f00:188::/47
2a05:7f00:190::/47
Signature Algorithm: sha256WithRSAEncryption
13:da:7b:db:95:fb:ce:e8:99:86:86:0b:0c:26:72:fd:86:bf:
32:52:3e:a2:08:1f:01:7c:d4:5f:93:dd:61:f3:54:48:b1:ac:
57:48:4c:0a:d5:da:99:1c:31:5f:af:af:0f:07:cf:5c:62:01:
f5:7f:8a:dc:f0:f5:a1:c5:05:cd:1c:11:a3:e0:48:0e:f9:c6:
41:fd:ef:a8:5c:21:22:1b:6b:9b:3f:f2:2b:70:82:89:37:79:
94:e8:7e:2d:ed:7e:f7:44:29:16:f4:ce:f8:54:6b:b3:fd:da:
71:5e:1b:57:fa:a7:49:29:14:26:1a:7e:12:69:93:06:9b:e6:
03:01:2d:0e:d8:92:23:dc:c5:1b:7a:2f:00:a8:18:90:24:f9:
91:82:40:b6:13:5d:a5:85:ae:78:18:7f:a3:71:38:11:3c:f3:
8f:83:0f:e1:94:ef:02:81:d6:13:87:74:c8:b4:91:4c:84:2e:
db:b8:23:06:c9:7f:cd:fd:1b:d8:50:70:eb:e8:e4:77:71:76:
10:1b:b4:01:41:ec:ad:40:eb:bd:55:51:f0:0e:10:30:2e:a2:
b8:f4:86:11:fa:fd:c4:82:53:02:68:e3:64:b9:79:15:10:97:
a3:d7:29:7e:0b:1f:54:bf:bb:91:c8:02:23:e2:46:39:19:8e:
a0:18:07:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:28 2023 by rpki-client on console-ams.rpki-client.org