Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/rLUFHZHVC_OnEC7fNFVHwMVHgn0.roa
File: rLUFHZHVC_OnEC7fNFVHwMVHgn0.roa (raw, json)
Hash identifier: 2jW1G0pe12adClQC9lBuy81hBrxNgvmHNlcnwDdL6gA=
Subject key identifier: AC:B5:05:1D:91:D5:0B:F3:A7:10:2E:DF:34:55:47:C0:C5:47:82:7D
Certificate issuer: /CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Certificate serial: 01889F07DA72CD5697DAA358C10BA2C766E1
Authority key identifier: EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/rLUFHZHVC_OnEC7fNFVHwMVHgn0.roa
Signing time: Fri 09 Jun 2023 07:21:12 +0000
ROA not before: Fri 09 Jun 2023 07:21:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44092
IP address blocks: 185.22.56.0/24 maxlen: 24
185.22.58.0/24 maxlen: 24
185.22.57.0/24 maxlen: 24
185.22.59.0/24 maxlen: 24
147.185.163.0/24 maxlen: 24
147.185.162.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9f:07:da:72:cd:56:97:da:a3:58:c1:0b:a2:c7:66:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Validity
Not Before: Jun 9 07:21:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=acb5051d91d50bf3a7102edf345547c0c547827d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:90:14:2a:1d:d5:74:46:1c:26:66:93:b4:8e:
db:5a:86:3b:9b:c3:50:bf:a7:87:0b:60:6b:72:dc:
4a:28:87:46:66:c9:3b:a2:e0:49:c1:2b:a0:e9:ca:
bd:e1:c1:c0:a5:95:41:32:8d:af:98:c6:29:52:8f:
b7:fd:e4:3f:d7:68:3c:2e:40:1b:3d:ef:f3:1d:b3:
76:1c:00:e5:b0:8c:9e:79:c0:e0:5b:2c:ab:1c:5d:
3c:07:9f:e7:19:3e:f7:04:0e:b1:79:46:b3:e6:0c:
88:e0:9a:a1:ba:41:51:96:89:d3:7d:97:2c:8a:56:
aa:fb:c9:27:0a:a7:ca:3b:bb:c3:ed:dd:fc:5c:b9:
36:bd:f8:5f:a1:bd:de:2a:78:43:74:4c:d8:45:3a:
bf:74:9b:77:1a:5b:9e:0b:30:e4:c0:00:9f:4f:42:
72:48:0a:08:29:ab:0b:0b:7f:c6:50:25:2d:36:9c:
53:51:71:83:64:2b:1d:cc:17:5e:4f:95:62:5d:10:
f9:b1:51:72:f5:0d:40:b5:a0:2a:45:a3:38:69:d8:
8d:e1:a0:ca:05:c9:82:d8:6d:ea:57:82:5b:79:56:
4c:cf:b2:39:18:d5:fb:cf:b0:37:fa:06:23:64:d5:
d8:0b:e4:4b:66:59:33:6c:3b:87:80:8d:9a:4c:f9:
3c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B5:05:1D:91:D5:0B:F3:A7:10:2E:DF:34:55:47:C0:C5:47:82:7D
X509v3 Authority Key Identifier:
keyid:EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/rLUFHZHVC_OnEC7fNFVHwMVHgn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.185.162.0/23
185.22.56.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:ae:4e:d2:53:39:e8:e0:61:7e:d2:0e:4b:54:df:3d:14:06:
4c:45:40:b4:54:df:c8:6d:e9:f9:c1:fa:c8:87:a8:55:55:75:
a6:8d:6c:49:04:9f:27:e2:88:61:b3:9b:3d:68:a7:59:41:77:
7b:58:0a:73:37:8a:78:6e:a8:d1:a4:db:3e:30:31:d5:b7:3e:
e7:35:a0:ef:d6:16:0a:43:4f:26:1b:37:d7:97:2b:a1:b2:0c:
5b:a7:e0:50:71:22:ab:56:33:20:fd:6a:69:e0:a4:47:a9:f5:
20:0b:4c:ea:1c:2d:e2:25:2d:23:f9:55:57:de:fa:ee:ad:49:
8f:fb:5b:db:5e:64:65:9a:24:14:ac:62:5a:ed:14:03:be:f6:
39:6f:c1:76:ec:08:e4:12:52:37:d3:e6:e5:80:f0:46:62:fd:
5e:9a:50:0e:a4:6c:5e:10:7e:b3:4e:b6:d1:e2:b2:70:ff:e2:
48:bf:43:5e:0b:cb:0f:5b:2f:d7:19:a3:01:c4:b3:03:d4:a7:
d4:c5:aa:82:97:4f:d4:8e:94:a4:bb:90:2d:a2:bc:65:31:d3:
53:a6:9a:9f:dd:2e:26:8d:58:41:5d:d7:17:fe:99:70:13:77:
58:ce:58:e4:9a:d7:c2:9b:8f:ef:da:fa:94:f0:ab:75:af:a7:
b8:ea:38:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:35:34 2024 by rpki-client on console-fra.rpki-client.org