Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/kO8JNI2SeoC0mocSeKqm2uoxTaQ.roa
File: kO8JNI2SeoC0mocSeKqm2uoxTaQ.roa (raw, json)
Hash identifier: h1q4d6pMuWLbMWVE9EdNPhq/30xZrh5Gtxt7o6wcXYE=
Subject key identifier: 90:EF:09:34:8D:92:7A:80:B4:9A:87:12:78:AA:A6:DA:EA:31:4D:A4
Certificate issuer: /CN=5806da5a59251275ceb18694e17415352aedd6aa
Certificate serial: 01856F66CB0535F41F6F7CDEEAC21A944EE8
Authority key identifier: 58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/kO8JNI2SeoC0mocSeKqm2uoxTaQ.roa
Signing time: Sun 01 Jan 2023 22:14:45 +0000
ROA not before: Sun 01 Jan 2023 22:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43332
IP address blocks: 185.220.145.0/24 maxlen: 24
185.187.83.0/24 maxlen: 24
185.187.80.0/23 maxlen: 23
185.187.82.0/24 maxlen: 24
2a0b:9b80::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:66:cb:05:35:f4:1f:6f:7c:de:ea:c2:1a:94:4e:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5806da5a59251275ceb18694e17415352aedd6aa
Validity
Not Before: Jan 1 22:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=90ef09348d927a80b49a871278aaa6daea314da4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4f:a6:1c:6d:d8:99:61:6d:d4:d3:26:1b:22:
f9:75:2e:07:74:ea:dd:d1:7f:51:ef:a6:55:c6:3e:
4a:5b:8a:2c:40:4f:26:11:50:07:2d:2d:cd:f1:d1:
b0:5a:20:7d:a0:13:f1:a0:52:52:78:96:7b:3f:b6:
76:0c:9f:4c:f5:6d:90:0e:d5:29:9c:d4:54:b0:99:
97:02:8e:24:4d:96:31:a8:b7:33:4b:b0:4e:41:ef:
76:f2:86:75:7e:ed:51:e5:d6:63:af:3a:39:c5:1a:
58:43:ed:75:52:27:f3:ed:84:b9:ac:ca:e1:04:f1:
95:94:5c:46:55:ad:eb:85:a8:2f:82:89:3f:f3:95:
7b:bc:4d:93:71:28:ac:cb:d6:b8:2f:1d:4f:4f:e9:
80:59:fe:f8:0a:9f:1f:90:01:13:68:8d:bd:d1:0e:
ca:f2:f5:0b:e2:30:1c:aa:a8:43:fd:a1:7d:ab:4f:
a8:71:76:27:65:e9:4b:22:01:4c:6f:35:18:60:ce:
f3:6d:6a:5c:64:bb:83:e8:0b:9e:38:21:17:ec:1f:
0f:f7:1d:4b:6d:35:4f:16:d8:5a:5b:e2:f5:e5:c9:
79:4d:8c:b6:fc:55:6d:4a:79:c0:bd:e1:88:6b:17:
3b:0c:d1:8f:1b:c1:b1:8e:62:bd:01:48:7a:be:48:
88:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:EF:09:34:8D:92:7A:80:B4:9A:87:12:78:AA:A6:DA:EA:31:4D:A4
X509v3 Authority Key Identifier:
keyid:58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/kO8JNI2SeoC0mocSeKqm2uoxTaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.80.0/22
185.220.145.0/24
IPv6:
2a0b:9b80::/29
Signature Algorithm: sha256WithRSAEncryption
b8:f1:f0:51:ae:4d:d5:d8:1e:ab:43:e3:07:d2:68:01:e5:57:
d6:23:1f:50:78:34:72:7c:17:cf:dd:d2:dd:23:2b:ea:8f:9e:
03:a3:a1:07:0c:22:84:d4:2c:02:ab:d5:e6:c0:08:a4:a0:8d:
22:68:84:eb:8a:8c:46:41:69:84:ff:2e:0f:1d:39:83:44:e3:
5a:52:d6:c3:a3:9f:7c:ed:7e:45:d7:3e:e5:e2:f6:98:29:b1:
ae:93:f8:a8:70:fb:72:44:8c:3f:13:99:8b:b5:03:64:c2:bb:
5c:4f:80:62:2b:05:5b:3d:b1:52:6e:85:83:ed:a6:b5:14:02:
b2:8b:72:1b:3b:64:ca:13:04:5a:cc:01:92:d3:f2:f6:d2:69:
35:74:ec:20:25:03:c1:78:92:67:64:9a:bf:e3:92:df:8c:6b:
49:c8:8a:9a:f0:cd:be:88:45:2c:0f:b5:ea:a2:70:d7:9c:b5:
ca:0d:10:47:a2:a6:24:f0:f7:ec:ea:21:4e:34:19:f5:60:c2:
c7:6f:48:a8:55:c3:09:fd:eb:bd:52:5e:4c:8f:6f:0c:5a:11:
de:ec:da:c4:ae:6a:6a:94:87:c9:36:b9:2c:65:43:3b:48:8a:
6f:fd:6c:8b:5b:d6:ea:16:e8:d1:36:f7:9a:2b:cc:e2:90:35:
1e:b3:51:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:28:09 2024 by rpki-client on console-fra.rpki-client.org