Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/dUfA3vtYPmbNX_ahGs-xMjJMkO0.roa
File: dUfA3vtYPmbNX_ahGs-xMjJMkO0.roa (raw, json)
Hash identifier: mdQ4lKAfxgJsQ4cLAUpGs5R/ZNY9dvzaYH2tHn6N8CU=
Subject key identifier: 75:47:C0:DE:FB:58:3E:66:CD:5F:F6:A1:1A:CF:B1:32:32:4C:90:ED
Certificate issuer: /CN=2b8966d0f14fd59993ca4878e774fa4779036694
Certificate serial: 018C44043343013CCC6CA62CB309AB20E5E4
Authority key identifier: 2B:89:66:D0:F1:4F:D5:99:93:CA:48:78:E7:74:FA:47:79:03:66:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K4lm0PFP1ZmTykh453T6R3kDZpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/dUfA3vtYPmbNX_ahGs-xMjJMkO0.roa
Signing time: Thu 07 Dec 2023 11:22:55 +0000
ROA not before: Thu 07 Dec 2023 11:22:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57348
IP address blocks: 185.67.149.0/24 maxlen: 24
185.67.150.0/24 maxlen: 24
185.67.151.0/24 maxlen: 24
185.67.148.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:44:04:33:43:01:3c:cc:6c:a6:2c:b3:09:ab:20:e5:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b8966d0f14fd59993ca4878e774fa4779036694
Validity
Not Before: Dec 7 11:22:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7547c0defb583e66cd5ff6a11acfb132324c90ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:39:d8:e9:0f:a6:e1:24:fe:72:4f:93:b1:1d:
56:ec:61:44:ff:8a:ee:84:0d:25:bd:2c:82:c8:59:
1b:69:dc:a5:eb:7a:5c:97:c9:06:97:66:51:31:70:
b3:8c:64:4f:a2:23:cc:5b:98:2f:15:1b:27:15:5f:
fd:9b:0a:23:cf:11:98:44:ef:e3:1f:39:8f:fd:14:
33:f8:d0:21:eb:37:9f:71:83:ed:e5:d7:82:4d:a4:
45:f1:54:d1:2b:df:2b:d5:bd:3f:87:4f:79:90:88:
69:ab:ce:a8:0c:2b:dc:c1:af:6c:f3:6c:48:f5:e4:
76:39:52:0c:d0:11:b4:6e:6d:ab:4d:6b:d0:ba:54:
74:66:1b:67:ed:39:f1:eb:6e:c3:59:12:27:a9:93:
cd:0a:aa:8e:39:df:29:d1:8d:6d:fd:c4:66:d0:5d:
e6:ae:84:f0:a4:4f:8f:a8:44:0a:4e:4d:b2:8f:5c:
ea:ef:00:93:e2:78:c8:4f:41:36:42:51:cd:27:30:
b3:7b:21:83:9a:01:c7:03:43:72:d9:49:51:54:3e:
c0:3e:9d:10:e4:b9:f7:c6:68:e7:d4:d4:a2:84:3f:
ba:d1:d4:8d:25:92:ac:3a:01:b2:06:64:e2:bb:d9:
62:d3:b0:4f:8a:c5:04:9d:56:3c:4d:cb:96:8f:04:
a4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:47:C0:DE:FB:58:3E:66:CD:5F:F6:A1:1A:CF:B1:32:32:4C:90:ED
X509v3 Authority Key Identifier:
keyid:2B:89:66:D0:F1:4F:D5:99:93:CA:48:78:E7:74:FA:47:79:03:66:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K4lm0PFP1ZmTykh453T6R3kDZpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/dUfA3vtYPmbNX_ahGs-xMjJMkO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/K4lm0PFP1ZmTykh453T6R3kDZpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.67.148.0/22
Signature Algorithm: sha256WithRSAEncryption
77:92:f6:af:ab:24:ed:a6:ce:6d:32:f4:14:5f:55:e0:81:cc:
bb:af:de:ea:e2:32:d9:b9:76:1a:41:ce:cc:bb:90:a7:c5:17:
3a:8d:3a:44:3d:0b:cf:6b:d4:ca:30:7b:a3:dd:a6:0c:f9:26:
e4:22:0f:18:73:98:35:e8:aa:49:1e:31:2c:b7:59:6c:61:83:
81:c9:d5:45:b9:d1:f8:69:05:6a:c4:ca:59:fa:bb:1c:3c:db:
ea:8b:41:00:83:89:ce:71:27:aa:3b:ad:cd:15:f9:af:ec:52:
f9:a0:5c:e4:79:95:1a:2d:23:25:11:71:53:3a:7c:9f:af:2c:
74:33:73:da:4d:74:3e:e6:e7:82:3b:25:73:f1:b4:33:f5:0f:
ce:22:30:d4:25:27:9b:d6:be:46:f5:96:41:40:f2:0e:2f:7e:
39:2a:d7:18:86:fa:10:62:b8:82:58:67:bb:ef:07:48:a6:13:
32:f5:16:e3:cf:38:6f:9a:2b:c2:25:48:74:7d:9f:87:2a:fd:
27:f9:65:62:79:7a:f4:ac:7a:02:6b:5b:52:99:1e:81:fd:cd:
3f:f6:a4:4b:ac:a6:0a:3e:47:87:0a:b7:f3:85:a6:d9:03:be:
fe:a9:63:4c:70:c6:43:64:43:e8:7a:55:d8:c1:83:a8:dd:c8:
1c:67:08:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:39 2024 by rpki-client on console-ams.rpki-client.org