Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/ILi3a7hvKVD2HiBfNhx_s8EF4b8.roa
File: ILi3a7hvKVD2HiBfNhx_s8EF4b8.roa (raw, json)
Hash identifier: VAW8ECscbsLgLn4y0DWRRl59l9IB1XhkNBIzyEOwYlw=
Subject key identifier: 20:B8:B7:6B:B8:6F:29:50:F6:1E:20:5F:36:1C:7F:B3:C1:05:E1:BF
Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Certificate serial: 018571155161F3C86D01922E1AE63318A849
Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/ILi3a7hvKVD2HiBfNhx_s8EF4b8.roa
Signing time: Mon 02 Jan 2023 06:05:00 +0000
ROA not before: Mon 02 Jan 2023 06:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60448
IP address blocks: 89.174.26.0/23 maxlen: 23
89.174.25.0/24 maxlen: 24
85.219.192.0/24 maxlen: 24
89.174.184.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:15:51:61:f3:c8:6d:01:92:2e:1a:e6:33:18:a8:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Validity
Not Before: Jan 2 06:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=20b8b76bb86f2950f61e205f361c7fb3c105e1bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f7:6f:a7:de:07:e9:e0:71:63:a2:93:fa:01:
94:89:01:65:31:b4:49:5b:0c:9a:50:69:cf:d5:cd:
93:e9:ff:f5:0c:84:86:0c:b9:92:17:c2:7a:45:9f:
a9:aa:60:30:2d:db:f9:a2:fa:79:c7:b5:2a:b5:37:
58:80:15:e3:a1:b3:20:68:da:11:17:a3:3c:b1:c7:
d6:d6:36:5f:cf:90:fd:07:4c:01:19:b8:6a:d2:52:
15:e2:72:f0:9e:e7:82:4c:d0:d3:ce:85:48:ac:9e:
f2:29:ac:25:ff:0e:0d:d7:ba:66:47:ec:04:6c:c8:
ed:6e:eb:bf:c6:8d:31:ac:fd:c5:0c:b5:9e:ad:a5:
85:aa:7f:10:c7:cd:22:30:d5:71:0d:fd:69:66:60:
58:2f:f8:15:11:e4:16:d3:2e:1c:75:26:8a:e8:ff:
ad:f0:3f:c1:c9:30:b7:e3:88:4d:38:3e:e7:69:54:
0c:49:a0:27:39:2f:73:4b:68:98:a1:0d:3d:41:7f:
ac:7a:53:62:40:48:8b:21:8e:86:7c:e0:8e:43:28:
6e:6c:16:89:97:6c:a1:c5:96:3c:f8:8e:c5:21:d2:
8c:48:d2:94:79:b7:60:68:c6:35:10:9e:4b:16:d3:
d9:ee:b0:2d:1a:d2:82:3b:1d:d2:70:29:dd:a3:7a:
6d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B8:B7:6B:B8:6F:29:50:F6:1E:20:5F:36:1C:7F:B3:C1:05:E1:BF
X509v3 Authority Key Identifier:
keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/ILi3a7hvKVD2HiBfNhx_s8EF4b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.219.192.0/24
89.174.25.0-89.174.27.255
89.174.184.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:d3:19:06:25:81:2c:ef:52:3b:5a:78:e8:c9:36:60:bc:db:
f2:af:10:87:6c:e9:92:ab:f6:4d:b5:ab:eb:38:6d:81:af:50:
0c:f7:90:5e:e1:1f:c2:10:04:90:9f:19:78:b1:59:f9:a8:8a:
49:bf:b8:a7:85:8f:a6:d1:ae:54:d7:17:93:c8:b6:a8:71:58:
10:64:35:c8:79:e0:4c:c9:23:1b:a8:95:fa:6e:df:bb:96:b8:
ad:ef:b7:18:fc:b1:fb:4f:0b:64:eb:9f:33:3f:ac:02:2e:65:
42:b5:de:bd:55:93:eb:e6:f9:92:ad:96:b7:dc:de:9e:73:2c:
a3:0b:ea:a1:f3:5a:f3:c9:8e:ac:de:29:92:4e:86:40:26:78:
06:8d:cc:59:84:23:d3:72:b0:83:1e:41:02:fd:56:e6:86:a7:
2e:ea:3f:be:93:00:89:d3:7a:48:d3:f0:21:63:aa:04:b5:3f:
24:4d:86:9b:c7:be:44:c1:f1:7f:33:bd:e1:95:ca:68:e7:61:
9f:ff:28:44:f5:5e:84:9c:2a:19:08:f6:42:20:1c:a8:f8:71:
5e:b3:40:9e:41:c1:04:15:85:89:4c:3d:8c:a9:fe:47:6c:e8:
e7:16:91:0e:67:af:d0:d6:db:e6:9e:da:0f:03:88:e9:a0:48:
34:e6:67:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:41:22 2024 by rpki-client on console-ams.rpki-client.org