Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/8xcEBpD1tM_WGNBt7R5b7bUGWJ4.roa
File: 8xcEBpD1tM_WGNBt7R5b7bUGWJ4.roa (raw, json)
Hash identifier: DkNVn0mTr9ZEAhjWEm4prLn0fEDmSCB6X77fOtD01lg=
Subject key identifier: F3:17:04:06:90:F5:B4:CF:D6:18:D0:6D:ED:1E:5B:ED:B5:06:58:9E
Certificate issuer: /CN=1d0c7e7bb27c533a997d277cadd417ec7bd284f0
Certificate serial: 01895529871F4837E649018086075F7B2739
Authority key identifier: 1D:0C:7E:7B:B2:7C:53:3A:99:7D:27:7C:AD:D4:17:EC:7B:D2:84:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/8xcEBpD1tM_WGNBt7R5b7bUGWJ4.roa
Signing time: Fri 14 Jul 2023 16:08:52 +0000
ROA not before: Fri 14 Jul 2023 16:08:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203324
IP address blocks: 185.238.85.0/24 maxlen: 24
185.238.86.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:55:29:87:1f:48:37:e6:49:01:80:86:07:5f:7b:27:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0c7e7bb27c533a997d277cadd417ec7bd284f0
Validity
Not Before: Jul 14 16:08:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f317040690f5b4cfd618d06ded1e5bedb506589e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0a:7b:52:35:46:5b:27:b4:41:16:30:23:f9:
04:08:35:d0:38:74:02:f2:66:ac:75:c3:c1:6a:f2:
eb:41:5b:c4:fb:6d:11:dd:7d:e7:ff:57:9e:92:70:
b6:12:12:61:58:e8:e2:ba:54:02:c3:fb:b4:a2:c4:
f7:fc:bb:5d:72:82:41:c5:e4:db:ca:2c:cc:42:b7:
c2:6c:78:a5:ed:87:9d:81:a9:43:e2:5b:65:76:84:
c9:2c:3c:64:01:a4:96:8b:8b:05:dc:c8:b9:49:f4:
97:3a:f8:40:68:c5:8e:34:0d:35:b7:23:99:59:09:
b4:72:0e:8a:fb:7d:67:47:3f:22:e1:24:d6:56:97:
3c:58:a3:41:b9:30:ce:3e:33:92:3d:8c:43:5e:91:
15:5d:54:ba:1c:34:4a:8a:3b:b8:d7:d7:5d:60:48:
73:53:92:a1:81:d6:ea:db:0c:53:36:81:b0:9d:66:
e6:8e:23:90:6a:65:0a:65:ff:44:17:06:89:0b:d8:
22:7a:5a:05:d7:71:95:e6:0a:db:81:9c:f5:41:25:
4b:81:5e:49:4a:d8:0d:33:de:1c:50:0f:c3:33:c5:
fd:fc:d5:93:ad:82:ea:b2:7d:08:b3:31:2c:69:1b:
a6:11:ee:85:b8:f8:74:fb:f4:0a:67:aa:fa:42:f3:
ab:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:17:04:06:90:F5:B4:CF:D6:18:D0:6D:ED:1E:5B:ED:B5:06:58:9E
X509v3 Authority Key Identifier:
keyid:1D:0C:7E:7B:B2:7C:53:3A:99:7D:27:7C:AD:D4:17:EC:7B:D2:84:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/8xcEBpD1tM_WGNBt7R5b7bUGWJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.85.0-185.238.86.255
Signature Algorithm: sha256WithRSAEncryption
0d:e2:39:68:28:cb:ef:2a:b7:87:e1:19:a9:94:a8:b8:79:92:
ba:8d:cf:c7:5c:44:d9:27:f0:cc:a7:bb:3b:2a:26:37:1f:d3:
db:24:f9:8d:1c:cf:43:fb:cc:01:5d:bd:c3:e5:b3:30:3a:f3:
5d:54:95:0e:49:de:c2:76:1e:59:e3:1d:2f:b4:d2:1e:75:85:
df:9d:9c:c9:2d:11:22:33:fe:eb:87:3a:7a:c4:59:19:70:83:
26:52:cb:8f:a9:c4:b0:ef:5f:55:42:07:cb:c5:ba:8f:57:10:
60:6a:f2:bc:a6:63:3d:e7:88:92:cf:05:ee:43:73:38:d6:06:
85:41:25:f6:24:bc:8c:0e:d3:48:6c:00:f9:54:cd:29:e9:40:
6c:76:d9:5e:62:23:d8:a2:86:09:b6:6c:51:67:95:f8:b7:85:
be:06:43:f2:08:a5:43:16:59:91:3d:39:45:a2:60:08:15:85:
9f:17:27:d3:c7:7a:48:2d:47:d2:7b:16:84:92:94:c7:9a:00:
d9:71:2f:81:41:e6:8f:25:fc:9e:c6:c9:fb:7a:86:bd:17:ca:
d9:50:2d:99:73:92:3e:29:16:da:2a:ad:a3:ff:87:ef:b5:dc:
b0:10:81:8d:9b:2c:0e:ff:fd:d6:d6:b8:9f:84:c9:e5:ed:02:
4a:6a:4f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 14 11:38:05 2023 by rpki-client on console-fra.rpki-client.org