Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/gH_v2UBRFzf8Ch_rA8PWIAXXPww.roa
File: gH_v2UBRFzf8Ch_rA8PWIAXXPww.roa (raw, json)
Hash identifier: pUt/WzvVk8XD2nL0TV2IE10VS5Pie2Twr1RlzUfDtOQ=
Subject key identifier: 80:7F:EF:D9:40:51:17:37:FC:0A:1F:EB:03:C3:D6:20:05:D7:3F:0C
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0185710C2E71FB8429850BE2C075BC0B98F0
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/gH_v2UBRFzf8Ch_rA8PWIAXXPww.roa
Signing time: Mon 02 Jan 2023 05:55:01 +0000
ROA not before: Mon 02 Jan 2023 05:55:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202578
IP address blocks: 193.34.234.0/24 maxlen: 24
185.233.201.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:2e:71:fb:84:29:85:0b:e2:c0:75:bc:0b:98:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 2 05:55:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=807fefd940511737fc0a1feb03c3d62005d73f0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:99:c0:46:7a:27:dc:d1:cb:e8:25:87:8d:88:
bf:bb:67:ea:14:c8:b1:65:28:b7:15:bc:f5:16:b0:
5d:f9:6b:31:28:6e:44:88:8a:d0:97:87:48:db:a2:
8d:16:0e:8f:64:20:32:6f:31:08:4b:b1:f2:89:e8:
3b:cd:d8:64:c0:25:67:57:fb:51:5d:53:b8:9a:2e:
09:f2:f0:10:25:ca:5c:79:e8:4d:c4:10:5d:74:9b:
9e:31:99:fe:3a:51:08:cc:69:86:de:a7:d8:55:b3:
a9:1a:ff:11:d3:da:4d:c7:08:1f:44:43:95:ea:b6:
75:ee:be:41:66:b6:31:81:6d:ae:50:c8:ae:d2:aa:
e1:70:e5:89:c8:1b:3f:17:c8:6f:a3:c5:ce:31:e1:
65:ea:a3:95:d7:8b:64:f9:69:26:1d:da:42:4b:59:
66:83:3b:ad:41:fe:d6:55:89:0c:23:b2:cf:d5:0f:
98:07:35:af:fe:bb:f0:40:41:6a:74:98:a3:bc:ed:
44:61:83:d0:0a:e6:52:76:a4:10:73:eb:4a:f7:cd:
1d:3d:d8:a0:00:a0:9f:40:72:eb:7e:16:0a:56:96:
6b:c9:d3:ff:71:62:1c:77:25:f0:4c:13:9f:61:e9:
d8:d4:7d:04:ee:0a:de:38:1e:30:c0:7e:1e:ac:8f:
57:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:7F:EF:D9:40:51:17:37:FC:0A:1F:EB:03:C3:D6:20:05:D7:3F:0C
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/gH_v2UBRFzf8Ch_rA8PWIAXXPww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.201.0/24
193.34.234.0/24
Signature Algorithm: sha256WithRSAEncryption
46:7f:3d:96:48:9e:82:92:da:f2:0c:c1:4a:3c:56:88:1a:55:
c2:2d:d5:74:b3:bf:4b:a3:53:da:c5:ae:9e:ef:e4:9e:81:e4:
35:b6:e7:ba:49:1e:ab:b2:c2:a2:09:32:5a:39:bb:80:db:91:
8c:b0:f7:85:f3:85:40:3b:39:5e:8d:3c:46:df:f0:dd:13:f4:
29:cb:e1:4c:b7:07:54:0f:4d:c3:14:af:61:07:a0:be:b1:5d:
21:6f:86:cb:c0:35:3e:30:14:3c:b8:6d:63:4a:56:1d:2b:2c:
dc:ce:0d:33:2a:fe:96:1e:53:ba:7a:58:8c:e7:90:0b:ee:e3:
0b:10:c5:d0:03:20:e0:4b:e0:eb:2f:0a:74:f7:a6:cd:e0:52:
4f:85:1c:53:ca:aa:57:98:1f:49:e6:c0:f6:46:d7:f2:59:42:
13:05:8c:14:48:64:90:44:89:8a:40:5f:f0:4e:78:d1:b2:51:
df:21:67:5e:1f:12:00:7a:44:05:4a:56:f3:8a:01:54:46:d3:
f1:d3:76:c7:44:71:1a:91:c0:0c:3a:42:3c:a7:6b:31:6d:c0:
55:9e:4c:2a:be:a8:9a:c4:31:95:5a:01:64:0c:5c:40:c0:89:
91:eb:ac:7e:10:dc:56:9e:e4:9e:a3:b7:bf:a0:ab:95:c0:f6:
71:61:54:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:02:23 2024 by rpki-client on console-ams.rpki-client.org