Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/sMisRhvyssrBBKQiFTQmUbvDi2M.roa
File: sMisRhvyssrBBKQiFTQmUbvDi2M.roa (raw, json)
Hash identifier: oo+X3iGc5qYvliIfrhD51cYlqSH2T4LnU84Up9hLBaE=
Subject key identifier: B0:C8:AC:46:1B:F2:B2:CA:C1:04:A4:22:15:34:26:51:BB:C3:8B:63
Certificate issuer: /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Certificate serial: 018A30115F97EDA736CB41B68B7962C86C62
Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/sMisRhvyssrBBKQiFTQmUbvDi2M.roa
Signing time: Sat 26 Aug 2023 04:19:19 +0000
ROA not before: Sat 26 Aug 2023 04:19:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 123.253.212.0/24 maxlen: 24
46.175.130.0/24 maxlen: 24
185.110.63.0/24 maxlen: 24
141.98.139.0/24 maxlen: 24
141.98.137.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:30:11:5f:97:ed:a7:36:cb:41:b6:8b:79:62:c8:6c:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Validity
Not Before: Aug 26 04:19:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b0c8ac461bf2b2cac104a42215342651bbc38b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:dd:f9:ce:1e:db:f8:28:b2:0c:09:54:09:9b:
b7:02:43:2a:53:aa:7c:63:d7:ea:05:f1:d7:1a:d7:
be:77:b8:39:31:28:e2:12:65:93:21:38:fa:78:68:
2f:06:c5:20:ce:6a:5b:a2:d4:12:f3:e1:e4:85:a7:
75:5a:f2:1f:e5:c6:fc:f4:9d:ab:d3:64:6a:0d:2c:
b3:e3:a0:af:39:c4:2d:72:19:28:50:64:15:06:3f:
50:e7:27:31:ce:88:00:1f:6d:eb:a2:d4:f2:fc:79:
86:2b:a4:03:ae:f4:06:f9:39:67:8d:18:9c:ab:ea:
e5:bb:1a:02:c7:71:bb:33:a0:d9:d2:8b:c0:01:52:
ca:ef:e4:33:9c:d4:a0:37:5e:12:db:18:b9:87:1c:
ce:fc:42:bd:fa:51:4c:7e:5e:72:20:76:4a:58:5e:
d0:7b:2e:ca:e4:19:18:12:3b:e2:f1:ff:20:49:35:
fe:48:52:c9:df:f9:1f:5c:91:ab:24:2b:19:11:bb:
2b:f7:1d:72:f4:ee:e3:35:c4:db:33:d8:32:fa:34:
21:ff:73:72:27:ae:d8:d8:c7:bd:16:69:98:ee:11:
7e:d9:ca:25:1b:4c:32:a3:b8:09:45:54:ec:bd:5f:
38:5a:57:e9:ce:30:0c:30:a6:ad:1a:af:83:bc:ac:
0a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C8:AC:46:1B:F2:B2:CA:C1:04:A4:22:15:34:26:51:BB:C3:8B:63
X509v3 Authority Key Identifier:
keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/sMisRhvyssrBBKQiFTQmUbvDi2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.175.130.0/24
123.253.212.0/24
141.98.137.0/24
141.98.139.0/24
185.110.63.0/24
Signature Algorithm: sha256WithRSAEncryption
03:8c:32:c0:05:9b:98:60:3c:da:1f:81:ff:c4:df:14:8b:a9:
cf:32:bb:88:bb:55:57:e2:58:3a:a2:47:80:18:b7:ee:ff:d6:
8e:3d:cc:e6:fc:e7:9d:40:fa:62:4a:6e:5f:1e:32:cc:10:2f:
a4:a2:a3:be:41:e2:c6:de:82:29:0a:f2:0f:ee:d3:c3:44:33:
71:bb:fd:b5:db:e4:18:30:eb:92:0f:70:21:29:83:c0:7c:45:
68:3c:ae:c7:fc:6d:09:45:bc:0e:e6:12:18:dd:c5:be:c9:0e:
41:bb:04:0d:38:e2:e2:d7:c5:2c:a8:d4:3a:33:5c:6d:73:6d:
c7:b1:13:83:7f:0e:fd:8a:e5:de:9c:90:8a:19:6a:4b:76:85:
23:78:27:64:57:c4:58:c4:90:39:70:77:39:49:0e:1e:42:9b:
63:c7:ee:67:44:0a:91:40:6a:0c:1e:c7:a2:0b:07:0d:a4:f3:
2f:dc:e1:48:95:1c:d3:9e:0e:76:47:77:33:10:d1:a4:4d:d5:
54:d4:47:c1:c2:d6:66:29:93:7c:1f:8c:f5:df:3d:d1:d9:f7:
53:3c:b6:54:b2:be:0c:3f:62:7b:21:54:df:db:a6:cf:65:94:
24:fe:8a:92:f1:b9:4e:01:02:74:78:62:9f:1e:c0:1a:52:0d:
0a:1f:e8:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 5 09:42:51 2023 by rpki-client on console-ams.rpki-client.org