Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/8Ssu9AOqbjjvyZ1AUaNek_G-hAk.roa
File: 8Ssu9AOqbjjvyZ1AUaNek_G-hAk.roa (raw, json)
Hash identifier: KlJ5Lv92H8133AqqH/Gbe2zVR4dfBIN9NZwr/9OeWL0=
Subject key identifier: F1:2B:2E:F4:03:AA:6E:38:EF:C9:9D:40:51:A3:5E:93:F1:BE:84:09
Certificate issuer: /CN=e9e4dc968ed52935a04dee3b229c21ca9bfdbd7e
Certificate serial: 018602B46F7A9A95D1E1E0A2A81DF38A62EB
Authority key identifier: E9:E4:DC:96:8E:D5:29:35:A0:4D:EE:3B:22:9C:21:CA:9B:FD:BD:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6eTclo7VKTWgTe47Ipwhypv9vX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/8Ssu9AOqbjjvyZ1AUaNek_G-hAk.roa
Signing time: Mon 30 Jan 2023 12:43:44 +0000
ROA not before: Mon 30 Jan 2023 12:43:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51248
IP address blocks: 185.8.56.0/22 maxlen: 24
176.74.216.0/21 maxlen: 24
91.241.168.0/21 maxlen: 24
158.255.32.0/21 maxlen: 24
188.124.56.0/21 maxlen: 24
158.255.39.0/24 maxlen: 24
193.161.84.0/22 maxlen: 24
5.43.224.0/21 maxlen: 24
2a03:1840:1::/48 maxlen: 64
2a03:1840:2::/48 maxlen: 64
2a03:1840::/48 maxlen: 64
2a03:1840:3::/48 maxlen: 64
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:02:b4:6f:7a:9a:95:d1:e1:e0:a2:a8:1d:f3:8a:62:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9e4dc968ed52935a04dee3b229c21ca9bfdbd7e
Validity
Not Before: Jan 30 12:43:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f12b2ef403aa6e38efc99d4051a35e93f1be8409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4d:29:49:fa:18:9f:d9:79:69:2e:58:46:59:
4f:c5:a8:05:83:f4:e1:1f:e5:0a:b7:2d:a8:b0:27:
ec:31:68:82:f8:d0:8f:1c:95:7f:3a:6f:b9:01:fa:
9a:92:5f:a9:61:3c:0e:13:97:af:2e:85:0d:7b:57:
16:b0:23:c0:0f:bf:b6:66:10:a2:f9:8e:4c:7d:19:
b3:e8:78:c7:d7:83:80:45:e1:c9:bc:29:63:52:6a:
06:d4:36:ae:ec:56:95:c5:ad:d6:28:2d:cb:87:ce:
2f:c7:fd:ee:66:c1:9a:ca:9a:37:56:28:60:10:95:
32:4e:71:35:35:5d:93:94:9f:b9:15:a3:f9:75:da:
7e:ae:dd:c7:1e:53:f6:e1:1c:70:02:fa:2e:9d:14:
6c:c0:05:c1:25:79:76:3c:63:f7:f4:1b:cf:83:9c:
35:63:7c:29:60:7c:97:96:75:e6:a7:99:1f:34:dd:
e3:6a:13:cf:06:0a:03:7f:e0:09:e7:7b:c5:c9:23:
bf:d0:43:87:3b:34:b7:2e:aa:7a:0b:e0:62:78:7b:
99:e0:b2:b2:4a:c3:46:a9:f1:ec:0b:2e:4b:9e:23:
c0:12:99:f0:cf:38:7e:2a:2f:1b:2e:4c:9a:3b:d7:
b8:a7:89:87:84:f5:2a:db:c4:e5:98:47:3e:3c:74:
77:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:2B:2E:F4:03:AA:6E:38:EF:C9:9D:40:51:A3:5E:93:F1:BE:84:09
X509v3 Authority Key Identifier:
keyid:E9:E4:DC:96:8E:D5:29:35:A0:4D:EE:3B:22:9C:21:CA:9B:FD:BD:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6eTclo7VKTWgTe47Ipwhypv9vX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/8Ssu9AOqbjjvyZ1AUaNek_G-hAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/6eTclo7VKTWgTe47Ipwhypv9vX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.43.224.0/21
91.241.168.0/21
158.255.32.0/21
176.74.216.0/21
185.8.56.0/22
188.124.56.0/21
193.161.84.0/22
IPv6:
2a03:1840::/46
Signature Algorithm: sha256WithRSAEncryption
4e:4c:30:79:36:1d:f3:88:bc:a6:18:69:40:4c:15:d3:0b:ce:
b0:f8:0a:c5:06:bf:ca:07:1d:4e:10:68:41:d0:e4:86:3c:8a:
d2:1e:65:91:0a:20:4d:ec:92:c3:2c:23:72:2b:5f:6d:7e:bc:
39:fd:78:c8:d8:c8:73:67:0f:8a:6c:5d:77:68:3a:77:56:69:
de:82:f4:71:df:c2:c0:21:a8:c1:46:9a:25:64:98:f4:13:be:
f7:aa:34:e9:3c:e5:9b:af:6a:6d:97:be:d0:46:c6:b7:f1:81:
94:92:eb:88:fd:b5:d4:35:ea:43:1b:01:6e:c8:d7:a9:90:74:
15:2b:a0:8b:8d:88:ea:02:4e:04:a3:a5:92:b6:b7:69:de:65:
9b:51:e5:2b:9e:bd:50:09:fb:f0:bd:d4:4e:44:21:f1:8d:55:
a8:3a:8e:cc:2f:bb:60:c0:1e:14:8f:88:f5:19:01:b4:70:60:
44:24:2f:c0:2a:6c:48:8e:c5:cd:2f:04:30:c4:1c:68:29:d7:
62:5f:75:fc:45:d0:79:78:16:a1:2e:e8:9b:4c:bb:87:29:67:
36:4e:2d:63:e0:79:c5:41:24:57:d0:ca:a8:5c:12:cf:13:55:
76:13:40:b3:1c:00:81:67:db:64:0f:4d:1b:8d:7c:06:07:38:
62:3c:35:22
-----BEGIN CERTIFICATE-----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Generated at Wed Sep 13 06:26:13 2023 by rpki-client on console-fra.rpki-client.org