Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/eLO6buQEwE0hOQ5NQmwI_4XhzIY.roa
File: eLO6buQEwE0hOQ5NQmwI_4XhzIY.roa (raw, json)
Hash identifier: aH2PbzwHkkLDgn4Ruz41H2GTvvfLmx6dh1+0yCqgIAs=
Subject key identifier: 78:B3:BA:6E:E4:04:C0:4D:21:39:0E:4D:42:6C:08:FF:85:E1:CC:86
Certificate issuer: /CN=dc4e453affe895b6452b84027437c5c00fd37067
Certificate serial: 0185730399DC18DBB5D4B1D9E9D8710B1BBA
Authority key identifier: DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/eLO6buQEwE0hOQ5NQmwI_4XhzIY.roa
Signing time: Mon 02 Jan 2023 15:04:53 +0000
ROA not before: Mon 02 Jan 2023 15:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41736
IP address blocks: 185.47.144.0/22 maxlen: 22
91.142.96.0/20 maxlen: 20
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:03:99:dc:18:db:b5:d4:b1:d9:e9:d8:71:0b:1b:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc4e453affe895b6452b84027437c5c00fd37067
Validity
Not Before: Jan 2 15:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=78b3ba6ee404c04d21390e4d426c08ff85e1cc86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:de:04:27:dd:42:09:41:60:8d:2f:3a:b0:72:
d6:41:bf:2b:85:96:b5:f3:3f:d1:d5:7e:78:14:08:
bf:49:90:f2:a3:12:da:f6:b6:3d:78:14:67:9c:77:
35:ce:f5:07:94:08:c3:82:76:c5:98:4b:ae:75:09:
ff:ea:84:94:e5:cf:39:73:5f:34:8e:7c:2e:18:c4:
d0:b1:e6:8f:5b:e7:bf:f9:9d:c1:60:2a:bb:35:a5:
1a:cb:22:c0:cc:fa:b0:ed:3e:c5:e0:cc:20:02:c4:
4b:cc:cd:c4:3b:97:a4:00:33:f4:95:8b:da:4c:fe:
99:a0:36:08:5e:66:1f:e1:20:fb:4a:18:0a:25:9f:
0f:c5:09:e2:9a:67:54:df:e9:39:3b:f2:b5:e4:2d:
63:eb:2d:12:b4:cc:ff:5b:11:4e:07:db:aa:b9:8d:
6f:bb:5b:ea:96:36:03:de:65:71:51:fc:e6:92:aa:
16:fc:1c:ce:9c:5a:f3:26:6c:d3:26:66:50:13:85:
81:7d:b1:63:f1:9a:e1:13:d6:ec:13:eb:13:a5:84:
4f:a5:9f:75:1d:7c:86:a2:30:dd:bd:6c:53:23:76:
92:8d:cc:64:06:0e:b4:7e:9e:e7:02:ce:a7:7a:49:
70:28:4d:cb:29:ed:b2:e4:60:41:41:8f:fb:01:22:
85:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B3:BA:6E:E4:04:C0:4D:21:39:0E:4D:42:6C:08:FF:85:E1:CC:86
X509v3 Authority Key Identifier:
keyid:DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/eLO6buQEwE0hOQ5NQmwI_4XhzIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.142.96.0/20
185.47.144.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:d1:5c:ae:e9:0b:1b:dd:47:65:09:04:86:6e:5d:07:cf:6b:
f1:ca:ed:a4:41:15:c3:5f:93:a9:79:11:c7:cf:1c:c3:82:11:
5e:aa:34:d6:8d:97:33:4d:f0:1a:c1:ee:22:f0:bb:d0:f3:4c:
22:18:ef:23:94:f2:63:50:9c:f8:cd:41:bf:de:29:88:10:ea:
84:7a:33:24:15:7f:46:d3:27:c5:e2:bd:f2:1a:cf:e1:78:6d:
5e:42:4a:ed:af:ff:fa:04:d5:87:83:b2:ad:cc:fd:b9:fd:41:
9b:dc:58:12:30:ae:a5:59:f1:8b:b9:f4:30:e2:90:33:c6:43:
9a:50:ed:15:e2:c3:de:b7:07:78:7b:cd:04:90:4b:17:71:6f:
da:ea:c9:ec:9f:16:c9:c8:00:9b:25:1b:f7:06:a3:b1:18:0d:
47:e8:cd:fb:2d:c9:9d:63:ef:bd:ba:8c:b2:24:40:c5:d1:a3:
2c:1e:64:de:99:61:0b:54:90:fb:69:6a:da:0c:9b:ac:bd:bc:
eb:3a:6d:fe:10:d3:92:4e:70:5c:72:55:47:77:3e:a0:65:ef:
fe:78:db:f1:9b:97:af:f7:93:77:29:4f:80:65:90:e1:8c:04:
29:54:55:18:7f:47:57:87:d0:f5:12:51:02:5c:86:ae:2d:76:
dc:a3:20:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 23 10:01:51 2023 by rpki-client on console-ams.rpki-client.org