Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/4A9uPzG7mB2Mbmk-2tzvKJhXRaw.roa
File: 4A9uPzG7mB2Mbmk-2tzvKJhXRaw.roa (raw, json)
Hash identifier: URMjl6y1s2ru2azF/pys4YjgsCzTnym2S8NBTfUvWXg=
Subject key identifier: E0:0F:6E:3F:31:BB:98:1D:8C:6E:69:3E:DA:DC:EF:28:98:57:45:AC
Certificate issuer: /CN=0c6fa156c57c4e885b9e6af8230b654d796a5611
Certificate serial: 0186BB444C0420064EEF45C25A8AC73071BA
Authority key identifier: 0C:6F:A1:56:C5:7C:4E:88:5B:9E:6A:F8:23:0B:65:4D:79:6A:56:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DG-hVsV8Tohbnmr4IwtlTXlqVhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/4A9uPzG7mB2Mbmk-2tzvKJhXRaw.roa
Signing time: Tue 07 Mar 2023 08:51:00 +0000
ROA not before: Tue 07 Mar 2023 08:51:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48391
IP address blocks: 185.115.168.0/24 maxlen: 24
185.115.171.0/24 maxlen: 24
185.115.169.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:bb:44:4c:04:20:06:4e:ef:45:c2:5a:8a:c7:30:71:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c6fa156c57c4e885b9e6af8230b654d796a5611
Validity
Not Before: Mar 7 08:51:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e00f6e3f31bb981d8c6e693edadcef28985745ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f4:88:6c:5b:94:76:e6:86:e0:7c:fa:73:10:
b0:25:32:5d:84:f8:74:59:a4:ac:af:4a:4b:fd:54:
80:3c:fa:4b:a1:cf:b1:76:d5:b0:45:88:cb:92:1b:
88:c2:b9:22:ea:ea:ed:4d:28:87:67:2f:32:0a:75:
27:45:48:db:9d:8e:3b:5a:ce:90:3e:5d:6e:1b:2a:
e2:1c:7e:a3:92:0a:a0:8f:e0:dd:53:61:ca:df:1b:
56:b9:a1:fe:2e:39:f5:ba:f1:b3:5e:c0:15:d7:a6:
de:e1:f3:8a:29:fa:f5:ee:f4:46:55:05:76:45:40:
bd:c7:ae:df:ad:84:f3:eb:6a:ed:11:4a:75:19:26:
94:a4:77:b5:fe:6c:3e:f9:e4:a7:d9:a3:68:b9:87:
94:f6:dd:3c:38:f5:22:e4:7e:00:dc:c8:92:55:d8:
ad:09:a7:53:a3:64:a0:82:e8:84:55:60:eb:8b:c6:
29:1c:f6:4d:5b:cc:4f:a1:65:99:6e:ba:91:51:2e:
76:2b:f4:18:7d:07:bb:f8:76:4f:51:1e:35:07:73:
a1:2a:15:0f:5e:1b:17:08:3e:ba:53:fb:a9:2c:e4:
8b:66:99:90:cb:36:54:35:e3:e0:5b:f3:83:89:1b:
62:5e:e5:3d:43:56:a3:aa:42:78:d5:93:cf:56:4a:
f3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:0F:6E:3F:31:BB:98:1D:8C:6E:69:3E:DA:DC:EF:28:98:57:45:AC
X509v3 Authority Key Identifier:
keyid:0C:6F:A1:56:C5:7C:4E:88:5B:9E:6A:F8:23:0B:65:4D:79:6A:56:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DG-hVsV8Tohbnmr4IwtlTXlqVhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/4A9uPzG7mB2Mbmk-2tzvKJhXRaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.168.0/23
185.115.171.0/24
Signature Algorithm: sha256WithRSAEncryption
22:86:d7:9c:47:35:fc:53:6e:4a:f2:70:c1:d2:76:2a:d8:7f:
98:74:99:ca:47:5b:07:08:ff:00:db:51:d4:12:f0:05:de:9f:
04:a0:e0:fa:eb:ab:31:01:f7:c6:3d:7d:47:7c:3c:bc:fc:8d:
a2:9a:e6:7b:c5:51:0c:13:26:be:0a:2b:58:88:b3:7d:48:77:
fa:0c:27:f6:5d:b2:62:c1:5c:2b:c8:6d:76:b2:38:8e:a9:7d:
d0:c2:26:77:51:0b:ca:13:16:38:64:ae:06:0b:59:e7:49:98:
97:21:06:11:b4:bc:ae:4c:9f:a0:74:d6:8f:7d:36:f5:5d:a0:
79:d7:7b:1a:78:d4:bd:f9:78:d1:d7:b5:82:a0:49:b6:b9:cc:
2e:35:36:0b:35:04:74:24:7a:c1:6f:9d:4c:b0:a4:4d:14:0e:
66:16:9e:a0:07:c7:ff:65:1c:4d:26:9f:ba:a2:40:24:38:7b:
bc:3e:de:69:f7:32:7a:8c:55:c5:d7:2b:98:21:81:f7:7a:be:
85:1f:65:05:61:40:10:f2:47:a0:a9:f1:b5:68:75:30:36:a0:
29:5c:c9:a6:98:a8:e7:62:fd:2a:d3:54:76:36:cf:36:e0:a7:
43:15:11:de:43:4d:f9:90:0f:1c:c9:24:3b:6f:d4:cf:b2:84:
c0:77:32:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:10 2023 by rpki-client on console-fra.rpki-client.org