Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/5bWpCbTIoCmBz11utwzhJMt8CWc.roa
File: 5bWpCbTIoCmBz11utwzhJMt8CWc.roa (raw, json)
Hash identifier: G6Zml4mZAifrk70QjanmUASWdEEcWOYSAwy3O3AdpfA=
Subject key identifier: E5:B5:A9:09:B4:C8:A0:29:81:CF:5D:6E:B7:0C:E1:24:CB:7C:09:67
Certificate issuer: /CN=0c6fa156c57c4e885b9e6af8230b654d796a5611
Certificate serial: 0186BB444C508F6BAF1F9290057CEF2C4F39
Authority key identifier: 0C:6F:A1:56:C5:7C:4E:88:5B:9E:6A:F8:23:0B:65:4D:79:6A:56:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DG-hVsV8Tohbnmr4IwtlTXlqVhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/5bWpCbTIoCmBz11utwzhJMt8CWc.roa
Signing time: Tue 07 Mar 2023 08:51:00 +0000
ROA not before: Tue 07 Mar 2023 08:51:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199082
IP address blocks: 185.23.129.0/24 maxlen: 24
185.23.130.0/24 maxlen: 24
185.23.131.0/24 maxlen: 24
185.23.128.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:bb:44:4c:50:8f:6b:af:1f:92:90:05:7c:ef:2c:4f:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c6fa156c57c4e885b9e6af8230b654d796a5611
Validity
Not Before: Mar 7 08:51:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e5b5a909b4c8a02981cf5d6eb70ce124cb7c0967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:63:df:6c:15:06:ab:2a:cd:ca:25:b7:61:b7:
eb:35:1e:49:cf:f2:68:e6:b1:da:f0:13:c5:c3:76:
6e:f9:a0:99:23:cc:0b:b4:39:9b:31:a0:a6:59:cf:
4f:ec:1d:7d:39:a0:8a:07:cc:cc:61:49:19:7c:d7:
3f:5f:dc:7d:f9:9f:93:8c:ba:cd:2e:4b:da:f6:10:
f4:01:da:59:88:be:18:a2:7a:26:9a:ce:d5:77:3c:
03:5c:40:bf:70:7c:5e:af:3b:64:9a:84:23:1f:7c:
0b:7e:c3:3f:d1:25:d4:37:eb:a5:db:3e:06:28:67:
db:d4:6b:a1:f7:d3:87:5e:e8:69:3c:1d:ae:5f:45:
e8:65:4d:94:8d:36:6f:5e:a3:bb:24:23:ef:d8:37:
3e:f8:38:7f:54:fa:07:36:d0:76:83:a8:94:0c:62:
3d:45:3b:9d:2c:33:96:a1:d5:fd:2c:ca:e8:3b:d5:
03:7a:08:a2:90:31:39:2c:0a:5f:67:7e:8a:48:06:
81:73:f3:ea:0b:8a:3e:5d:c4:17:a4:84:97:11:e8:
c1:1d:cd:c7:3c:c9:54:61:bb:2d:11:64:52:35:dc:
c0:13:2c:12:e0:36:5a:dd:44:16:49:42:cb:4d:0b:
de:bc:c6:9b:4f:36:48:21:59:80:02:7d:be:4a:4e:
84:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B5:A9:09:B4:C8:A0:29:81:CF:5D:6E:B7:0C:E1:24:CB:7C:09:67
X509v3 Authority Key Identifier:
keyid:0C:6F:A1:56:C5:7C:4E:88:5B:9E:6A:F8:23:0B:65:4D:79:6A:56:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DG-hVsV8Tohbnmr4IwtlTXlqVhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/5bWpCbTIoCmBz11utwzhJMt8CWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.128.0/22
Signature Algorithm: sha256WithRSAEncryption
c4:20:73:dd:6b:de:d5:88:8d:cc:f1:eb:fa:fb:44:67:6f:35:
fb:5d:72:ed:ea:9c:33:c6:a6:c0:02:75:f1:26:44:5e:32:49:
b8:9c:9e:e8:5e:e4:4d:86:85:2b:71:81:72:b3:99:5a:16:21:
bc:db:f5:f2:ac:f4:79:0a:a6:99:4c:99:fc:eb:94:45:f0:ab:
1f:87:cc:13:3f:7b:04:d6:0e:05:5e:23:96:36:e3:c3:34:01:
12:41:97:61:a0:53:4b:64:d0:f1:76:02:9c:f2:08:e9:9d:a1:
e6:aa:91:9e:f4:01:d2:bc:a2:75:89:f2:e1:bb:ff:02:d5:05:
4f:6a:e8:7a:6a:c0:e4:9b:d4:b1:ba:b7:3b:7d:0c:0c:77:6f:
04:df:ea:57:20:24:f9:b4:19:35:e5:7f:b2:ee:d5:47:ef:d0:
83:cf:2e:1e:f3:ca:1b:81:ac:4d:19:9f:9b:b7:13:a1:e2:d1:
24:e1:ab:38:e8:2d:d2:9b:71:94:95:4e:28:50:3e:f3:aa:64:
d7:6d:d2:87:3e:85:73:64:7f:96:77:20:1e:32:79:a7:0c:da:
9f:55:a5:33:ee:73:e0:e5:9a:3d:3e:6e:fc:a4:f2:81:9b:23:
13:4c:54:b8:7a:89:d6:e4:4b:8b:f3:ce:69:85:5e:4f:b7:51:
40:4a:69:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:01 2023 by rpki-client on console-ams.rpki-client.org