Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/4Zc5JB1T79Wk9bktp0Z9jnW58pA.roa
File: 4Zc5JB1T79Wk9bktp0Z9jnW58pA.roa (raw, json)
Hash identifier: W3FU8z5KHvLFUcvygJ9YZH/oxwAKyLXMncdwZ2UAc1I=
Subject key identifier: E1:97:39:24:1D:53:EF:D5:A4:F5:B9:2D:A7:46:7D:8E:75:B9:F2:90
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 0188637F439D546B6E07C76BC53585A0DDF2
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/4Zc5JB1T79Wk9bktp0Z9jnW58pA.roa
Signing time: Sun 28 May 2023 17:54:24 +0000
ROA not before: Sun 28 May 2023 17:54:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 141159
IP address blocks: 185.182.49.0/24 maxlen: 32
185.133.195.0/24 maxlen: 32
185.182.48.0/24 maxlen: 32
185.236.83.0/24 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:63:7f:43:9d:54:6b:6e:07:c7:6b:c5:35:85:a0:dd:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: May 28 17:54:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e19739241d53efd5a4f5b92da7467d8e75b9f290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a4:0f:f9:a1:90:09:bf:a4:e8:e1:ea:fb:8a:
25:51:99:7e:e9:3b:52:04:43:e3:63:1c:b8:83:b3:
b1:b1:54:88:85:3d:c1:02:af:fe:4c:04:a6:4f:43:
f6:9a:cc:25:89:ae:f9:f5:5e:0a:ef:d7:cf:cb:9b:
a4:a7:a2:56:de:8d:11:3c:d0:10:0e:37:5d:94:84:
1c:44:c2:a5:98:ef:e3:89:59:07:80:3d:2d:fd:e3:
43:c7:79:a9:dd:2b:a5:1e:18:d6:c0:16:ba:d6:53:
69:4b:1f:6d:54:b7:77:03:28:8f:c1:bd:b7:ec:e2:
e8:51:4a:3a:33:68:63:35:ac:52:bd:27:37:0c:70:
b9:43:01:36:aa:8f:c4:16:e1:1a:ca:08:2a:81:20:
86:a3:fb:d5:6c:88:ac:7d:71:74:46:91:cf:fe:55:
0b:4d:24:64:45:3b:55:2a:ed:65:c6:a7:4a:17:b3:
b5:01:81:7c:4f:c8:0d:e9:33:3e:d0:70:ee:2b:7a:
30:5f:8f:e5:62:b9:00:00:31:85:6c:04:83:a4:cf:
fa:55:d1:d5:2e:b4:ac:1d:67:0e:1f:31:96:d0:02:
87:64:ba:e5:6e:62:2c:e3:47:69:90:a7:4f:42:47:
64:84:af:a6:47:db:5a:1f:f6:86:a4:b9:76:ab:48:
a2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:97:39:24:1D:53:EF:D5:A4:F5:B9:2D:A7:46:7D:8E:75:B9:F2:90
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/4Zc5JB1T79Wk9bktp0Z9jnW58pA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.195.0/24
185.182.48.0/23
185.236.83.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:5b:17:25:99:44:65:84:4e:08:e8:c7:71:de:dc:6d:75:04:
11:39:43:aa:a3:c2:6e:7e:9e:0a:f7:aa:96:00:b8:c4:42:8e:
e7:88:ae:6f:68:6c:69:31:4f:78:41:cc:15:7d:72:e1:de:08:
3a:69:41:25:c7:69:99:dc:bd:4a:26:fc:0e:53:93:17:17:d2:
4a:46:31:6a:5e:a9:0c:2e:21:32:97:57:1c:77:d3:9d:a1:8d:
c0:56:7d:5b:fd:ee:6d:8e:91:00:ac:6d:15:fd:d3:81:af:93:
d5:e1:8e:a0:42:ff:a7:cc:46:ba:e7:e2:75:c9:fe:38:97:5e:
2b:ad:68:6c:8b:82:fb:eb:31:fa:8d:e8:c8:16:14:bd:4b:86:
21:1c:73:07:7d:47:10:69:7c:85:c8:3c:2e:7d:9d:87:83:9b:
63:df:f8:8c:6e:03:60:0b:af:0e:56:7a:0b:23:d6:ad:fd:79:
04:24:ca:31:77:2a:01:76:c3:ee:e0:71:aa:d6:2a:fb:50:37:
65:f7:fa:27:a4:60:e7:f9:de:22:b7:b6:28:71:6a:2f:99:76:
95:db:46:8f:42:9f:72:6d:df:58:e6:b5:be:bf:d0:ef:82:6c:
e5:79:e4:2b:83:0a:0a:90:1b:53:fd:bc:96:bf:26:23:6a:d5:
fd:ae:2f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:17 2023 by rpki-client on console-fra.rpki-client.org