Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/lhFPzz37xc6qJskQNxHtoPhycXo.roa
File: lhFPzz37xc6qJskQNxHtoPhycXo.roa (raw, json)
Hash identifier: gcXens0sPgYJNG/MatmXzmXmMXu/f4W3RK7YTEa0U8o=
Subject key identifier: 96:11:4F:CF:3D:FB:C5:CE:AA:26:C9:10:37:11:ED:A0:F8:72:71:7A
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 01856C541A20CD7477F2EAED0DBE1AAA9A7B
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/lhFPzz37xc6qJskQNxHtoPhycXo.roa
Signing time: Sun 01 Jan 2023 07:55:28 +0000
ROA not before: Sun 01 Jan 2023 07:55:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212582
IP address blocks: 185.208.168.0/24 maxlen: 32
185.188.7.0/24 maxlen: 32
213.232.106.0/24 maxlen: 32
185.177.82.0/24 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:54:1a:20:cd:74:77:f2:ea:ed:0d:be:1a:aa:9a:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 07:55:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=96114fcf3dfbc5ceaa26c9103711eda0f872717a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ff:a9:e4:21:0e:4b:fc:cc:d6:6c:df:61:1d:
9a:fd:16:05:95:37:01:d4:3c:7d:35:33:2a:74:f8:
38:00:8a:7b:4f:82:fe:b1:ca:e6:1a:8e:6a:a9:b8:
33:b2:55:cf:17:0d:52:b5:b4:ef:0a:a2:ff:5e:e2:
07:31:e9:5b:11:3f:17:9a:42:5e:10:9f:c4:f2:88:
29:f8:b1:bd:31:fa:0a:84:27:42:10:4c:d3:ae:de:
85:ff:55:21:b1:ca:1a:33:5e:1b:01:3a:05:9b:8e:
d5:77:b2:2d:08:ed:8b:a2:5c:b6:ea:6b:b2:7e:f0:
9b:a8:3d:14:57:bf:53:eb:45:de:85:e5:49:fb:0f:
86:30:c0:c1:00:5f:6e:a2:75:9e:fa:20:d6:42:0f:
aa:98:d3:ae:eb:46:54:12:b2:75:8e:0f:4a:35:2e:
37:eb:1f:f7:78:42:49:bb:89:9d:d1:fc:f7:6d:6d:
25:49:66:3d:ee:c7:69:62:94:96:7f:07:ad:c5:69:
0a:da:c2:ed:22:48:d7:9f:88:68:6b:da:52:cf:94:
04:06:36:03:b7:57:8f:33:0d:96:54:ef:7a:d6:29:
52:2c:35:21:43:fb:32:f6:ca:c0:4d:c3:9e:8c:e2:
7d:c0:22:34:1f:9b:f9:69:85:a8:ec:c0:89:c5:26:
bd:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:11:4F:CF:3D:FB:C5:CE:AA:26:C9:10:37:11:ED:A0:F8:72:71:7A
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/lhFPzz37xc6qJskQNxHtoPhycXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.82.0/24
185.188.7.0/24
185.208.168.0/24
213.232.106.0/24
Signature Algorithm: sha256WithRSAEncryption
14:a8:46:ad:40:92:36:ee:cd:ed:26:02:7c:ab:23:57:bd:c1:
23:59:dc:4c:9b:08:73:5e:22:55:e3:24:ae:dc:14:f0:80:1b:
57:ec:3b:67:ff:03:3e:c6:ab:98:47:1e:3e:ff:01:85:d9:3d:
89:44:dc:63:2d:07:b0:50:24:4d:d7:8c:c1:73:9d:82:a3:10:
ce:a3:08:79:5f:a7:e3:b4:ac:3a:c8:ed:23:0c:74:24:84:0c:
75:9d:e8:3a:6a:11:77:1d:7f:f5:13:61:9d:cf:de:0b:77:e4:
00:2b:83:d7:c4:4d:95:25:f9:7a:f7:e8:70:57:d8:de:0c:c5:
11:53:de:cf:ce:08:4e:99:19:c6:69:78:00:b0:aa:fd:1c:e7:
5e:02:47:32:6d:f0:82:cb:f6:46:4b:58:e1:fe:70:1a:60:45:
f0:bf:9d:4f:1a:16:94:ea:96:0d:3a:82:20:24:62:67:12:30:
ec:11:08:54:49:72:6a:69:c6:0a:95:9e:31:c0:e5:71:02:4f:
e5:67:55:de:d3:23:43:c4:56:56:f4:be:a1:77:26:54:00:26:
48:a5:e9:7b:e2:79:fd:63:27:59:8b:72:b7:dd:0d:21:87:91:
a5:06:60:15:3d:e2:a9:81:aa:3b:1a:fa:21:dd:b6:21:99:b6:
70:a1:36:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:18 2023 by rpki-client on console-fra.rpki-client.org